Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/qztq_EGaFfKAQpGAF3byxtaNTzs.roa
File: qztq_EGaFfKAQpGAF3byxtaNTzs.roa (raw, json)
Hash identifier: L/+Hvt6U1MNrXx+EfLmLYHex9uwxUJ6sTtntOf5OcUw=
Subject key identifier: AB:3B:6A:FC:41:9A:15:F2:80:42:91:80:17:76:F2:C6:D6:8D:4F:3B
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0183237093444BC2CC7AE4C250E23844B9F0
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/qztq_EGaFfKAQpGAF3byxtaNTzs.roa
Signing time: Fri 09 Sep 2022 18:08:43 +0000
ROA not before: Fri 09 Sep 2022 18:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 85.209.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:70:93:44:4b:c2:cc:7a:e4:c2:50:e2:38:44:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 9 18:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab3b6afc419a15f2804291801776f2c6d68d4f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:f3:d9:0f:30:44:d5:94:8c:63:16:ec:17:
12:29:cf:bd:b2:c6:42:27:7e:7f:a5:7f:9a:f2:91:
05:20:40:38:ed:cb:7c:a3:7c:d3:f3:69:76:8e:6e:
18:3a:51:0e:4f:4c:ab:bc:b2:6f:87:dd:20:7c:12:
3e:f3:7b:b1:7d:a4:4f:96:b3:29:d7:ea:2f:70:91:
ac:3b:8e:ed:91:f0:52:a4:b0:79:d4:94:0e:82:6f:
5f:24:ae:b2:d5:fd:24:83:ec:de:06:92:63:4a:27:
f5:8d:a7:3e:86:57:35:8e:f0:cd:bd:a1:5d:bd:38:
f0:63:bb:4a:59:23:68:d9:c8:74:7d:ae:bf:af:0c:
d4:cd:86:1b:ca:eb:dd:0b:95:ae:4f:65:f2:24:36:
b3:af:7c:51:50:9b:05:c2:9b:88:8f:7d:1d:e2:bc:
9e:e3:6c:9f:36:e5:cb:62:da:3a:82:4a:25:61:27:
4e:27:b1:09:c8:5e:65:e0:b1:9a:13:84:ab:da:2a:
54:ef:a4:b5:f2:55:56:b6:b1:bb:29:b3:ad:99:f6:
92:a6:ba:83:30:e0:4b:32:d2:3d:ca:f3:c8:66:d4:
dd:2a:25:02:90:f0:ae:79:7c:fd:c0:e0:a2:17:a8:
b0:b6:13:e0:45:ce:b4:72:74:e4:b5:62:18:0f:16:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:6A:FC:41:9A:15:F2:80:42:91:80:17:76:F2:C6:D6:8D:4F:3B
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/qztq_EGaFfKAQpGAF3byxtaNTzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.16.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a8:0e:c8:f6:26:48:e9:93:65:84:6d:04:48:c1:40:af:d1:
6b:32:e4:c3:78:a1:4b:44:27:3a:d4:88:04:20:56:59:be:cb:
75:64:82:13:1d:f9:4d:57:42:46:9b:ee:87:bf:28:b4:85:15:
38:61:ec:ed:e1:40:36:b1:4e:c1:94:ce:99:b3:56:89:8e:3a:
ae:f3:ca:61:44:f9:f7:35:db:b8:38:e0:a0:6c:34:8b:de:03:
ed:1e:fb:67:37:f3:9a:32:a1:82:ad:f4:f3:42:7f:02:80:49:
6a:45:45:e8:9b:8b:af:63:06:2f:64:dc:68:57:7f:05:b5:ce:
cd:6a:fd:63:ce:63:c7:4f:a5:1f:81:c5:7f:c1:c7:e4:aa:e0:
e4:2a:08:ae:b1:13:af:b7:c2:cc:55:d7:78:7f:fb:31:41:c0:
72:78:42:45:42:4d:10:5f:63:7c:19:98:43:9e:35:b0:eb:38:
7f:60:bc:dc:23:52:41:6d:47:4a:33:7f:ea:e6:5c:f6:e2:dc:
3b:e2:c7:a9:41:fc:75:cd:b4:3e:1c:d9:37:d8:c8:80:78:d6:
b3:3c:97:e2:00:57:94:3d:5e:77:89:46:f6:b9:bb:48:df:8f:
81:96:5e:f1:88:92:f4:e7:93:6e:02:5c:99:80:fc:b2:77:29:
78:a7:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org