Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/VUPTBNPoaUkhVt27RK0p-svq3_4.roa
File: VUPTBNPoaUkhVt27RK0p-svq3_4.roa (raw, json)
Hash identifier: ona/W2aqDuwwrEkLWgAZhT/aUUXDPxYPEMtPjhdse28=
Subject key identifier: 55:43:D3:04:D3:E8:69:49:21:56:DD:BB:44:AD:29:FA:CB:EA:DF:FE
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 07452F0F
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/VUPTBNPoaUkhVt27RK0p-svq3_4.roa
Signing time: Fri 21 Jan 2022 14:20:09 +0000
ROA not before: Fri 21 Jan 2022 14:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207841
IP address blocks: 193.57.144.0/24 maxlen: 24
193.57.159.0/24 maxlen: 24
193.57.167.0/24 maxlen: 24
193.57.168.0/24 maxlen: 24
2a0f:85c2::/32 maxlen: 48
2a0f:85c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121974543 (0x7452f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 21 14:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5543d304d3e869492156ddbb44ad29facbeadffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:00:e9:74:0d:58:8b:e5:62:46:9c:25:42:
80:c6:02:91:04:ee:d1:14:0e:30:4f:a1:70:a2:8e:
fe:37:fa:9e:ed:66:b2:49:1e:9f:49:97:6b:d8:8d:
bc:fe:48:21:2b:e9:79:92:d6:f9:de:79:9d:8a:6a:
06:e5:65:d7:37:98:13:e1:dc:72:a3:d4:8b:de:12:
3b:0d:c6:31:12:e0:1c:fa:19:b5:ab:8b:98:e1:67:
f5:73:ab:55:4d:b4:f0:a0:e1:42:c3:36:7b:f9:98:
88:81:09:a1:c2:36:eb:66:14:38:69:7a:b0:22:65:
50:8b:e4:c8:d8:b0:58:00:7d:04:cf:9c:63:18:62:
96:ac:06:40:ae:5e:c5:d1:09:41:13:c3:2a:64:1c:
e1:9f:64:53:a9:1a:c7:e3:49:78:84:97:96:2e:48:
db:6a:47:c6:f2:a0:c8:6f:92:3d:23:35:2b:33:0e:
94:56:7a:95:ab:ff:84:b9:f1:8f:95:04:ba:75:75:
73:94:8f:fe:32:af:ce:38:fc:b9:1e:2c:1f:f3:6b:
9d:83:53:8c:b0:1b:0a:10:f6:45:18:5e:04:4c:16:
2a:c8:93:fd:2f:b5:0a:5e:dc:8a:dd:45:10:e8:ed:
5b:18:2a:c4:b9:9b:64:7f:e6:8f:56:12:8c:01:49:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:D3:04:D3:E8:69:49:21:56:DD:BB:44:AD:29:FA:CB:EA:DF:FE
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/VUPTBNPoaUkhVt27RK0p-svq3_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.144.0/24
193.57.159.0/24
193.57.167.0-193.57.168.255
IPv6:
2a0f:85c0::/48
2a0f:85c2::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d7:7d:ad:99:d1:47:10:d3:2d:14:95:be:d2:16:0e:d4:c8:
a1:38:bc:5e:1d:ff:02:c2:3f:00:a4:6a:21:12:8f:56:62:8e:
94:9d:8d:cd:0a:e2:f0:36:6b:91:dc:bb:a8:b3:8a:b8:b5:6e:
64:bd:ed:a3:36:c8:2e:a8:c3:97:0d:b5:3f:73:12:ed:2b:27:
54:fd:24:d3:07:d4:23:7c:1b:8c:bc:34:6f:68:70:59:84:fa:
a1:9b:99:88:ec:0c:d0:d5:86:01:4a:fd:14:65:d5:54:e1:6c:
6d:f8:0a:1d:b6:ab:7d:d4:61:42:1a:ab:24:e7:7e:f0:38:2f:
90:42:4f:bf:76:dd:96:3a:1c:a9:e0:67:41:90:91:3e:b7:5f:
38:32:7b:f8:bf:c8:14:dd:6b:6e:51:c2:3b:2a:00:bd:9d:98:
bf:33:0f:ef:bc:c9:a2:37:d0:c4:ad:0a:8d:09:cf:60:57:6c:
60:68:cc:66:c0:d7:73:91:04:20:87:84:8a:05:27:0e:b3:48:
26:57:fc:19:d1:28:6b:8d:76:b6:32:2d:50:83:3d:47:57:da:
e0:dc:b3:9c:da:de:93:d8:41:fc:d5:81:fe:b4:83:fc:bc:38:
78:35:e3:8a:d5:f7:1c:4e:2d:59:b0:eb:17:5b:3f:5b:94:15:
43:1f:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org