Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/qGmTLx9GcVndDErv-4IrZ6cup2k.roa
File: qGmTLx9GcVndDErv-4IrZ6cup2k.roa (raw, json)
Hash identifier: QjmVp+1OL3dd8ryZIev78BotEAExsmY7ye5vkrqyA4U=
Subject key identifier: A8:69:93:2F:1F:46:71:59:DD:0C:4A:EF:FB:82:2B:67:A7:2E:A7:69
Certificate issuer: /CN=03d17bc7ebebdcc9f1b3fdb55ad122e7062243e2
Certificate serial: 01845BD96BDE88E8E4CBEFFF673F24F712C1
Authority key identifier: 03:D1:7B:C7:EB:EB:DC:C9:F1:B3:FD:B5:5A:D1:22:E7:06:22:43:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/qGmTLx9GcVndDErv-4IrZ6cup2k.roa
Signing time: Wed 09 Nov 2022 10:04:46 +0000
ROA not before: Wed 09 Nov 2022 10:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 185.151.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:d9:6b:de:88:e8:e4:cb:ef:ff:67:3f:24:f7:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d17bc7ebebdcc9f1b3fdb55ad122e7062243e2
Validity
Not Before: Nov 9 10:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a869932f1f467159dd0c4aeffb822b67a72ea769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:37:38:9c:9a:8b:c9:e4:71:1e:f0:ea:41:aa:
5c:f9:dc:a2:81:d6:29:28:2d:31:a1:05:12:b7:c3:
5d:f5:97:f5:4f:d2:c7:f7:ae:b0:f0:76:d9:7e:4a:
c8:cb:04:6d:5c:8c:47:c5:29:8e:73:78:97:10:6c:
a5:9d:ae:56:7d:5a:7c:db:d5:28:dd:41:07:f0:63:
db:4b:fb:c1:24:c0:0a:21:1d:7f:77:68:50:4f:5a:
e0:7c:cc:b1:ae:fc:f2:e1:fe:9a:4d:5c:79:56:a1:
e1:e5:fa:50:c5:92:25:71:82:ff:10:e5:03:f1:c7:
94:fe:71:bb:f5:f8:db:e9:9e:87:c3:eb:8b:6d:d8:
ae:1f:14:93:4f:a9:a4:21:a9:9a:7c:0c:f3:f2:f3:
41:48:b1:0d:14:79:d4:75:08:c7:24:82:c3:1c:a1:
2b:c2:44:2c:37:b9:ae:a0:c2:35:a0:ee:65:67:c7:
df:d5:07:61:25:06:a2:7b:1c:b5:33:56:89:36:97:
bc:36:26:39:a4:a0:32:aa:8e:bb:b3:d4:c1:07:ab:
89:12:89:e2:d6:ef:de:39:6c:44:59:db:84:78:5b:
67:40:c0:87:75:e3:99:6c:e0:13:cd:65:1c:80:af:
db:59:1f:fd:9a:69:aa:21:71:09:77:1f:65:8a:ed:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:93:2F:1F:46:71:59:DD:0C:4A:EF:FB:82:2B:67:A7:2E:A7:69
X509v3 Authority Key Identifier:
keyid:03:D1:7B:C7:EB:EB:DC:C9:F1:B3:FD:B5:5A:D1:22:E7:06:22:43:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/qGmTLx9GcVndDErv-4IrZ6cup2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/21582f-511a-4af3-8028-e2d88376d44d/1/A9F7x-vr3Mnxs_21WtEi5wYiQ-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.146.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:48:0b:1d:09:ab:3c:b0:99:09:46:c3:23:07:5c:9b:a2:51:
2b:ee:4f:f7:74:e1:75:ef:38:5c:a8:7d:93:cd:95:22:ce:0b:
55:12:8c:63:4b:85:c7:25:6c:c2:07:ef:4f:d1:0d:6c:70:aa:
d7:c0:e3:ad:89:94:85:f2:c1:30:3d:6a:70:81:e9:6f:16:32:
d4:d6:de:d9:d8:72:d4:34:c6:8e:84:20:9c:e5:37:50:90:a8:
f6:77:b8:c4:d7:21:0f:28:9a:cc:bb:95:0c:56:0c:b7:90:d1:
cb:c9:b8:ed:82:a3:99:06:29:55:89:db:b2:09:ee:e9:51:c8:
34:8d:ea:fe:df:a2:4b:c8:26:27:0a:8e:a9:01:d7:cb:e5:f1:
30:f9:bf:a2:61:e9:23:90:f5:cc:1e:6d:a2:f6:2c:07:43:86:
b8:bf:21:5a:3e:80:e9:cc:f7:b4:8b:4e:6b:63:6e:49:e0:b7:
77:2c:a0:38:04:3f:0a:2a:18:f0:7c:d9:a7:e9:d7:38:18:94:
5f:57:fe:c7:fe:76:f4:62:97:d4:8d:d3:64:a9:8b:bd:2e:73:
33:9c:f1:8c:59:96:d3:e9:8d:38:4f:09:35:e0:0f:bc:9c:4d:
0a:dc:47:e5:64:ef:89:21:27:e2:0d:3a:ba:14:63:e8:18:06:
54:b6:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org