Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/adUgIxkPMNexsuaPmDUPCxs9Qjc.roa
File: adUgIxkPMNexsuaPmDUPCxs9Qjc.roa (raw, json)
Hash identifier: 2JQKfLW35SeFuBvzV/oFEeyKOEmMnTxYmxOPHYxpTCE=
Subject key identifier: 69:D5:20:23:19:0F:30:D7:B1:B2:E6:8F:98:35:0F:0B:1B:3D:42:37
Certificate issuer: /CN=fdfdb6fad0699cefa0f3a306ea3c5ba9c3115219
Certificate serial: 7CCA6C
Authority key identifier: FD:FD:B6:FA:D0:69:9C:EF:A0:F3:A3:06:EA:3C:5B:A9:C3:11:52:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_f22-tBpnO-g86MG6jxbqcMRUhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/adUgIxkPMNexsuaPmDUPCxs9Qjc.roa
Signing time: Sat 01 Jan 2022 00:52:55 +0000
ROA not before: Sat 01 Jan 2022 00:52:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60905
IP address blocks: 128.0.49.0/24 maxlen: 24
128.0.50.0/24 maxlen: 24
128.0.51.0/24 maxlen: 24
128.0.48.0/24 maxlen: 24
2a10:7bc0:0:2::/64 maxlen: 64
2a10:7bc0:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8178284 (0x7cca6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdfdb6fad0699cefa0f3a306ea3c5ba9c3115219
Validity
Not Before: Jan 1 00:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69d52023190f30d7b1b2e68f98350f0b1b3d4237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:86:c9:27:b2:81:43:c8:2f:f4:b6:b9:f3:
3f:c0:9b:7b:ac:01:55:77:0e:68:28:14:61:d1:4f:
11:43:64:b8:8c:73:b3:58:b0:39:ce:83:05:22:e8:
73:3f:ba:bc:0d:86:19:78:86:47:ac:06:ec:99:33:
9a:06:0a:93:e4:00:fc:4c:98:18:e0:44:99:b3:fd:
5c:7c:77:10:f7:49:30:c0:d2:98:ab:d1:ae:cb:89:
6f:76:43:1e:aa:5d:da:67:24:69:75:4e:7e:b8:a6:
10:90:c5:79:40:6e:8c:1b:2b:1b:11:13:df:b3:32:
f3:7b:7f:65:5e:d6:85:a0:a5:4d:10:33:06:e8:0a:
09:a7:75:bf:41:a0:ec:77:12:21:15:ff:9b:2c:fe:
62:d2:a4:19:6b:3a:e6:06:6b:a8:3c:0e:f7:d8:13:
69:25:be:40:9d:cb:35:98:57:ef:6d:85:67:2d:bd:
d2:3c:f2:fc:0a:3c:ce:8f:39:8a:cd:54:b6:d8:46:
c6:06:a7:54:53:36:50:af:9f:37:2d:14:9a:4b:ac:
b1:2b:ff:82:f0:1c:92:b2:90:53:c7:e0:50:0d:63:
f4:25:1f:b0:38:e2:f3:f3:df:83:6c:2c:ea:1e:8f:
3c:a9:21:56:0c:38:cd:bf:2a:56:99:20:6d:34:af:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:20:23:19:0F:30:D7:B1:B2:E6:8F:98:35:0F:0B:1B:3D:42:37
X509v3 Authority Key Identifier:
keyid:FD:FD:B6:FA:D0:69:9C:EF:A0:F3:A3:06:EA:3C:5B:A9:C3:11:52:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_f22-tBpnO-g86MG6jxbqcMRUhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/adUgIxkPMNexsuaPmDUPCxs9Qjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/_f22-tBpnO-g86MG6jxbqcMRUhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.48.0/22
IPv6:
2a10:7bc0:0:1::-2a10:7bc0:0:2:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:87:7c:c2:55:34:0a:a8:38:06:eb:dc:93:d5:58:f7:28:c2:
24:81:5a:2a:38:03:12:b8:1b:7d:b8:63:04:95:2a:d5:cc:81:
ae:fe:bb:b1:cd:2d:17:c7:0b:73:5c:67:16:95:2a:e0:61:4f:
e0:b5:ee:35:df:fc:16:91:03:18:7b:77:ea:db:7a:5b:5f:0b:
e1:16:85:1b:67:4f:a2:fe:61:ed:f1:7b:40:02:88:ef:b9:11:
ca:2b:71:0e:f8:ba:ae:0c:18:ce:78:1d:73:ab:b1:93:19:cc:
63:a1:b3:19:6f:bb:8b:1d:db:81:7e:3d:d4:32:75:38:33:76:
8c:2d:56:a5:d2:63:82:6b:72:97:ba:f7:b4:ec:35:c4:81:b2:
e1:d3:4b:3b:cd:18:fd:a8:29:2b:77:1e:86:b9:22:3c:4f:e4:
25:d6:03:39:93:ef:9e:d8:cf:c6:f0:e5:8e:11:42:7a:c1:fa:
7a:72:e0:7e:4d:6d:14:f7:e0:ab:f3:09:75:a3:74:7d:0c:6b:
5a:26:fd:0b:e1:70:2e:68:41:78:6e:88:ee:aa:88:f0:be:2d:
d6:a5:ef:1a:72:12:73:c0:10:a6:41:42:4b:b1:70:4f:dc:03:
4e:d1:ea:48:2b:ea:57:4a:17:84:f6:80:9d:de:2f:9f:d8:fe:
93:b1:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org