Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7bd881-595b-4270-9be8-c2a1a717b3ef/1/6yzQOYHDwcn2vKYM4AiPIshEzO4.roa
File: 6yzQOYHDwcn2vKYM4AiPIshEzO4.roa (raw, json)
Hash identifier: UWpMdOmWPRiOg/BrDB4NB9JkEpRcF/bBTSleeaHTPhM=
Subject key identifier: EB:2C:D0:39:81:C3:C1:C9:F6:BC:A6:0C:E0:08:8F:22:C8:44:CC:EE
Certificate issuer: /CN=0fe8bafdd3d547f99aa8611afc5802572df58ad8
Certificate serial: 0C060958
Authority key identifier: 0F:E8:BA:FD:D3:D5:47:F9:9A:A8:61:1A:FC:58:02:57:2D:F5:8A:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-i6_dPVR_maqGEa_FgCVy31itg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7bd881-595b-4270-9be8-c2a1a717b3ef/1/6yzQOYHDwcn2vKYM4AiPIshEzO4.roa
Signing time: Sat 01 Jan 2022 10:58:52 +0000
ROA not before: Sat 01 Jan 2022 10:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48707
IP address blocks: 195.2.208.0/23 maxlen: 32
185.253.213.0/24 maxlen: 32
185.253.212.0/22 maxlen: 22
185.253.212.0/24 maxlen: 32
185.253.214.0/24 maxlen: 32
185.253.215.0/24 maxlen: 32
91.230.204.0/23 maxlen: 32
91.230.202.0/23 maxlen: 32
91.230.200.0/23 maxlen: 32
185.237.30.0/24 maxlen: 32
185.237.31.0/24 maxlen: 32
185.237.28.0/24 maxlen: 32
185.237.29.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201722200 (0xc060958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe8bafdd3d547f99aa8611afc5802572df58ad8
Validity
Not Before: Jan 1 10:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb2cd03981c3c1c9f6bca60ce0088f22c844ccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:1e:e1:c0:d0:b4:1e:9f:72:29:4b:dc:54:
07:a0:c3:29:e7:6b:09:18:ee:c1:da:e8:98:cb:f3:
43:5a:a1:1e:3a:e8:19:55:3c:1f:d1:db:07:60:f3:
85:19:2a:59:26:33:b8:b9:46:60:f3:36:75:62:10:
50:56:3a:1a:a4:9c:2b:7c:a7:9e:52:af:9e:d2:b8:
51:94:ff:aa:b6:e0:fd:da:0c:b1:98:6d:f5:2d:97:
3b:04:42:25:3f:8b:71:d7:b9:c0:ae:e9:b8:89:9d:
f4:a4:07:c3:7d:25:c6:74:75:e8:72:a7:6b:9c:c0:
fb:c3:47:6e:d9:69:91:6a:a1:54:f5:f0:c7:84:21:
45:37:70:0e:61:4c:21:dd:e6:c9:4b:ab:b4:89:c9:
61:49:09:cd:3f:ac:0a:a4:b1:66:a7:9b:d3:d5:88:
fd:76:6f:15:cd:64:c9:b1:16:6e:50:d7:4b:58:90:
2e:02:96:ca:ad:b7:9b:94:65:b1:e8:8f:41:55:53:
a6:e4:58:38:d6:7c:da:7e:e3:cf:4f:12:46:97:53:
1e:47:cd:e7:4e:88:2a:8c:66:34:08:d9:91:ce:43:
c9:c7:8c:c4:92:88:49:d5:b4:0b:5d:9a:24:ac:f3:
87:15:49:b2:0e:09:e1:1f:c8:89:5b:1b:ff:16:02:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:D0:39:81:C3:C1:C9:F6:BC:A6:0C:E0:08:8F:22:C8:44:CC:EE
X509v3 Authority Key Identifier:
keyid:0F:E8:BA:FD:D3:D5:47:F9:9A:A8:61:1A:FC:58:02:57:2D:F5:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-i6_dPVR_maqGEa_FgCVy31itg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7bd881-595b-4270-9be8-c2a1a717b3ef/1/6yzQOYHDwcn2vKYM4AiPIshEzO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7bd881-595b-4270-9be8-c2a1a717b3ef/1/D-i6_dPVR_maqGEa_FgCVy31itg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.200.0-91.230.205.255
185.237.28.0/22
185.253.212.0/22
195.2.208.0/23
Signature Algorithm: sha256WithRSAEncryption
31:8f:bc:ba:73:ce:74:1e:99:e8:8d:4b:ed:2d:45:48:51:25:
5b:b0:fd:b1:fc:62:ac:9f:7e:f9:c8:06:36:c7:fc:34:7c:a6:
15:5a:85:93:0e:45:0c:9f:4f:df:10:81:55:61:c2:5d:29:a8:
a9:50:59:ca:1a:a7:70:63:d0:fc:6d:40:d3:a1:2c:24:55:fe:
28:6e:17:71:70:b8:9c:ab:bd:29:70:e6:d1:2b:ad:15:79:d2:
6b:15:8d:c0:b5:f1:79:41:83:5e:d3:8f:a1:7f:dc:e5:b0:34:
20:33:e0:59:c7:c3:96:af:6d:75:df:be:ba:a6:cc:9c:4e:df:
2a:f3:d7:cf:41:34:18:82:62:48:af:a4:de:70:e9:55:a7:21:
bc:04:cf:af:a6:67:09:b1:8d:6b:77:22:0c:d2:d1:74:e9:31:
16:20:01:6f:2e:d1:16:13:4f:76:6f:6c:f6:9c:94:7c:59:a8:
be:cf:d8:30:d0:ca:09:b6:73:6f:e3:54:a5:b5:95:a7:9e:77:
2a:1e:a9:4b:52:90:26:bd:a5:38:a8:8a:21:6c:12:f0:9b:d4:
cc:5c:ab:23:c0:0d:bd:00:84:d3:20:02:4c:2e:7f:3d:57:a2:
ab:13:8d:7d:e8:2f:c9:05:d2:e5:8a:fc:10:1b:8c:80:6e:c1:
a4:53:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:48 2024 by rpki-client on console-ams.rpki-client.org