Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/qa0UdfHEPUxHTWWRgsHL_lleSQo.roa
File: qa0UdfHEPUxHTWWRgsHL_lleSQo.roa (raw, json)
Hash identifier: rYAkevm/yKNEBAeWD4/3tOGhLHkdeqMZOf/o2gwryFQ=
Subject key identifier: A9:AD:14:75:F1:C4:3D:4C:47:4D:65:91:82:C1:CB:FE:59:5E:49:0A
Certificate issuer: /CN=7b70bd98ee21138dd2436440f53cfa10160ee073
Certificate serial: EDC398
Authority key identifier: 7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/qa0UdfHEPUxHTWWRgsHL_lleSQo.roa
Signing time: Sat 01 Jan 2022 04:59:10 +0000
ROA not before: Sat 01 Jan 2022 04:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25145
IP address blocks: 193.163.88.0/24 maxlen: 24
2a11:1ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15582104 (0xedc398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b70bd98ee21138dd2436440f53cfa10160ee073
Validity
Not Before: Jan 1 04:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9ad1475f1c43d4c474d659182c1cbfe595e490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:8a:52:cc:07:3a:ec:29:41:ed:c5:0d:db:
06:f7:56:6f:07:f7:51:f3:f7:cf:e8:17:30:d2:f2:
17:1c:ea:63:ea:f7:47:9e:e8:da:41:6c:c3:f6:26:
84:1a:ca:05:ba:84:cb:63:51:be:e1:74:92:73:58:
37:7e:05:77:3b:bb:7c:f8:cc:38:a3:e0:22:b6:78:
dc:aa:6e:38:1e:06:1e:ff:14:42:52:f8:d2:a3:40:
a6:1c:e1:f3:13:d5:61:97:80:1b:2d:89:4e:5f:f0:
d8:5a:2f:c8:9c:1a:37:52:0e:63:a2:4c:48:a3:c0:
c9:be:59:9f:c5:33:ef:fa:a2:1d:f6:36:cd:3c:a3:
b4:33:79:5c:7b:2e:ff:81:72:ad:88:34:d5:5d:5f:
8a:87:f7:d6:01:9a:e1:d5:11:bc:2a:6c:d6:88:c0:
0f:e6:24:92:93:c4:3f:12:ea:45:58:6d:40:d7:6c:
28:72:b7:01:11:a8:23:d0:ad:9b:69:4b:3f:f6:ed:
93:51:56:bf:67:44:c9:ec:7a:81:81:b8:4b:a6:72:
00:db:73:b3:8a:00:fc:fb:73:14:14:16:e3:1b:b2:
45:0d:f1:3c:54:8f:8b:a7:5a:9a:f4:70:68:ee:e4:
ab:50:e9:d1:31:44:97:76:68:8d:d4:25:15:b3:4c:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:14:75:F1:C4:3D:4C:47:4D:65:91:82:C1:CB:FE:59:5E:49:0A
X509v3 Authority Key Identifier:
keyid:7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/qa0UdfHEPUxHTWWRgsHL_lleSQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.88.0/24
IPv6:
2a11:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:3e:56:40:a1:2f:7a:77:04:a4:eb:48:0d:7b:b2:f5:ef:1e:
38:fa:55:ef:ef:1a:6a:f5:13:24:fc:ed:ad:93:e0:51:0a:3d:
27:34:ec:9b:51:e7:61:4d:cd:82:16:f0:45:4c:53:d4:97:16:
dd:f7:61:a1:8c:58:44:7d:b7:6f:af:90:31:78:d8:3e:0f:8e:
a8:45:e0:79:76:13:a6:c6:ae:0e:7a:c8:bf:00:ba:9c:fd:f5:
bc:97:0f:1a:3e:08:62:31:23:1a:56:33:f9:b6:48:85:d9:b0:
26:41:c9:79:c2:d3:af:14:aa:64:36:ca:08:de:a1:5a:f6:f0:
3f:68:2c:de:dc:3d:36:ba:9d:7f:1f:f0:2b:5c:ea:15:ae:2b:
69:e7:92:fc:17:8e:58:65:10:75:e6:50:0b:2f:64:4f:5b:e0:
ae:58:4a:f4:df:05:25:48:ba:56:6a:fb:3e:1c:e1:e0:fd:29:
0b:a1:8f:44:22:a2:52:46:0a:9c:8a:d7:31:6f:5a:47:d7:5b:
79:4a:35:a5:3a:b8:8c:fb:51:78:82:25:42:49:d7:79:2b:34:
c9:c4:6f:a6:a8:4e:4c:8d:03:b2:1a:87:c8:83:2f:9b:59:e5:
62:16:4a:db:41:22:78:6b:9d:0e:3a:1d:03:cc:3e:f0:da:09:
e8:30:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org