Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/qh_fVUuFZcyOJZb3_TQ1hCHTgTQ.roa
File: qh_fVUuFZcyOJZb3_TQ1hCHTgTQ.roa (raw, json)
Hash identifier: DFAGjuYIXpjYpDrXqWc5T/BhcJj/gFLWc5CKD3zL8wA=
Subject key identifier: AA:1F:DF:55:4B:85:65:CC:8E:25:96:F7:FD:34:35:84:21:D3:81:34
Certificate issuer: /CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Certificate serial: 01835F5C58601B902AE2C48A5BB330F31945
Authority key identifier: A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/qh_fVUuFZcyOJZb3_TQ1hCHTgTQ.roa
Signing time: Wed 21 Sep 2022 09:23:50 +0000
ROA not before: Wed 21 Sep 2022 09:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 185.202.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:5c:58:60:1b:90:2a:e2:c4:8a:5b:b3:30:f3:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Validity
Not Before: Sep 21 09:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa1fdf554b8565cc8e2596f7fd34358421d38134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:bd:bd:97:3e:d1:71:8f:90:70:e7:83:82:
72:c4:e4:ed:3e:a7:a4:dc:9f:da:08:44:68:49:9f:
80:2e:69:d5:06:ec:c6:b5:53:cb:dd:af:7a:11:4d:
6b:82:4d:fc:29:87:22:aa:26:e5:c2:38:d3:7f:81:
ee:30:88:ee:83:16:b0:92:a0:3f:3f:81:a6:2b:bd:
b6:46:5b:34:d0:5a:e6:85:72:c2:5d:a3:87:22:ee:
a4:58:ac:db:e8:21:50:49:52:85:9c:f3:57:80:98:
b9:b8:03:c5:15:86:0a:b9:7b:73:a4:0a:74:35:c0:
a5:38:2c:cb:33:33:e2:02:c2:3a:26:4b:bc:3f:e5:
93:7f:70:a6:1b:ba:59:bb:29:3c:56:d7:4b:5c:a8:
1b:a1:3d:13:29:f1:fa:a8:a8:a8:bf:45:aa:48:cc:
e3:95:18:07:28:c5:58:81:5c:cf:cc:5a:7a:2b:c6:
3c:3e:49:6c:1b:40:ea:9e:bb:05:71:49:5e:e0:b4:
cf:01:1e:89:65:e5:bd:5a:e2:3a:16:18:75:d9:18:
fa:20:aa:18:5e:8e:29:c2:1d:ae:da:b9:d0:47:85:
4b:42:c4:a0:cc:22:20:72:cc:4d:03:49:5d:46:19:
c2:09:d4:cb:67:f8:65:7d:72:07:c5:cd:67:ec:52:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:DF:55:4B:85:65:CC:8E:25:96:F7:FD:34:35:84:21:D3:81:34
X509v3 Authority Key Identifier:
keyid:A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/qh_fVUuFZcyOJZb3_TQ1hCHTgTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1b:fd:46:9a:71:43:5c:a1:8c:09:1c:f0:3f:5a:3c:7c:54:
b1:1b:1c:bf:0c:72:e9:ba:6e:b9:7f:93:51:b9:bc:39:4e:fb:
0d:85:e1:63:91:93:db:e3:7e:d6:cc:06:fa:0e:a9:c0:13:c4:
f7:60:ca:4e:a6:12:99:7d:e5:a7:4d:31:d4:29:a5:72:59:4f:
7c:ab:45:37:44:bd:3c:a6:39:8f:e8:9e:27:65:3f:09:9d:e5:
6e:6e:ff:af:57:fa:b0:d0:3f:30:64:c6:fc:7e:cd:5a:36:45:
24:18:4b:58:b4:5f:c3:81:28:e7:3d:a3:4c:e6:94:1a:23:45:
e0:a7:cd:6d:56:b5:ef:65:2e:e0:21:47:23:ea:d7:8d:17:29:
07:19:ad:c3:fc:5a:9d:b5:ce:f8:2b:5b:1b:79:ef:09:93:96:
89:4d:0c:d9:81:84:b8:a9:03:17:77:0c:3a:92:c3:cb:c2:cf:
b9:17:91:26:e1:88:62:db:88:37:ca:5a:d8:29:55:c9:d5:05:
ba:e4:6e:dc:73:0f:cc:a4:b4:f4:7a:cf:43:18:7e:b5:62:3b:
3e:d5:4a:3e:e0:d5:e2:82:d2:83:61:0d:c6:89:2d:f5:3f:67:
b1:db:b3:4a:4b:7d:6a:85:8c:e3:11:ee:33:d8:95:db:54:13:
83:f0:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net