Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/uqi1JsaSYvhExBWktjO5uNRSdLk.roa
File: uqi1JsaSYvhExBWktjO5uNRSdLk.roa (raw, json)
Hash identifier: eqX9sk+Z3x+RNy9sGUX8RVFOQStLvO4FK0zfrRD/qfE=
Subject key identifier: BA:A8:B5:26:C6:92:62:F8:44:C4:15:A4:B6:33:B9:B8:D4:52:74:B9
Certificate issuer: /CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Certificate serial: 01856CEF4E7691939D5F1A5B8216495FC0EB
Authority key identifier: 43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/uqi1JsaSYvhExBWktjO5uNRSdLk.roa
Signing time: Sun 01 Jan 2023 10:45:00 +0000
ROA not before: Sun 01 Jan 2023 10:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 185.181.194.0/24 maxlen: 24
95.130.17.0/24 maxlen: 24
95.130.20.0/24 maxlen: 24
95.130.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:4e:76:91:93:9d:5f:1a:5b:82:16:49:5f:c0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Validity
Not Before: Jan 1 10:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baa8b526c69262f844c415a4b633b9b8d45274b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:c8:7a:38:32:69:9a:81:b3:87:ac:dc:17:
a1:8f:09:54:05:95:a9:78:55:e9:fe:bf:b8:5a:cb:
d3:7a:89:de:f1:f3:10:6f:1d:c6:f5:9e:4f:c1:b0:
61:69:0f:b2:77:c0:5b:3c:e9:5c:4d:fc:e6:1c:76:
4d:3e:a9:c9:d9:c0:f5:a7:34:dc:d1:e0:cd:01:b1:
f4:b0:d8:d5:55:78:92:97:72:49:d5:a1:64:ca:da:
00:e8:4c:d0:b2:51:81:d0:b7:72:33:f7:f1:ca:3b:
51:54:5e:36:87:e2:f0:74:57:d1:a8:2a:fe:d0:7c:
fc:02:b0:c0:38:e8:b8:09:68:5e:bf:6c:89:b4:8d:
a4:e7:91:93:03:5f:00:9a:46:63:a1:7d:2c:f7:fa:
32:fe:71:5e:80:92:d5:7d:45:e3:f2:da:9a:2b:37:
b8:28:cc:4c:32:3a:72:ea:a0:bc:8c:22:80:05:9a:
cc:67:c7:08:0f:44:eb:7a:69:ee:d4:f9:7e:4f:88:
e0:dc:1e:14:a6:98:dd:54:24:32:eb:85:7e:07:70:
29:64:62:46:f5:08:ed:56:74:78:77:1e:ad:ec:02:
0a:26:ef:bc:1e:56:d5:89:11:60:38:ba:44:d8:1c:
2c:32:22:f6:83:a9:ba:e1:ad:13:74:1b:21:4a:dd:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:B5:26:C6:92:62:F8:44:C4:15:A4:B6:33:B9:B8:D4:52:74:B9
X509v3 Authority Key Identifier:
keyid:43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/uqi1JsaSYvhExBWktjO5uNRSdLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/Q5jLWAYu1KmjD_Q45E7vMdfvamU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.17.0/24
95.130.20.0/23
185.181.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6b:d9:ab:86:8d:f6:02:a9:37:06:d0:c5:78:5b:16:eb:12:
e0:e8:92:36:43:42:aa:37:6c:77:99:71:56:a8:fd:97:7b:f9:
85:9e:c5:a9:2d:70:4f:98:e3:ae:82:98:ed:fa:75:ea:44:7a:
44:b6:fe:1b:94:85:a9:7a:89:8c:35:c6:4e:86:b1:19:08:67:
b9:3b:43:b9:fe:78:c4:5a:54:19:fa:47:cf:7d:1e:36:aa:6c:
f5:04:0b:2f:d9:0f:f6:b4:75:05:1d:ab:b9:95:38:ab:0e:1a:
79:43:af:ec:4d:a9:28:c9:06:8f:aa:41:5b:09:c1:02:16:73:
4e:61:40:45:96:2f:2c:e0:2c:8e:c7:2b:54:e2:9f:8a:a7:97:
74:de:b3:f2:72:37:3f:27:ab:3e:ea:ff:5f:af:31:ce:13:18:
e6:7b:f1:08:a6:14:50:07:04:92:fa:06:7d:c6:9c:ba:e1:28:
b9:66:cf:d8:54:d7:ec:e5:de:bd:e4:4c:62:0c:5e:63:34:14:
7e:eb:88:49:a7:fe:5b:37:d7:9e:d8:f6:f7:d9:0d:d0:b3:d9:
3b:25:d7:7a:84:b3:5a:c1:2a:aa:e2:96:4b:4a:37:b3:f7:6b:
83:43:07:ac:bd:a3:ac:6e:c0:ba:6f:03:e9:f0:72:10:05:95:
42:d9:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:37 2023 by rpki-client on console-ams.rpki-client.org