Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38996f-9363-443a-8479-95b8986e433f/1/QyUaLMSLUkRyOvhLN4Ncnu8um4Y.roa
File: QyUaLMSLUkRyOvhLN4Ncnu8um4Y.roa (raw, json)
Hash identifier: 2zAWIqBhCxMrqg8Rz1xtMsFq6nNi9mzgYDp7ss0L34A=
Subject key identifier: 43:25:1A:2C:C4:8B:52:44:72:3A:F8:4B:37:83:5C:9E:EF:2E:9B:86
Certificate issuer: /CN=ffbadec4ac7c3f015c40b72da7f2d5e0dbd4d3da
Certificate serial: 018570708A3D3DF3B737F71CF91BF74F41EB
Authority key identifier: FF:BA:DE:C4:AC:7C:3F:01:5C:40:B7:2D:A7:F2:D5:E0:DB:D4:D3:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7rexKx8PwFcQLctp_LV4NvU09o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38996f-9363-443a-8479-95b8986e433f/1/QyUaLMSLUkRyOvhLN4Ncnu8um4Y.roa
Signing time: Mon 02 Jan 2023 03:05:01 +0000
ROA not before: Mon 02 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41175
IP address blocks: 185.114.104.0/22 maxlen: 22
81.201.208.0/20 maxlen: 20
2a00:e900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8a:3d:3d:f3:b7:37:f7:1c:f9:1b:f7:4f:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbadec4ac7c3f015c40b72da7f2d5e0dbd4d3da
Validity
Not Before: Jan 2 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43251a2cc48b5244723af84b37835c9eef2e9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:94:27:e4:2e:0a:d2:aa:41:e0:8f:c7:89:
2a:35:e0:cd:6e:83:47:37:36:c5:15:2b:0d:74:5c:
e7:14:b2:05:4e:9a:ee:96:13:d6:05:d1:8c:fc:3a:
9d:da:1f:26:18:11:02:ff:25:84:3a:ed:e7:e0:da:
a5:f3:c9:c5:8e:58:52:5c:88:c0:f3:5a:6b:fb:f5:
80:40:8a:79:3b:80:51:74:87:84:42:b3:e9:78:b5:
65:c3:d0:78:1c:29:00:55:b0:34:df:0a:51:f9:19:
01:d4:43:ac:21:eb:d6:c3:a2:8e:9e:de:2b:51:4e:
ad:59:0a:c6:e9:93:7d:64:b8:37:41:0f:29:59:5e:
86:c0:5f:a3:a8:db:b8:43:c7:ab:64:a7:b5:8a:38:
b1:60:e4:37:0c:d5:0b:6c:9c:e0:94:b4:63:59:a1:
3a:13:e7:0d:05:2d:b0:7a:ae:be:26:6d:d5:62:08:
94:5e:c5:71:d1:cc:ab:25:38:9a:b3:79:d4:6e:62:
cd:ac:e4:54:ce:0d:1b:0c:56:19:c5:d1:e2:5b:fb:
fb:29:8f:d1:e6:f5:47:f7:a2:24:04:3f:13:39:d3:
b3:ae:a0:e4:a2:ca:0d:71:d0:ca:97:b7:b2:47:a9:
1a:8e:71:8e:1a:3d:42:fb:26:37:b6:42:2d:8b:2b:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:1A:2C:C4:8B:52:44:72:3A:F8:4B:37:83:5C:9E:EF:2E:9B:86
X509v3 Authority Key Identifier:
keyid:FF:BA:DE:C4:AC:7C:3F:01:5C:40:B7:2D:A7:F2:D5:E0:DB:D4:D3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7rexKx8PwFcQLctp_LV4NvU09o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38996f-9363-443a-8479-95b8986e433f/1/QyUaLMSLUkRyOvhLN4Ncnu8um4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38996f-9363-443a-8479-95b8986e433f/1/_7rexKx8PwFcQLctp_LV4NvU09o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.208.0/20
185.114.104.0/22
IPv6:
2a00:e900::/29
Signature Algorithm: sha256WithRSAEncryption
0c:8d:33:69:78:7d:9b:e3:cc:f0:fe:58:fe:a1:47:2c:7b:80:
eb:2b:d3:30:f1:53:23:6c:36:21:8d:cc:1f:e5:8c:24:49:9c:
4b:8d:6d:58:53:6d:43:3e:4b:d3:34:13:1b:c5:24:1f:16:7d:
59:0a:21:82:68:65:1e:52:fa:13:8b:71:db:92:fc:c4:8a:4d:
2e:ae:75:bb:b5:f7:b5:75:9e:35:11:ee:81:f0:3a:2f:9a:7f:
e2:d7:9b:5e:e1:b0:4c:ff:a0:c2:c0:b2:14:48:e5:05:3d:df:
ce:ae:22:d1:9f:ff:ca:59:96:c6:93:67:4a:89:40:f0:2d:38:
fd:07:6d:3d:49:8e:41:cd:06:91:33:db:05:fb:5e:7d:de:50:
4b:48:4a:4a:23:cf:d7:2f:9e:11:b1:76:3f:f2:b1:a4:b3:cf:
77:5c:7c:87:12:0c:0b:dc:5a:81:be:6c:92:0b:d4:ff:91:63:
9a:03:b9:d8:cb:35:f1:79:87:d0:6f:6c:4c:a8:f5:59:af:a2:
f9:25:cc:ec:95:16:d5:00:85:10:4c:dc:73:b3:c9:8d:05:a8:
c5:16:c5:55:52:c9:67:84:00:86:3e:20:77:c1:64:da:25:98:
39:d7:63:a8:94:b8:33:0e:01:4e:d9:5a:e4:a5:19:64:2d:eb:
b9:20:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:36 2024 by rpki-client on console-ams.rpki-client.org