Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/qsnaVKLmVCABiSrJovbgDcmBXJs.roa
File: qsnaVKLmVCABiSrJovbgDcmBXJs.roa (raw, json)
Hash identifier: +cZrygykSNLIoK4Ydjy4FOSnoL4W2PWZ02WQ08cm6Sw=
Subject key identifier: AA:C9:DA:54:A2:E6:54:20:01:89:2A:C9:A2:F6:E0:0D:C9:81:5C:9B
Certificate issuer: /CN=72e34bc00843e43cf7d38d94201a633638e28dc0
Certificate serial: 0160A9
Authority key identifier: 72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/qsnaVKLmVCABiSrJovbgDcmBXJs.roa
Signing time: Fri 21 Jan 2022 10:31:10 +0000
ROA not before: Fri 21 Jan 2022 10:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12741
IP address blocks: 194.110.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90281 (0x160a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e34bc00843e43cf7d38d94201a633638e28dc0
Validity
Not Before: Jan 21 10:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aac9da54a2e6542001892ac9a2f6e00dc9815c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:bb:58:90:09:ca:fa:3e:d7:23:6e:00:d8:
e7:b4:0b:70:e4:b8:7b:ce:a3:17:21:d4:60:72:3b:
1a:8a:c0:21:24:cc:67:13:60:75:7c:e9:28:ec:ac:
5a:b1:db:1e:28:42:51:1b:16:df:03:47:2c:8d:fd:
50:94:d5:4e:44:7f:c6:bb:1c:9e:4f:18:1f:2d:cb:
2e:cc:aa:12:8e:22:fb:c6:67:d6:54:72:da:6a:71:
e5:b7:7f:f1:0a:c0:d4:9b:ce:f9:99:e0:d3:62:11:
87:5c:a0:cd:fe:ff:ae:44:c1:3d:89:4a:b3:41:38:
34:91:9d:97:c9:43:65:49:a9:34:fc:ea:5c:5a:d3:
4e:b6:08:16:1e:5d:03:b8:bf:f1:eb:54:14:14:4c:
81:b7:be:9c:53:25:c4:b0:08:2a:23:f1:6b:8d:09:
2b:4e:ee:08:1b:e2:2e:04:9a:11:76:cd:16:39:d3:
4d:bb:7c:17:c3:d2:ef:08:ff:9e:c9:9e:3c:61:df:
ee:e8:fa:40:f6:ff:e8:ae:5f:31:33:c9:70:0d:3d:
86:ee:ba:05:e2:61:9e:94:13:06:fa:45:bb:15:b8:
78:88:bb:c4:3b:a2:f5:bc:f6:f7:83:8f:a2:81:d0:
ef:b3:65:96:70:28:56:4b:b3:68:08:6d:72:ad:b4:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:DA:54:A2:E6:54:20:01:89:2A:C9:A2:F6:E0:0D:C9:81:5C:9B
X509v3 Authority Key Identifier:
keyid:72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/qsnaVKLmVCABiSrJovbgDcmBXJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:74:9f:60:6e:78:fc:01:d8:37:72:84:5d:e6:19:17:5b:3c:
9f:90:18:ad:65:ac:80:0f:d0:57:b9:e9:e6:7c:b8:dd:8d:90:
1a:3b:d5:62:9a:3e:a3:a4:49:23:69:1b:71:1d:de:b5:f0:04:
43:37:4c:f9:43:7a:87:7a:f6:0a:91:92:a0:f2:4d:00:44:0d:
4e:ac:21:67:d0:43:5d:22:e8:f5:ed:40:86:e3:b6:da:f7:4f:
52:b6:86:a6:ee:54:ca:08:8b:d4:a8:0b:64:9f:97:ee:b3:2f:
31:2d:44:39:dc:16:a2:19:cd:bd:10:77:1b:5d:a7:78:80:d2:
f2:71:86:cd:9f:34:f9:2d:b2:a6:d7:69:6e:ff:02:52:95:fd:
4d:88:c4:9a:47:a6:09:96:77:bc:d9:3f:b9:a0:c8:61:ab:7c:
ad:de:13:97:73:12:be:0b:e9:11:cc:df:70:24:95:4c:98:b6:
14:81:a1:a9:5e:70:75:20:3f:aa:ef:ea:df:36:2a:9c:9c:38:
b0:7d:68:52:47:f5:09:31:36:92:4c:d6:ce:a7:53:91:5a:53:
90:ca:d3:ce:5a:b2:0a:f6:37:0e:48:fe:2f:23:0c:90:d6:cc:
b8:8c:47:64:e5:bb:1f:d9:f9:98:47:b1:55:b0:22:bd:ba:e8:
83:84:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:59 2024 by rpki-client on console-ams.rpki-client.org