Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/qCIO7SzERWQr7V0xG67v7Wq3-JM.roa
File: qCIO7SzERWQr7V0xG67v7Wq3-JM.roa (raw, json)
Hash identifier: McaAgjlR9xmLfwu9p4JE8MctwSuCDJej/kOomw/NBMI=
Subject key identifier: A8:22:0E:ED:2C:C4:45:64:2B:ED:5D:31:1B:AE:EF:ED:6A:B7:F8:93
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 01886C4EE9C4BAD96859330132234217CBF1
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/qCIO7SzERWQr7V0xG67v7Wq3-JM.roa
Signing time: Tue 30 May 2023 10:58:10 +0000
ROA not before: Tue 30 May 2023 10:58:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:4e:e9:c4:ba:d9:68:59:33:01:32:23:42:17:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: May 30 10:58:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8220eed2cc445642bed5d311baeefed6ab7f893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:4d:d6:86:1a:3c:43:d0:2e:21:fd:03:5c:
91:21:fe:cf:5e:f6:36:4b:bb:30:41:90:87:b8:ac:
de:1b:f7:68:ec:4b:7e:48:a2:7c:bf:0d:e6:ec:24:
f9:82:97:f6:2d:84:18:7e:98:81:0b:d1:85:e3:b8:
d6:a1:fd:fc:7b:06:57:32:df:bb:23:38:30:36:36:
6e:f3:86:6a:39:6b:32:69:6b:14:b6:b6:27:fd:38:
21:20:fa:05:1c:b2:38:ee:28:a5:61:e5:5c:0a:65:
1f:df:07:dd:78:98:08:1b:ee:06:da:c2:4c:d5:cd:
8b:b2:62:fe:fc:ee:89:ba:63:4a:e3:b3:66:8f:9c:
38:f7:6d:30:18:70:80:4a:f9:75:3c:67:c8:f0:d0:
04:ce:77:42:02:72:f4:2c:5b:8a:20:14:72:82:0e:
8b:79:9e:17:ea:a8:d0:55:11:7a:08:9c:d0:3f:ca:
0e:94:e4:aa:06:ae:f3:57:0d:87:0a:6d:f2:15:b7:
a9:60:fc:40:f4:d1:0d:2e:c7:c3:67:b3:18:67:8d:
fd:f3:9d:03:4b:f4:cb:06:07:7d:20:d8:aa:c9:b2:
6e:7e:85:c0:9b:ee:87:0e:16:03:93:66:df:10:2d:
50:0b:bb:a7:c8:09:e4:38:93:8f:27:7a:50:5f:b2:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:0E:ED:2C:C4:45:64:2B:ED:5D:31:1B:AE:EF:ED:6A:B7:F8:93
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/qCIO7SzERWQr7V0xG67v7Wq3-JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ec:df:a7:8e:b2:a5:be:09:7e:d7:92:fa:7c:c7:be:b4:f8:
07:ae:b9:ef:c3:af:4e:01:5a:45:4a:de:a9:30:9b:2b:92:18:
55:f3:aa:97:88:61:f3:91:09:b8:9a:e5:25:25:b0:b5:98:55:
5a:34:57:42:1b:cf:6f:88:9d:51:0b:9b:2e:19:05:a6:c2:57:
86:bf:01:ac:20:6c:60:d3:05:b5:36:bc:b3:3d:38:6d:d6:db:
51:ab:f9:0d:d5:27:53:7f:b7:61:a9:97:6e:76:12:74:b7:ec:
99:44:da:e9:45:b4:99:97:db:fc:77:6c:64:69:c2:b9:56:b0:
ba:e2:66:ce:db:c5:c7:05:fc:08:dd:40:8a:ea:83:29:59:d1:
01:b9:84:70:bc:6b:14:26:31:4e:93:ee:cb:95:7f:08:13:a8:
d7:f7:e8:03:58:a2:ee:37:39:5a:97:ea:aa:3a:94:c4:27:4f:
a2:25:f2:30:f4:34:a5:ea:b4:27:d7:be:e0:1b:b6:49:a2:e5:
a6:af:fa:7a:57:da:12:52:77:29:df:db:3c:43:bf:57:a2:7f:
36:cc:90:f4:f7:53:e6:6f:5b:5d:f6:8f:c2:af:2a:6d:20:82:
a9:cd:ce:d4:21:ec:8d:5a:31:24:81:a3:21:2f:ec:99:32:dd:
0f:13:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 07:51:37 2023 by rpki-client on console-ams.rpki-client.org