Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6JXgoJNhOI4fGd29ymguca0X6eY.roa
File: 6JXgoJNhOI4fGd29ymguca0X6eY.roa (raw, json)
Hash identifier: 4fDQpHxhRocuEUDK5RQyCFby5beiY8zfSFY0A1YBbgE=
Subject key identifier: E8:95:E0:A0:93:61:38:8E:1F:19:DD:BD:CA:68:2E:71:AD:17:E9:E6
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849E51DFBF603D95390C45B02D101CF3A2
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6JXgoJNhOI4fGd29ymguca0X6eY.roa
Signing time: Tue 22 Nov 2022 07:51:16 +0000
ROA not before: Tue 22 Nov 2022 07:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 152.89.249.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
195.20.104.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:51:df:bf:60:3d:95:39:0c:45:b0:2d:10:1c:f3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 07:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e895e0a09361388e1f19ddbdca682e71ad17e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:cc:3d:b0:69:76:39:3d:70:1a:8d:a6:5f:
ef:e8:ea:8c:d8:91:08:6d:21:42:42:49:b6:bc:25:
2a:8d:c4:6a:52:01:e2:fc:25:d8:43:b6:cb:28:1c:
42:bf:68:d4:89:44:38:a5:21:d4:ab:9d:8c:44:13:
28:a1:9e:a7:aa:dc:5d:58:78:91:39:6a:32:05:28:
c9:76:96:11:b6:d8:fa:c2:8b:58:4b:34:68:09:ed:
00:a7:0a:18:48:56:ef:5a:c3:fa:21:ec:92:f8:df:
e4:3e:a7:41:7f:63:f9:62:8e:8a:a4:52:bc:8f:5f:
8f:f2:df:e4:77:6a:1d:bc:cb:1d:12:f4:39:89:fa:
cb:b8:fa:20:a0:da:fd:69:e3:f1:85:1a:ce:d0:02:
ed:02:66:1a:3e:89:2d:47:2c:3b:77:34:a2:62:ea:
37:cf:18:89:59:70:c4:e2:a2:54:09:2d:cc:20:28:
69:d6:77:5b:94:42:6b:3a:cf:f1:86:81:c9:ac:fd:
04:94:68:73:7f:f5:b6:1f:96:2d:c9:c3:df:76:5b:
db:79:a8:91:32:85:60:a9:9c:df:7a:2e:be:70:9c:
57:8d:d6:a7:9f:ef:4f:c8:46:2d:d4:fc:ac:80:87:
7d:13:ce:c7:ce:52:66:2b:4d:9a:43:0e:1f:3d:8c:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:95:E0:A0:93:61:38:8E:1F:19:DD:BD:CA:68:2E:71:AD:17:E9:E6
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6JXgoJNhOI4fGd29ymguca0X6eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.249.0/24
193.151.182.0/24
194.113.222.0/24
195.20.104.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:08:69:ce:80:b2:1a:26:da:bb:a8:a4:4c:e9:c6:3e:c0:
21:f1:f5:a3:97:b0:8e:53:ee:80:b1:ef:ed:a9:a6:43:75:5e:
6c:4d:36:0b:c6:a7:69:31:01:e1:02:7e:4b:e5:21:33:d9:05:
ac:97:fd:f9:a4:8f:15:2e:e6:00:a5:ae:a0:43:82:cf:16:74:
f5:e7:31:71:c4:ca:1f:37:81:28:5a:b3:ce:65:ad:05:d6:d4:
b0:5d:c5:e5:fa:c9:09:dd:99:cc:92:9b:fd:c9:f8:15:8c:7e:
f0:d3:58:1d:4d:ef:fc:9f:1c:19:b4:55:11:10:be:0c:da:49:
68:d2:93:02:6f:b7:b5:bf:f5:34:21:d0:48:52:cd:5d:33:92:
c4:a5:86:cc:87:73:53:f7:ed:3e:29:98:e6:f9:6a:1a:4b:77:
2d:46:39:0d:fe:88:8a:40:4a:e1:be:8d:f0:b3:57:67:84:40:
a2:20:80:79:21:80:64:e4:ce:91:6c:42:4e:fe:66:2b:dc:76:
ca:0d:13:63:2f:55:31:f8:f1:3d:64:a9:41:02:1e:b0:d8:5e:
7c:29:42:f1:56:a0:5b:7f:e8:ae:22:5b:a0:9d:66:bc:bc:c2:
38:9b:20:f6:76:4a:24:4d:bd:c2:4f:4a:1d:3d:1a:b2:17:12:
38:f4:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org