Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/6KA0T179NK-20PIbAl-TFqQH1m0.roa
File: 6KA0T179NK-20PIbAl-TFqQH1m0.roa (raw, json)
Hash identifier: yw7aKj1F1A6tD3Da5u03oV0M1RyFKf8EaTIJ0JeIVfU=
Subject key identifier: E8:A0:34:4F:5E:FD:34:AF:B6:D0:F2:1B:02:5F:93:16:A4:07:D6:6D
Certificate issuer: /CN=96a8d72552e5ba942ad9d94bdbf102895ea96ee4
Certificate serial: 018570E774C5D9B5CAE54EB5F700AC9CDE3C
Authority key identifier: 96:A8:D7:25:52:E5:BA:94:2A:D9:D9:4B:DB:F1:02:89:5E:A9:6E:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqjXJVLlupQq2dlL2_ECiV6pbuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/6KA0T179NK-20PIbAl-TFqQH1m0.roa
Signing time: Mon 02 Jan 2023 05:14:54 +0000
ROA not before: Mon 02 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21127
IP address blocks: 91.105.128.0/18 maxlen: 24
46.50.128.0/17 maxlen: 24
37.49.192.0/19 maxlen: 24
109.171.0.0/17 maxlen: 24
37.205.48.0/21 maxlen: 24
46.241.0.0/17 maxlen: 24
188.44.96.0/19 maxlen: 24
37.205.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:74:c5:d9:b5:ca:e5:4e:b5:f7:00:ac:9c:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a8d72552e5ba942ad9d94bdbf102895ea96ee4
Validity
Not Before: Jan 2 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a0344f5efd34afb6d0f21b025f9316a407d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:1a:71:81:12:51:42:27:0c:ca:85:e2:8f:
8a:ba:f4:d3:7b:d8:f7:53:7f:9d:fd:dc:0f:91:60:
4d:a8:70:fc:13:38:0c:4e:ea:62:c0:62:59:34:0a:
24:35:59:46:f5:be:51:2d:ad:0e:77:20:14:ac:22:
65:84:b1:2d:9e:de:6e:5e:03:38:df:f2:94:4b:5f:
07:1a:a2:a8:f3:8c:19:1d:f5:a8:0f:9a:2a:d9:3f:
a2:4a:7d:9a:cf:b5:0a:ad:6a:04:1e:ef:9c:1d:8e:
1d:78:62:2a:f5:63:f2:2d:7b:d3:e0:1d:9d:14:63:
27:72:81:59:f9:dc:e2:92:26:28:df:74:67:75:f5:
7d:0f:36:06:56:15:00:cf:1b:33:7e:a6:e8:2f:4b:
e3:d4:e7:3b:ed:b8:9c:92:a4:ed:e0:b7:61:36:dd:
0f:cc:98:00:eb:88:71:be:3a:dd:dd:f8:e6:f3:da:
c9:7c:a4:05:16:19:08:88:da:96:5f:1c:c2:69:c1:
c7:49:f4:eb:35:08:c0:a5:a4:19:c8:1a:74:a6:12:
07:85:9a:f5:aa:ee:c0:d9:92:f1:1f:a5:82:c6:61:
d5:ba:dc:8f:8c:3b:f0:07:c5:28:8c:1b:7c:d0:64:
2f:93:33:6a:a9:a5:14:3d:da:60:c4:a0:e4:37:b0:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:34:4F:5E:FD:34:AF:B6:D0:F2:1B:02:5F:93:16:A4:07:D6:6D
X509v3 Authority Key Identifier:
keyid:96:A8:D7:25:52:E5:BA:94:2A:D9:D9:4B:DB:F1:02:89:5E:A9:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqjXJVLlupQq2dlL2_ECiV6pbuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/6KA0T179NK-20PIbAl-TFqQH1m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/lqjXJVLlupQq2dlL2_ECiV6pbuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.192.0/19
37.205.48.0/21
37.205.64.0/19
46.50.128.0/17
46.241.0.0/17
91.105.128.0/18
109.171.0.0/17
188.44.96.0/19
Signature Algorithm: sha256WithRSAEncryption
38:0a:0d:ab:72:01:e3:ef:06:0c:24:fe:a7:28:48:70:87:db:
fa:f2:35:45:ee:de:57:bd:a1:ae:91:ee:cd:fa:fd:45:99:9f:
4a:2d:1d:b8:14:a0:aa:bd:ce:5f:8c:97:be:6f:78:6e:71:46:
34:6d:22:36:34:59:1e:f9:23:9a:d2:f5:a7:5c:ab:74:0d:4d:
47:4d:cc:d0:34:81:bf:49:a8:90:fa:73:69:42:ca:31:1a:29:
4a:4c:f0:e4:1a:63:26:ce:68:64:18:43:fe:77:79:c5:81:db:
35:21:d2:5d:1c:ee:1f:ba:d7:23:91:8b:1a:30:81:7e:e4:3d:
74:3e:1c:19:88:d1:53:a8:4b:56:0b:bc:d0:60:35:4f:1b:9e:
65:91:55:9e:1a:88:7c:b9:05:da:53:94:9b:3a:32:48:5c:fc:
46:0f:6c:b9:f9:00:a7:3b:fc:01:0a:96:86:e2:8d:c9:16:f4:
09:43:61:17:54:d2:73:7f:9f:6b:5b:d6:fa:a6:5a:2b:ae:e7:
73:ab:21:b3:43:84:77:98:e3:20:09:1b:5a:76:65:d7:0c:4f:
31:e5:a3:e2:86:fc:69:be:d4:78:82:3a:fd:6e:2f:8a:38:a8:
4c:74:a6:bb:c5:e4:64:5f:4f:4c:62:90:61:57:6a:bc:c8:0b:
50:89:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org