Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/6EWWjuBkjwOxgepoZbaka7hhwMc.roa
File: 6EWWjuBkjwOxgepoZbaka7hhwMc.roa (raw, json)
Hash identifier: rEWni25D0c6SoIZgx10GLjdfu+vRgnbZWGuPelVWQTY=
Subject key identifier: E8:45:96:8E:E0:64:8F:03:B1:81:EA:68:65:B6:A4:6B:B8:61:C0:C7
Certificate issuer: /CN=fc232f0e86c291eba6d63e8661ef3f09bc27a57e
Certificate serial: 01823ABBCFAA37C08DB5C53F7F7DCBC700EB
Authority key identifier: FC:23:2F:0E:86:C2:91:EB:A6:D6:3E:86:61:EF:3F:09:BC:27:A5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CMvDobCkeum1j6GYe8_CbwnpX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/6EWWjuBkjwOxgepoZbaka7hhwMc.roa
Signing time: Tue 26 Jul 2022 13:39:23 +0000
ROA not before: Tue 26 Jul 2022 13:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208091
IP address blocks: 94.232.42.0/24 maxlen: 24
94.232.40.0/24 maxlen: 24
94.232.43.0/24 maxlen: 24
94.232.41.0/24 maxlen: 24
94.232.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:bb:cf:aa:37:c0:8d:b5:c5:3f:7f:7d:cb:c7:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc232f0e86c291eba6d63e8661ef3f09bc27a57e
Validity
Not Before: Jul 26 13:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e845968ee0648f03b181ea6865b6a46bb861c0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:9a:c8:14:42:8e:d4:f6:ae:3a:01:55:e8:
a0:2c:ab:3a:ef:ca:6e:44:87:27:bf:d8:b9:7d:77:
7d:7a:45:b3:86:c6:43:18:32:b5:87:14:2a:f8:84:
3f:30:56:d5:da:f7:ca:7f:6c:b7:8e:c4:93:d2:b6:
6d:98:3e:3a:51:fe:20:eb:b0:9e:f1:cd:72:68:b6:
78:6f:39:d0:68:f5:85:9b:59:71:0e:af:68:43:06:
80:8f:48:8d:2b:4b:16:23:b7:8b:76:cf:b5:64:f7:
4e:c3:35:56:f7:e3:37:dd:2f:6a:4c:f9:98:8a:24:
0d:19:53:da:90:ac:90:ec:09:25:f7:3f:8a:67:c7:
ec:27:48:17:52:bb:c1:1b:15:52:7d:3f:8b:09:b8:
aa:ce:b1:64:f7:da:5c:f0:09:99:28:9a:b9:ce:58:
1f:d1:5a:48:b2:f3:41:d5:cd:69:c7:69:d8:26:b6:
67:de:b5:ef:56:4a:48:47:20:60:3a:b3:f7:88:d6:
c5:01:ce:cd:b7:99:df:bc:75:79:5f:ef:e2:2f:ba:
02:19:4a:9f:6c:d7:b1:a6:08:40:5c:55:c0:23:c1:
62:42:5f:2a:96:e8:db:1a:65:27:21:8a:ea:f1:d4:
1d:27:4e:31:8f:38:12:94:20:0e:29:d7:24:bf:06:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:96:8E:E0:64:8F:03:B1:81:EA:68:65:B6:A4:6B:B8:61:C0:C7
X509v3 Authority Key Identifier:
keyid:FC:23:2F:0E:86:C2:91:EB:A6:D6:3E:86:61:EF:3F:09:BC:27:A5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CMvDobCkeum1j6GYe8_CbwnpX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/6EWWjuBkjwOxgepoZbaka7hhwMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.40.0-94.232.44.255
Signature Algorithm: sha256WithRSAEncryption
02:20:a4:da:22:3f:e5:1c:c9:fb:a6:01:4f:7b:11:8a:78:02:
c1:b8:90:6a:fe:2f:23:e3:a2:80:24:5d:bc:e7:1b:d5:4b:93:
2a:01:c7:d4:a6:e4:17:42:c7:0a:e6:19:49:3d:f1:ac:e8:84:
23:7d:52:ef:8e:29:f4:09:5f:62:71:55:08:f4:91:a7:24:76:
7c:08:58:30:66:7a:f8:27:30:cf:a6:78:eb:d7:42:a0:36:d9:
66:1a:cb:6d:ad:87:7d:40:50:0b:e8:e2:e6:cd:24:a1:a7:e2:
76:33:0a:68:a5:84:37:4d:d2:c2:21:cb:83:31:76:79:03:f4:
43:7c:fa:11:e2:0f:92:f3:93:75:7c:0e:f7:bd:29:05:eb:51:
21:19:c1:0a:da:c5:26:eb:14:7a:30:ba:4f:e2:ca:b2:00:29:
61:be:7b:51:f7:5b:5f:ad:d3:60:3f:2d:43:68:12:4e:77:48:
a5:28:67:e2:b0:72:ab:16:26:8b:2e:aa:38:42:f6:f7:49:19:
ad:09:51:db:a9:75:ee:9a:43:8b:41:f4:c6:47:bf:bb:87:00:
51:ea:ad:f6:55:af:cd:80:cc:89:8f:a7:1f:63:1a:1f:7e:68:
57:be:de:cc:5f:f0:76:53:91:1d:d0:4b:41:1d:4e:4c:2d:01:
78:ba:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:01 2024 by rpki-client on console-fra.rpki-client.org