Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/F6h_nGhci3gPOQFFBhds-cWbduU.roa
File: F6h_nGhci3gPOQFFBhds-cWbduU.roa (raw, json)
Hash identifier: 9Pt+nmPcCtZCmr7RGL3u2y4VeMq5ByTFU944rSdL6Ms=
Subject key identifier: 17:A8:7F:9C:68:5C:8B:78:0F:39:01:45:06:17:6C:F9:C5:9B:76:E5
Certificate issuer: /CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Certificate serial: 0185724C866E59E9C9020515846D0DC135C6
Authority key identifier: 0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/F6h_nGhci3gPOQFFBhds-cWbduU.roa
Signing time: Mon 02 Jan 2023 11:44:55 +0000
ROA not before: Mon 02 Jan 2023 11:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47297
IP address blocks: 93.184.176.0/20 maxlen: 24
37.60.168.0/21 maxlen: 24
37.228.176.0/20 maxlen: 24
185.6.96.0/22 maxlen: 24
2a03:b880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:86:6e:59:e9:c9:02:05:15:84:6d:0d:c1:35:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Validity
Not Before: Jan 2 11:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17a87f9c685c8b780f39014506176cf9c59b76e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:44:a1:f0:b2:a3:3d:99:4f:fb:78:73:72:
54:42:0d:d9:f2:a6:2a:36:b4:31:34:22:b6:e6:2a:
35:cc:92:cc:54:04:e0:3d:5c:b9:03:05:f4:81:5b:
96:28:6f:22:0f:d6:e7:64:66:77:18:2d:9a:98:55:
cd:56:ed:46:f6:3f:49:0c:b2:1f:b3:65:fc:77:16:
4c:84:bc:ac:9a:79:63:f9:0d:03:0c:5f:ec:87:a3:
a2:f5:ec:02:2e:2e:2e:de:32:02:01:51:f0:a4:47:
2d:ba:39:73:8c:96:d7:96:c5:ec:02:a4:f4:a3:15:
62:b3:10:b2:8e:62:57:ac:3a:5d:86:c4:e2:b2:17:
5a:68:7e:27:c4:ce:91:13:46:a2:3c:9e:be:f7:df:
00:fa:02:6d:41:26:06:d4:ae:a3:39:34:94:6d:80:
63:60:4d:e6:56:57:1b:f0:80:00:17:4c:a9:27:a2:
60:c3:d1:1d:fd:97:cd:2e:12:a8:a9:4b:d7:16:75:
46:97:c7:45:3f:7f:ae:43:78:b0:3b:be:64:d8:8b:
a4:57:41:f4:cb:6f:6d:4d:9e:ce:7e:52:5e:ee:de:
1b:9a:92:9e:88:12:d2:76:ed:76:44:46:58:11:1c:
0b:4e:03:18:d2:88:75:f8:82:1e:e0:c7:db:d3:40:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:7F:9C:68:5C:8B:78:0F:39:01:45:06:17:6C:F9:C5:9B:76:E5
X509v3 Authority Key Identifier:
keyid:0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/F6h_nGhci3gPOQFFBhds-cWbduU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.168.0/21
37.228.176.0/20
93.184.176.0/20
185.6.96.0/22
IPv6:
2a03:b880::/29
Signature Algorithm: sha256WithRSAEncryption
1b:57:aa:d8:63:63:62:d7:6c:80:b0:7e:70:70:68:63:cd:ea:
f0:ba:f7:b4:9d:a3:56:bd:0b:04:24:4e:9a:bd:f6:0a:ac:8b:
e6:d5:99:42:b9:aa:25:da:41:99:e3:6f:74:bd:28:95:f3:c7:
4d:6f:b1:0c:79:33:47:8e:5a:d6:b9:4b:94:fc:28:6e:51:40:
5b:a9:4a:6e:36:5f:20:82:a6:92:62:f7:df:fd:c9:8c:04:a6:
e6:65:ee:0a:ec:0f:83:77:d5:9c:6e:f0:72:f1:58:a3:33:5f:
e6:63:d3:77:4b:c9:2a:ca:37:8f:72:85:3d:33:41:41:5f:4d:
51:6d:e0:61:d9:2b:79:12:c0:44:ae:2e:ea:c5:44:80:57:08:
27:47:e5:1f:93:69:15:a4:69:58:18:a0:00:96:6f:3f:06:3c:
51:92:bc:a6:a4:d7:97:63:1c:5a:25:72:a2:0b:2a:8e:73:fc:
d8:c1:ac:5c:26:42:97:df:e0:b2:3b:9d:41:4c:4a:7d:a0:21:
74:4d:55:82:45:a0:92:cb:bd:9c:e6:45:81:bf:32:67:26:eb:
74:00:68:31:ab:be:37:da:57:f9:73:a2:c0:c3:81:d9:d3:84:
fb:42:5c:ac:c2:c8:61:dd:4c:b2:05:9d:81:a7:bf:92:d2:ba:
38:e8:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:16 2023 by rpki-client on console-fra.rpki-client.org