Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/NzD2bMG1jyHa1q536p0xM8s0xdU.roa
File: NzD2bMG1jyHa1q536p0xM8s0xdU.roa (raw, json)
Hash identifier: EF5cq0F6KWgijS/7LL27gKiAmoDRijf2oRt916SUvCs=
Subject key identifier: 37:30:F6:6C:C1:B5:8F:21:DA:D6:AE:77:EA:9D:31:33:CB:34:C5:D5
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D48EB2FA171573896D7D8418D02B8
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/NzD2bMG1jyHa1q536p0xM8s0xdU.roa
Signing time: Sun 01 Jan 2023 13:55:02 +0000
ROA not before: Sun 01 Jan 2023 13:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207841
IP address blocks: 193.57.144.0/24 maxlen: 24
193.57.159.0/24 maxlen: 24
193.57.167.0/24 maxlen: 24
193.57.168.0/24 maxlen: 24
2a0f:85c2::/32 maxlen: 48
2a0f:85c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:48:eb:2f:a1:71:57:38:96:d7:d8:41:8d:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3730f66cc1b58f21dad6ae77ea9d3133cb34c5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:1c:ab:28:22:95:07:c7:a7:32:eb:1a:f3:
97:7a:ca:ad:6d:fb:24:40:25:99:58:51:f2:1a:c2:
e2:49:21:4e:9d:a1:7a:1b:d1:81:1a:90:2e:ca:71:
26:5b:42:3e:b3:5e:09:9e:ae:8d:a2:0a:2c:be:4f:
44:21:fb:80:08:88:53:0f:7f:b9:98:66:4d:09:15:
b3:ba:55:75:15:f4:1d:20:7c:c2:c7:dc:dc:88:b0:
a1:44:dc:76:41:04:ca:42:eb:78:76:a3:0e:86:71:
7a:20:d9:24:46:f0:1b:e3:4a:b9:65:02:7f:b2:ef:
07:a3:b3:96:23:95:56:c4:a9:61:e0:29:b8:62:0d:
4d:85:6d:66:8c:6e:fe:ea:1b:ff:2a:fd:bd:be:dd:
8a:39:68:f4:f5:af:97:28:97:2a:55:26:42:50:ba:
38:3c:6e:fc:6e:50:dc:b8:a4:8f:23:7c:f1:51:b8:
18:f7:d4:69:c7:26:0d:2c:00:9f:37:6b:13:87:77:
0e:7b:d2:f8:70:5f:f3:b2:c3:35:94:20:3a:af:15:
9a:2b:9f:2f:5a:65:15:8e:a9:89:e4:96:8f:b1:d1:
af:b6:2e:f1:7d:bc:e0:5b:33:28:b5:1e:56:82:d5:
f5:1e:4d:f7:d5:82:ce:63:7d:7f:d2:32:40:38:77:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:30:F6:6C:C1:B5:8F:21:DA:D6:AE:77:EA:9D:31:33:CB:34:C5:D5
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/NzD2bMG1jyHa1q536p0xM8s0xdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.144.0/24
193.57.159.0/24
193.57.167.0-193.57.168.255
IPv6:
2a0f:85c0::/48
2a0f:85c2::/32
Signature Algorithm: sha256WithRSAEncryption
53:84:69:75:96:9b:36:25:5e:a1:8e:9e:37:6f:4e:e8:18:f9:
85:96:dd:aa:f5:4c:17:61:1f:0d:62:36:82:4b:11:2b:13:33:
97:a6:80:12:21:17:d6:3e:7b:7e:7b:57:b6:67:ae:04:56:8a:
ef:d0:16:46:8e:4b:25:33:3e:ea:56:1e:ab:e6:9e:0a:b0:2b:
fd:89:50:e8:0b:80:62:58:9c:50:a2:22:2b:e3:7e:cf:59:f9:
07:4c:6e:b6:6e:9f:65:e0:cd:eb:17:e7:98:f8:cd:b8:9d:57:
76:a5:e3:c4:e7:19:b2:f7:77:49:d1:be:fe:37:0e:cf:e3:ca:
ae:8e:38:c3:04:07:f0:6a:db:fd:54:e3:28:f4:45:9a:6a:d6:
c0:20:fd:3a:06:97:5f:f5:00:c3:54:b4:2b:5e:bb:04:b1:8e:
4b:b7:87:e8:ee:37:a4:5f:88:5b:6c:62:1a:90:93:e3:6f:73:
8f:05:a3:b8:29:ec:94:70:49:c0:fb:f9:e5:fa:74:a7:2b:39:
22:ed:6b:85:fe:6d:7a:9e:b3:fd:34:e6:47:f1:fe:e3:97:7f:
3c:76:97:0e:5d:4d:ca:29:24:67:4a:0b:d7:87:ec:c8:ff:32:
c8:9f:ea:32:93:f0:aa:2f:6c:8b:0b:04:75:94:c2:92:08:84:
05:a3:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:14 2024 by rpki-client on console-ams.rpki-client.org