Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6C-w2yifTQvdDke2LMwYBuvQTCA.roa
File: 6C-w2yifTQvdDke2LMwYBuvQTCA.roa (raw, json)
Hash identifier: BY4d7E6G7n5SksnU5FBGN+GajOuJQzIlvDQ5k3mzVng=
Subject key identifier: E8:2F:B0:DB:28:9F:4D:0B:DD:0E:47:B6:2C:CC:18:06:EB:D0:4C:20
Certificate issuer: /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial: 02FDF04F
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6C-w2yifTQvdDke2LMwYBuvQTCA.roa
Signing time: Sat 01 Jan 2022 13:07:50 +0000
ROA not before: Sat 01 Jan 2022 13:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 213.255.212.0/22 maxlen: 22
213.255.220.0/22 maxlen: 22
78.138.4.0/22 maxlen: 22
78.138.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50196559 (0x2fdf04f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Validity
Not Before: Jan 1 13:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e82fb0db289f4d0bdd0e47b62ccc1806ebd04c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:e6:50:db:4b:ac:ca:b4:b7:88:ee:b2:45:
98:e9:94:ee:10:21:f6:69:df:45:e4:df:fa:30:8c:
62:f6:1c:a7:6e:d5:f0:80:ce:a3:80:43:02:74:15:
c0:85:52:74:c6:45:0e:1c:d1:20:b9:e4:c8:8a:ae:
97:99:97:f1:5c:05:89:58:b0:d6:29:bb:87:db:e2:
2d:bf:85:86:d8:68:d3:eb:6d:46:02:23:fa:f3:3d:
d4:64:ce:df:f6:86:e8:95:1f:31:2b:28:43:6f:bb:
27:19:e2:8c:91:0b:45:c1:8c:f5:0b:18:10:bd:e8:
c7:0e:fd:f6:45:9f:8d:29:cc:0d:94:3f:c4:78:e9:
f6:3f:c8:e3:24:76:65:95:56:8e:24:c3:d4:74:9c:
85:8d:11:fd:0a:40:43:23:1c:94:5e:48:fe:69:57:
99:f0:66:96:1f:4c:38:c3:34:29:06:ef:53:ff:6f:
49:06:2d:d2:45:ae:1e:12:18:50:21:15:4b:bf:b4:
6a:ac:3a:3d:14:fa:06:6f:87:45:0b:a9:74:93:0b:
d5:a2:20:c6:b8:bf:0f:09:46:44:a9:1d:cc:c1:2e:
c9:10:fb:f4:47:7d:8f:b8:47:0a:db:52:85:f6:50:
a3:6b:b2:95:37:bc:80:87:8f:89:df:c5:a5:d6:5e:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:B0:DB:28:9F:4D:0B:DD:0E:47:B6:2C:CC:18:06:EB:D0:4C:20
X509v3 Authority Key Identifier:
keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/6C-w2yifTQvdDke2LMwYBuvQTCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.4.0/22
78.138.36.0/22
213.255.212.0/22
213.255.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:60:01:0d:d7:28:65:72:48:b8:59:95:4d:91:1d:ea:8e:0b:
68:c1:e1:48:6f:46:5c:09:89:21:e1:cc:63:05:25:d3:91:8b:
72:6f:2a:38:c8:8b:2c:1f:f1:ea:62:9b:0d:50:9f:a0:bb:f6:
b4:ac:c4:67:62:16:fa:c2:c0:49:9a:d6:1b:1f:d8:a2:16:2d:
06:3a:3d:2d:f3:b2:38:d0:ef:46:f0:a3:4e:1a:ab:06:38:d3:
6d:8c:04:72:2c:b3:ff:e8:37:71:40:1a:61:31:17:af:3c:fa:
f0:fe:e1:97:c5:79:40:d2:1f:ed:ba:a8:bd:69:8a:6f:c0:91:
96:a7:3b:d7:30:f1:29:92:78:b0:24:51:4c:35:c4:cd:c6:ea:
41:fc:55:83:84:a6:99:48:13:cb:38:b5:c1:54:18:e0:16:2a:
54:79:af:e9:e8:bc:26:a1:36:10:e2:d5:cd:01:16:58:a1:4c:
78:da:f0:21:12:56:4e:69:37:e5:27:c7:ab:0b:34:b9:63:4a:
46:5e:44:00:09:ce:18:11:db:e8:56:86:53:01:40:a7:33:82:
94:86:26:79:66:b8:29:c0:54:41:b0:0a:81:32:c6:fb:2e:14:
62:54:f7:5f:8f:2b:8d:bf:76:26:72:b7:ea:60:d9:2e:0d:e7:
52:02:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:10 2024 by rpki-client on console-fra.rpki-client.org