Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/qb1jjdvLd31jq_J53T4MplK5L2g.roa
File: qb1jjdvLd31jq_J53T4MplK5L2g.roa (raw, json)
Hash identifier: SsXhBYA9SdUOfV2XTqci6NyHDtBXnra26Q4mGPkazzU=
Subject key identifier: A9:BD:63:8D:DB:CB:77:7D:63:AB:F2:79:DD:3E:0C:A6:52:B9:2F:68
Certificate issuer: /CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Certificate serial: 0193E52C
Authority key identifier: E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/qb1jjdvLd31jq_J53T4MplK5L2g.roa
Signing time: Sat 12 Mar 2022 23:48:43 +0000
ROA not before: Sat 12 Mar 2022 23:48:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26469676 (0x193e52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Validity
Not Before: Mar 12 23:48:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9bd638ddbcb777d63abf279dd3e0ca652b92f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:aa:9d:0e:d5:ad:e6:00:d5:aa:18:a0:56:
e9:bb:43:77:77:c9:15:97:ad:ae:54:74:05:09:71:
4d:35:e8:a3:d3:61:18:9d:8b:cf:bf:ad:54:5d:16:
9f:46:ae:dc:f4:a7:6d:33:dc:2a:88:7f:cb:83:05:
e5:dc:b7:e8:7f:58:d7:5f:ce:e3:a1:b1:ac:46:87:
8d:1e:f0:9f:1f:d5:d8:e0:74:91:3c:dc:03:53:a9:
3f:d6:6a:c3:77:71:d5:8b:5e:8d:00:a0:46:a8:c4:
6e:bc:bc:dc:88:65:c0:92:ac:ce:eb:27:7d:dd:5d:
44:8b:c5:8b:25:ac:03:91:a0:99:68:69:ee:bc:90:
cb:b1:fc:e4:08:7a:27:54:f4:ef:4e:8f:b1:65:8e:
53:c3:84:5c:df:30:7c:a9:07:16:d3:41:1c:dc:42:
ec:61:3e:ba:d7:2d:d6:53:d6:30:fe:b5:2a:5e:f6:
ac:d9:e8:e8:29:65:e2:fe:3b:58:1d:96:6a:4c:4f:
06:54:a4:df:db:4f:f2:7a:23:37:f4:f0:5e:63:11:
4e:51:41:74:e8:af:5e:9c:0f:c5:f4:d1:b5:d5:0c:
f4:9f:cc:f8:cf:01:ea:89:ac:1a:8c:18:8e:80:39:
db:7a:07:e0:09:65:79:da:ef:36:67:a8:be:1b:83:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:63:8D:DB:CB:77:7D:63:AB:F2:79:DD:3E:0C:A6:52:B9:2F:68
X509v3 Authority Key Identifier:
keyid:E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/qb1jjdvLd31jq_J53T4MplK5L2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:88:b7:81:9d:66:0d:23:3e:64:6e:93:07:b5:c7:ff:81:10:
c6:13:92:f7:a7:2a:1e:ba:dc:94:c2:62:53:95:42:a3:c5:93:
4d:77:42:f5:86:28:3c:b1:76:04:3b:1d:62:59:91:a7:26:65:
cb:c5:3c:c1:2b:ff:b9:66:d2:dc:0c:c2:2c:26:71:42:82:0e:
f4:63:60:5a:a6:08:25:c6:9a:1c:cd:d4:c0:27:2d:3f:31:07:
fe:e9:de:a0:5c:4c:e4:c6:ab:da:41:3d:40:c8:6e:6a:30:ed:
bd:4c:7b:a0:ff:59:1c:af:25:46:b8:4a:90:64:f6:db:4f:d5:
0c:e4:05:c8:31:32:a5:f6:9c:aa:9e:f1:5c:43:4f:9f:49:28:
05:f1:30:82:d3:63:76:2f:c8:c8:5d:eb:d5:4e:c3:43:31:76:
9f:4e:cb:11:55:68:90:22:5e:0c:35:df:e0:18:24:4c:13:c8:
e6:40:c4:05:9a:c5:88:8b:29:2b:28:22:ae:72:05:95:44:54:
03:1c:d4:52:42:46:53:94:c6:65:fc:da:dc:cb:e9:dd:73:e2:
b2:2e:a3:da:4d:81:f3:0e:e6:d6:ad:30:33:ea:f1:e9:61:67:
fc:4b:b0:d5:ce:35:bd:11:ac:a8:c9:29:7e:55:7c:7d:a9:22:
33:15:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:20 2023 by rpki-client on console-ams.rpki-client.org