Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/Qo9CC95Sazu97E3NfxG8LhpxHlk.roa
File: Qo9CC95Sazu97E3NfxG8LhpxHlk.roa (raw, json)
Hash identifier: zbHP+ZpjfzbuSSXg8Ra2SfadF9rZhcHc0yW6p4BqI04=
Subject key identifier: 42:8F:42:0B:DE:52:6B:3B:BD:EC:4D:CD:7F:11:BC:2E:1A:71:1E:59
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08F6DF22
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/Qo9CC95Sazu97E3NfxG8LhpxHlk.roa
Signing time: Tue 22 Mar 2022 22:01:36 +0000
ROA not before: Tue 22 Mar 2022 22:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150396706 (0x8f6df22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 22 22:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=428f420bde526b3bbdec4dcd7f11bc2e1a711e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:02:94:b7:12:07:f8:ad:48:c1:71:40:c1:
24:78:c9:56:ed:26:1d:7f:a3:20:e5:93:1b:a8:97:
3c:50:2a:eb:22:6e:91:88:b4:cf:31:66:4c:ab:50:
dc:3f:7e:4a:45:e0:96:50:d3:a8:d9:cd:a5:f9:10:
45:eb:e7:87:4e:4c:f1:f6:95:19:95:0e:fc:c5:bb:
8f:29:73:30:7d:ad:f9:90:f3:5f:31:c2:32:ee:76:
2b:cf:70:79:4c:6c:81:e4:7f:02:a8:5e:f7:8f:25:
6a:50:07:01:b9:c5:84:bb:21:2c:ad:b8:16:a0:fe:
1d:1c:08:84:30:a4:b3:eb:c0:ae:f8:7c:c9:42:36:
bb:fa:f7:7b:e8:1a:08:a3:88:5f:b7:bf:82:c2:cc:
9a:2d:88:5d:ca:c9:6c:c1:98:f2:36:ba:e5:1a:40:
c0:81:b3:2b:b4:d1:de:db:2a:42:71:e7:a8:cb:07:
03:af:da:f7:ab:31:2d:e6:02:8f:b8:f4:41:e0:e5:
31:33:a3:5e:95:94:c7:7f:98:d4:24:bf:f7:bc:78:
10:70:48:ea:21:58:b8:de:cd:e5:33:4a:74:f4:54:
bd:f1:40:7a:ee:d4:ca:d3:a1:9f:0b:33:7b:a1:66:
08:66:90:0b:11:b7:93:6f:42:e3:3e:bd:b7:96:7f:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:42:0B:DE:52:6B:3B:BD:EC:4D:CD:7F:11:BC:2E:1A:71:1E:59
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/Qo9CC95Sazu97E3NfxG8LhpxHlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.4.0/24
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
7c:7c:64:3c:91:17:76:72:00:19:8f:a0:1d:a2:9a:47:f1:7a:
5e:ac:db:59:eb:0a:27:d5:79:46:e2:2e:56:16:75:e7:6c:79:
94:f9:11:98:10:cf:f0:0b:54:db:14:fa:78:8f:2e:13:00:4d:
a1:5c:9a:98:c4:b4:35:80:db:36:4d:71:55:6d:60:9c:c2:e4:
ea:1f:61:91:05:ae:d1:fe:45:ec:ab:48:dc:39:96:fe:12:63:
24:34:76:f8:a8:fd:ba:8e:ca:8a:f8:d1:78:ef:85:4f:38:16:
a3:92:aa:ef:e4:7b:c3:99:c8:53:0c:2c:e2:0c:c4:ad:44:f6:
51:4b:b3:51:ea:b2:e7:5c:f0:21:9c:b5:45:7f:6f:71:65:b7:
aa:d0:0c:bc:e0:c0:3a:bd:55:25:99:94:80:4f:cf:73:8f:d8:
3e:98:24:5c:1e:39:10:a0:c2:67:08:93:87:11:ca:a1:53:6f:
c9:25:e7:c6:a3:10:9e:af:c6:d8:52:0d:dc:f7:79:0a:c6:14:
03:21:fe:49:2c:52:dc:61:02:e3:8a:96:7d:e0:02:fb:8a:03:
a4:b2:d8:db:b7:54:c5:d2:da:89:d1:4f:ff:00:91:f0:87:31:
74:71:4d:a7:70:6b:1b:4d:74:e8:c6:67:55:55:b7:4d:2b:4b:
99:e2:30:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org