Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/QUWXmKmij9DQ2V-uA6LOZ3aGoF4.roa
File: QUWXmKmij9DQ2V-uA6LOZ3aGoF4.roa (raw, json)
Hash identifier: QNv5YErADMWWDQm8/rqWYzdTEENEMTpASMRhqyIPbZE=
Subject key identifier: 41:45:97:98:A9:A2:8F:D0:D0:D9:5F:AE:03:A2:CE:67:76:86:A0:5E
Certificate issuer: /CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Certificate serial: 02446A5D
Authority key identifier: 44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/QUWXmKmij9DQ2V-uA6LOZ3aGoF4.roa
Signing time: Wed 04 May 2022 08:42:30 +0000
ROA not before: Wed 04 May 2022 08:42:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51662
IP address blocks: 185.195.44.0/22 maxlen: 22
185.195.44.0/24 maxlen: 24
185.195.45.0/24 maxlen: 24
185.195.47.0/24 maxlen: 24
185.195.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38038109 (0x2446a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Validity
Not Before: May 4 08:42:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41459798a9a28fd0d0d95fae03a2ce677686a05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:25:fb:f4:f7:8c:4f:5b:94:67:18:5f:d1:
e1:83:fe:15:73:a5:e0:46:d6:44:f9:0a:b4:83:c5:
c0:5e:35:53:3d:5c:a7:c5:96:ea:c6:f4:c1:e4:92:
fc:87:4d:af:23:f5:59:ec:7d:3f:bd:ed:5a:c5:57:
a1:86:a7:3e:ad:77:e9:34:9f:fd:cb:65:11:07:02:
b4:e9:18:6e:6a:53:f3:60:1b:c3:57:47:14:16:b9:
30:66:17:08:75:56:8d:9e:43:07:6e:83:a0:cc:f2:
34:10:eb:78:b0:58:38:c7:78:76:b6:82:6c:13:ad:
6e:f1:50:b7:be:27:14:02:cb:1b:f7:f4:39:10:f9:
30:d8:61:6e:83:aa:3e:4f:fc:88:d7:06:35:7e:3b:
ce:3b:92:a9:10:47:04:f6:da:1c:d6:ea:90:c6:7b:
52:1c:8c:54:6c:fb:da:8f:5d:86:79:a1:ca:97:01:
9c:96:56:8e:40:4c:cf:f5:c4:a8:0d:ce:b8:7f:6d:
d3:55:cc:49:8d:2d:1c:68:9c:29:8c:1b:b5:25:38:
50:5e:91:9c:0d:e0:62:96:6c:23:ee:cc:50:73:ab:
04:44:40:57:de:f2:3a:38:b8:0d:0d:f4:89:85:2f:
19:27:f0:b2:9d:ce:59:93:21:86:14:1b:bd:b5:7f:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:97:98:A9:A2:8F:D0:D0:D9:5F:AE:03:A2:CE:67:76:86:A0:5E
X509v3 Authority Key Identifier:
keyid:44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/QUWXmKmij9DQ2V-uA6LOZ3aGoF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:dc:fd:da:ef:06:73:3f:7e:d8:9d:b6:77:84:11:1e:3f:3b:
cf:4d:c4:b3:38:ec:d9:a3:0c:55:b3:a1:0a:09:da:26:ab:83:
87:61:84:9a:ed:b8:03:94:98:d3:54:d7:34:d3:15:42:89:15:
14:a8:db:cd:8d:4d:80:7b:8b:24:0e:10:f5:3a:5c:c1:aa:f3:
08:9b:6a:ec:60:0c:17:f2:68:46:c3:d1:92:80:b6:f4:26:ce:
20:2b:65:43:dc:7a:02:4b:f9:4b:4c:5d:53:31:3d:7c:e0:f4:
38:93:0e:66:52:8c:68:1c:db:ab:d8:ea:5d:cd:79:ff:45:04:
b4:91:58:4d:98:85:6f:8e:24:f7:27:56:55:f0:86:2f:02:8a:
63:24:41:16:0b:82:b1:0b:ca:6e:22:0c:b0:1b:a8:17:1b:7f:
75:8b:18:31:2c:8c:12:03:9d:e3:37:4c:b5:9b:ec:18:05:b3:
d3:91:b8:67:05:02:59:fd:9a:3a:98:95:e7:0e:fe:9e:40:62:
12:b9:32:b6:1d:79:28:a9:34:9e:d3:21:83:25:1e:77:e8:5d:
14:b7:6f:f6:34:f4:9f:51:7a:a6:0a:37:22:19:37:61:57:de:
0d:4f:f7:a6:ad:83:a6:3c:46:f3:bc:63:db:5d:ee:fa:4d:46:
1c:a3:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:40 2024 by rpki-client on console-fra.rpki-client.org