Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6aXwTpG3WxaUz0jzWJVCIpq83r0.roa
File: 6aXwTpG3WxaUz0jzWJVCIpq83r0.roa (raw, json)
Hash identifier: H8iYQRD2G2zxfengbCtgYcBODFCAaPGsiZEm99+xTjg=
Subject key identifier: E9:A5:F0:4E:91:B7:5B:16:94:CF:48:F3:58:95:42:22:9A:BC:DE:BD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 16DD9E69
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6aXwTpG3WxaUz0jzWJVCIpq83r0.roa
Signing time: Fri 25 Mar 2022 02:16:37 +0000
ROA not before: Fri 25 Mar 2022 02:16:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 185.121.168.0/24 maxlen: 24
185.99.132.0/24 maxlen: 24
185.195.239.0/24 maxlen: 24
185.99.133.0/24 maxlen: 24
2a06:a006::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:1280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383622761 (0x16dd9e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 25 02:16:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9a5f04e91b75b1694cf48f3589542229abcdebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:77:a5:55:5b:14:43:c1:c8:7f:cd:76:ad:
5c:e9:f0:0b:48:f1:85:e9:92:22:4f:b3:1a:38:97:
a6:c9:27:04:c6:95:af:0a:d3:55:37:a2:16:27:c3:
a2:cc:85:6f:9f:77:50:fb:61:b2:b3:6d:6b:d5:27:
1d:86:8a:95:3c:d6:78:12:8d:02:f7:02:87:66:d7:
0f:d7:cc:29:5e:49:8a:eb:2a:10:b7:64:0d:59:0f:
1b:a5:96:19:56:22:e4:09:a4:a6:26:5c:ae:90:5a:
d0:1e:62:83:49:a8:d8:90:36:48:27:0e:e1:bf:78:
a8:87:05:72:d2:03:f5:e0:61:cb:43:e3:3b:06:a5:
17:11:56:c9:e2:68:e1:70:d4:9c:88:9e:fe:1a:7a:
13:c4:66:a0:54:f2:75:61:67:92:7a:35:e5:27:74:
bf:86:e2:80:13:3d:23:08:13:0e:a4:5d:cb:4e:12:
74:10:62:68:ac:6a:87:10:d6:c9:fc:50:a8:ee:8c:
e0:7a:b3:66:08:bf:cc:8b:70:dd:0e:7f:47:27:a0:
a2:51:24:d1:b1:fd:74:33:ca:7c:10:48:85:2d:80:
61:32:99:c2:20:a0:9d:b0:88:37:de:f7:76:8d:0a:
72:46:d9:3f:8b:cb:d3:ce:a1:81:36:c0:1d:78:b0:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:F0:4E:91:B7:5B:16:94:CF:48:F3:58:95:42:22:9A:BC:DE:BD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6aXwTpG3WxaUz0jzWJVCIpq83r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.132.0/23
185.121.168.0/24
185.195.239.0/24
IPv6:
2a06:1280::/32
2a06:a004::/32
2a06:a006::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b4:c4:e0:69:c2:fe:6c:f8:cb:c5:03:e0:81:83:dd:be:23:
bc:b5:1b:af:17:96:2e:db:40:b6:37:c9:19:9a:d9:42:b4:76:
b3:40:09:be:1b:44:88:e3:80:8f:b0:08:d6:3e:b7:b0:54:6f:
b0:4c:44:b6:97:55:34:49:8e:f8:b0:a3:3d:9a:5f:ae:a5:2e:
06:19:5e:0d:15:84:61:7c:fc:22:57:0e:1d:4c:21:00:3e:05:
f2:98:2b:72:f5:9b:f0:54:18:35:b7:78:20:23:6c:bb:aa:86:
b9:a4:8b:f8:89:bd:07:54:f3:be:06:a2:f0:c9:8e:c0:a5:e1:
82:37:17:80:98:b7:02:08:8e:9d:ed:93:59:d6:94:f2:62:89:
79:59:b3:57:22:f9:b5:e0:ce:d7:d2:44:09:7f:9a:74:d2:be:
81:98:c8:e6:e6:c1:34:77:99:ac:6d:f4:4a:86:c6:28:b5:e1:
de:e0:9b:22:9f:f0:bd:d5:56:ff:ab:13:19:92:8d:da:05:8a:
ee:a5:6f:a9:47:ba:4f:ed:ed:8c:51:5b:e5:c0:a3:2f:16:96:
30:b2:dd:53:1f:1d:5e:63:9d:91:c5:e5:fa:8f:de:d0:2b:5b:
51:be:55:df:92:25:59:14:ba:2d:4b:d7:fe:b1:cb:1e:c3:1c:
21:40:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org