Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/blFHZ5nOcRUTKA4oQhDBJFtKI3M.roa
File: blFHZ5nOcRUTKA4oQhDBJFtKI3M.roa (raw, json)
Hash identifier: f09/dGrp2NbaU5d7GZGSwldxOEdE2rZxDuCuzrUjymI=
Subject key identifier: 6E:51:47:67:99:CE:71:15:13:28:0E:28:42:10:C1:24:5B:4A:23:73
Certificate issuer: /CN=6baf3b452946e4950993c3ca78e24fc455b37379
Certificate serial: 018572CCC51F3D5BDFFDB2929D6D61B626AF
Authority key identifier: 6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/blFHZ5nOcRUTKA4oQhDBJFtKI3M.roa
Signing time: Mon 02 Jan 2023 14:05:00 +0000
ROA not before: Mon 02 Jan 2023 14:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 195.211.40.0/23 maxlen: 23
193.203.48.0/22 maxlen: 22
91.226.212.0/23 maxlen: 23
176.103.48.0/20 maxlen: 20
91.217.90.0/23 maxlen: 23
91.207.60.0/23 maxlen: 23
193.169.86.0/23 maxlen: 23
2001:678:334::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:c5:1f:3d:5b:df:fd:b2:92:9d:6d:61:b6:26:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf3b452946e4950993c3ca78e24fc455b37379
Validity
Not Before: Jan 2 14:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e51476799ce711513280e284210c1245b4a2373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:06:4e:f0:d4:69:75:5c:4b:51:25:71:d1:
91:b4:a2:8c:95:07:13:65:2c:16:53:e7:8c:42:8c:
80:ee:d5:9b:59:5d:3d:45:54:cf:ed:09:25:e6:f9:
49:fa:78:6f:74:f8:90:86:dc:6f:ee:37:22:c8:0e:
95:4d:c3:bd:58:c6:26:fb:0e:6d:f7:10:95:4c:19:
25:e3:50:84:49:65:3a:7e:f0:15:30:f6:5c:25:26:
30:83:4f:1a:ba:56:80:b0:8e:3b:f9:66:dc:0c:01:
f1:fa:bd:08:2d:9b:fc:83:32:c7:ca:2f:56:d0:02:
ad:37:45:99:78:79:95:5b:64:d7:10:ef:58:f5:e4:
e9:04:bb:2e:d8:3d:34:e4:6a:9b:03:62:bb:2b:e5:
15:6b:94:4d:0b:ce:27:85:36:4a:b1:04:eb:66:34:
76:8b:35:e5:e5:ab:8b:a2:b3:31:6e:b1:a5:48:2b:
53:16:a0:9d:9d:5d:69:77:e3:5c:64:ea:d8:8e:3e:
30:0b:91:0a:3f:3d:0f:32:14:54:15:59:b0:aa:d8:
6e:1c:f6:f1:ed:64:42:90:2b:d0:e0:f8:3d:15:26:
b6:83:a5:13:2b:e9:93:64:74:a8:28:1d:e9:b4:8f:
99:06:2c:23:09:c1:f3:10:0e:1b:6f:2d:f4:4b:7b:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:47:67:99:CE:71:15:13:28:0E:28:42:10:C1:24:5B:4A:23:73
X509v3 Authority Key Identifier:
keyid:6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/blFHZ5nOcRUTKA4oQhDBJFtKI3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/a687RSlG5JUJk8PKeOJPxFWzc3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/23
91.217.90.0/23
91.226.212.0/23
176.103.48.0/20
193.169.86.0/23
193.203.48.0/22
195.211.40.0/23
IPv6:
2001:678:334::/48
Signature Algorithm: sha256WithRSAEncryption
30:4f:81:85:98:06:d5:8f:b1:8f:84:6d:ff:f3:11:d2:1e:5e:
92:cd:dc:07:56:36:73:22:83:13:4c:f4:6a:d4:b5:75:6b:7a:
1b:bc:54:7a:2a:a6:77:d5:69:64:c6:15:2a:e3:6b:4e:78:a1:
df:ca:ea:a0:a6:54:f1:c6:f7:cd:7d:03:fe:af:6e:d0:18:58:
ee:95:04:bf:1b:ef:fb:18:d9:8e:af:e8:aa:3f:e2:33:fa:72:
2b:87:74:a9:92:87:46:46:1c:de:11:20:0b:a2:61:18:dd:0e:
46:28:ae:8b:8a:2d:c2:af:10:fa:99:bd:4a:b5:d0:de:2e:ed:
9a:4a:46:da:78:a7:de:ae:8a:09:ae:f8:6c:76:e8:7b:90:3f:
81:ed:97:d6:1e:af:73:da:9b:46:15:97:41:79:0e:20:2e:b8:
d6:9d:cb:f9:e7:ec:10:8d:0c:34:d6:75:10:97:8e:45:96:10:
0a:7f:d2:65:32:0d:54:27:9e:ff:a5:aa:b7:07:5a:d4:79:37:
2e:3f:2f:9f:b0:d1:5a:cd:0c:d7:a8:3e:4e:c2:31:a9:ff:7c:
a4:00:d4:1c:72:95:29:ae:c6:5f:76:7f:d5:9d:1e:d9:0c:bc:
2f:e4:13:2c:55:f8:c3:b9:aa:e0:b1:b6:b6:87:8b:c3:64:37:
b3:99:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org