Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/DB6KUSh6USRPMQlwsUCuByO8zmI.roa
File: DB6KUSh6USRPMQlwsUCuByO8zmI.roa (raw, json)
Hash identifier: vXSQ8J5/j7SaYMcZJHCpF+ipSAwtZYxOED6AmU6k+3Q=
Subject key identifier: 0C:1E:8A:51:28:7A:51:24:4F:31:09:70:B1:40:AE:07:23:BC:CE:62
Certificate issuer: /CN=4034513d969482401a40976c9d1f0bbfc3df6146
Certificate serial: 01857255B7E926C57121B36F92F8B47F1FE9
Authority key identifier: 40:34:51:3D:96:94:82:40:1A:40:97:6C:9D:1F:0B:BF:C3:DF:61:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDRRPZaUgkAaQJdsnR8Lv8PfYUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/DB6KUSh6USRPMQlwsUCuByO8zmI.roa
Signing time: Mon 02 Jan 2023 11:54:58 +0000
ROA not before: Mon 02 Jan 2023 11:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196724
IP address blocks: 195.182.36.0/24 maxlen: 24
178.23.176.0/21 maxlen: 21
2a00:1cf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b7:e9:26:c5:71:21:b3:6f:92:f8:b4:7f:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4034513d969482401a40976c9d1f0bbfc3df6146
Validity
Not Before: Jan 2 11:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c1e8a51287a51244f310970b140ae0723bcce62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8c:98:b8:90:15:96:1f:9f:1b:5c:02:d4:8e:
11:55:d5:dc:00:5e:72:fb:c8:48:1e:5c:7a:ed:ed:
e6:c8:8d:6e:85:d1:18:fe:d0:cd:29:d9:35:51:12:
9b:3c:c9:b2:8a:2a:41:97:f2:44:7b:d4:86:ec:d8:
cd:eb:fd:7b:76:fa:16:4b:89:86:60:ed:e4:6f:6e:
a4:fa:34:b7:e7:d8:e3:4c:db:ad:69:db:88:e5:20:
a9:ac:96:50:9b:0b:17:9c:8a:d1:34:32:25:ff:ee:
27:30:f2:86:9b:a6:da:fb:45:1d:e3:f5:a2:44:37:
37:68:15:14:e8:c5:dd:64:bb:51:82:06:9e:36:8e:
9b:05:45:aa:ba:00:68:90:3c:b9:ae:17:7a:a5:7e:
25:d2:0f:0d:a7:d2:af:23:3c:d5:8e:37:83:4f:f6:
03:5d:af:b0:1c:12:63:b8:dd:90:69:23:e9:0f:01:
70:61:9b:48:73:59:1f:ee:89:5a:b4:15:01:9f:13:
a2:db:6e:a3:94:a3:bd:70:e3:b4:9a:88:cb:21:fb:
e3:8c:7d:1f:a8:70:22:3b:cc:04:c0:18:b0:1a:29:
d2:f2:3c:bf:91:7a:c0:ce:94:73:26:f8:12:80:80:
0f:96:f3:63:c4:e4:e7:c4:52:6d:ac:88:91:01:7b:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:8A:51:28:7A:51:24:4F:31:09:70:B1:40:AE:07:23:BC:CE:62
X509v3 Authority Key Identifier:
keyid:40:34:51:3D:96:94:82:40:1A:40:97:6C:9D:1F:0B:BF:C3:DF:61:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDRRPZaUgkAaQJdsnR8Lv8PfYUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/DB6KUSh6USRPMQlwsUCuByO8zmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9b9a6e-1784-4aa6-ba3b-ab8083932c60/1/QDRRPZaUgkAaQJdsnR8Lv8PfYUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.176.0/21
195.182.36.0/24
IPv6:
2a00:1cf0::/32
Signature Algorithm: sha256WithRSAEncryption
20:28:3b:b3:b0:0f:6b:79:10:5d:06:b6:28:33:ea:91:35:1c:
f6:2c:f4:ed:23:ee:5d:ba:24:27:ec:3f:cf:38:fc:94:87:61:
6e:9b:79:ab:63:50:bf:28:18:ef:d2:37:b1:d1:07:b4:ee:36:
fb:90:43:99:24:1e:fe:5f:bc:bc:5f:57:c6:f9:ae:b7:02:75:
e8:9b:ce:2a:2c:41:a0:9a:5b:5c:61:c4:66:51:2a:f1:22:57:
f4:ad:61:1a:e9:de:de:1b:36:2e:7f:03:1c:a1:00:5a:38:b9:
3c:45:87:5b:8a:82:30:65:f9:6c:9c:4c:8c:1d:cf:52:7c:8d:
9b:fe:24:71:75:7f:45:36:79:fd:2f:e3:4e:2a:97:62:28:93:
05:24:c4:13:67:08:0a:84:73:c9:21:26:dd:ae:35:f0:9a:28:
3f:65:d8:7b:f2:3a:6d:ae:95:36:0a:21:64:ce:d5:52:27:59:
2e:d2:b3:f8:ad:f5:56:23:b6:ba:41:58:59:d2:25:18:3a:7f:
13:96:79:72:cd:ee:7c:de:94:91:dd:d6:96:e6:8e:70:71:ed:
27:30:93:c2:d0:06:07:2a:78:e4:3d:16:4d:46:b5:38:17:b7:
00:49:99:df:0f:df:83:1d:e8:91:91:14:51:6c:a9:f1:ef:d5:
eb:bf:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org