Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/qoo_pnPnJFzXOGk8Va3739D9RZ8.roa
File: qoo_pnPnJFzXOGk8Va3739D9RZ8.roa (raw, json)
Hash identifier: tG8iBGqo0poVSM95xN/SpSZUP5alEOuXQzZvLEohF0w=
Subject key identifier: AA:8A:3F:A6:73:E7:24:5C:D7:38:69:3C:55:AD:FB:DF:D0:FD:45:9F
Certificate issuer: /CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Certificate serial: 01856CE6448F26F68C2D4DBB02DF18E04BDA
Authority key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/qoo_pnPnJFzXOGk8Va3739D9RZ8.roa
Signing time: Sun 01 Jan 2023 10:35:08 +0000
ROA not before: Sun 01 Jan 2023 10:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 194.37.81.0/24 maxlen: 24
185.247.117.0/24 maxlen: 24
185.181.8.0/24 maxlen: 24
185.227.110.0/24 maxlen: 24
2a07:3b80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:44:8f:26:f6:8c:2d:4d:bb:02:df:18:e0:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Validity
Not Before: Jan 1 10:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa8a3fa673e7245cd738693c55adfbdfd0fd459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:34:bb:3f:64:9b:61:6f:ce:6b:cf:c1:9a:
b8:79:b7:69:bf:77:5d:47:e4:5a:ea:57:5c:28:95:
65:05:3c:5c:46:78:6b:c2:9d:02:0a:4a:57:85:05:
19:a5:2f:b1:05:c8:07:2b:0e:0d:38:e1:5b:ba:27:
a0:87:cf:43:07:65:cb:27:3c:e5:62:cf:30:f5:05:
fd:f7:7a:bb:22:15:58:84:59:a7:ca:6d:da:f4:db:
1b:8e:08:a5:f3:6b:93:3c:7b:06:3b:b3:3f:f3:67:
5c:c5:a5:19:94:6b:8a:9c:2d:ca:ba:7d:c5:a5:7e:
a8:94:26:d8:c6:b6:d0:36:f5:da:ec:9d:0b:7a:31:
ee:e2:52:94:c5:bd:70:39:95:33:1d:c6:15:7f:2f:
7b:11:6d:96:cb:b4:cc:96:63:10:fe:e6:32:b6:57:
38:42:0a:67:2b:91:fb:b3:05:24:b9:7f:7e:65:03:
ff:7b:f6:93:e1:c3:2a:e1:34:96:a6:7d:02:91:c7:
fd:20:22:2c:f8:80:fb:bb:1f:71:91:74:84:e8:08:
ea:cc:30:b0:ff:90:73:9b:9e:ee:bd:bc:3d:e7:02:
a6:03:af:5b:86:45:b8:c7:87:aa:d8:b0:3a:05:0b:
f9:5d:61:53:aa:76:e4:61:99:63:38:57:98:98:77:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:3F:A6:73:E7:24:5C:D7:38:69:3C:55:AD:FB:DF:D0:FD:45:9F
X509v3 Authority Key Identifier:
keyid:92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/qoo_pnPnJFzXOGk8Va3739D9RZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.8.0/24
185.227.110.0/24
185.247.117.0/24
194.37.81.0/24
IPv6:
2a07:3b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
5d:fc:92:89:88:08:4e:fe:4f:05:bc:f7:ff:52:2e:b9:40:68:
a1:67:30:0e:3a:0e:b7:ef:df:cd:70:c6:d1:6e:e3:07:16:c8:
d3:3b:1e:ff:f4:32:55:b1:7b:06:42:56:a1:0c:f3:22:bf:b2:
50:80:c9:ad:08:29:69:50:91:59:bb:3d:da:b3:83:62:2b:b4:
58:73:65:17:8e:fb:5f:98:3b:bb:bd:31:92:0e:3d:5b:b5:45:
64:ff:e3:27:99:a4:65:1b:db:e9:8f:b2:0b:5f:1b:6b:92:ce:
1d:e7:13:7c:14:f3:14:99:42:08:01:17:15:1b:80:49:b6:54:
db:84:81:2b:a3:a8:45:c6:40:4b:1c:b8:0a:97:b0:90:a9:0e:
be:14:50:02:f7:8c:26:c9:b2:f9:8d:e3:34:0e:df:58:30:8b:
91:36:3f:7a:20:b6:20:58:da:3f:7a:63:aa:58:97:37:6f:5d:
e4:d7:47:a7:71:72:8d:12:ff:dd:83:71:29:b7:20:dc:2b:34:
0a:4b:d4:1d:8d:9e:46:74:4b:34:8f:6d:f6:53:66:a4:6c:59:
64:79:d8:20:e0:04:c5:50:c9:b1:1a:dc:11:d1:fe:88:de:7c:
c4:67:be:82:09:b5:f3:09:4c:d0:ca:a5:bc:e0:02:f3:9f:cc:
bc:e9:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:40 2024 by rpki-client on console-fra.rpki-client.org