Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/h-mDrm0SMwxrmv8ccGizVN9xDVM.roa
File: h-mDrm0SMwxrmv8ccGizVN9xDVM.roa (raw, json)
Hash identifier: QZOqz6c+Pa0MHgQnsyK0Y2cHAOJK4f2VkmgZ9XIGyJA=
Subject key identifier: 87:E9:83:AE:6D:12:33:0C:6B:9A:FF:1C:70:68:B3:54:DF:71:0D:53
Certificate issuer: /CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Certificate serial: 01856DDD6E19D75CB9DC6C8E1FC912952C1C
Authority key identifier: A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/h-mDrm0SMwxrmv8ccGizVN9xDVM.roa
Signing time: Sun 01 Jan 2023 15:05:06 +0000
ROA not before: Sun 01 Jan 2023 15:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50941
IP address blocks: 178.18.192.0/24 maxlen: 24
178.18.195.0/24 maxlen: 24
178.18.194.0/24 maxlen: 24
178.18.193.0/24 maxlen: 24
178.18.199.0/24 maxlen: 24
178.18.198.0/24 maxlen: 24
178.18.197.0/24 maxlen: 24
178.18.196.0/24 maxlen: 24
178.18.202.0/24 maxlen: 24
178.18.201.0/24 maxlen: 24
178.18.200.0/24 maxlen: 24
178.18.206.0/24 maxlen: 24
178.18.205.0/24 maxlen: 24
178.18.204.0/24 maxlen: 24
178.18.203.0/24 maxlen: 24
178.18.207.0/24 maxlen: 24
185.88.132.0/24 maxlen: 24
185.21.4.0/24 maxlen: 24
185.21.7.0/24 maxlen: 24
185.21.6.0/24 maxlen: 24
2a00:54a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:6e:19:d7:5c:b9:dc:6c:8e:1f:c9:12:95:2c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Validity
Not Before: Jan 1 15:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87e983ae6d12330c6b9aff1c7068b354df710d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:cf:ff:a3:43:d1:05:bb:1b:61:3f:dd:bb:
b2:fc:8e:5e:8f:9d:78:db:6b:dc:21:52:e3:57:07:
37:d7:26:dd:77:01:6a:40:bd:b0:6f:31:89:62:c2:
b8:4d:83:19:ff:6b:61:14:cf:d7:dd:72:62:1a:95:
d6:17:f3:53:d2:a6:f2:44:c5:2b:03:91:e1:55:15:
a9:52:04:d5:42:04:94:03:9a:83:82:a1:21:a4:eb:
73:44:1d:17:8b:36:28:2f:ff:21:b3:cc:c8:03:df:
be:d3:12:9a:3e:76:59:aa:3c:eb:52:eb:83:b6:ea:
dd:3b:a8:89:27:99:f4:04:34:2c:e8:54:dc:87:3b:
4f:0c:d2:ac:50:e9:ba:12:5d:d0:d5:c0:1c:49:d7:
20:a0:61:57:38:e5:af:4d:92:e1:e4:9f:76:3e:ba:
bf:02:f7:f3:8a:79:91:1a:f3:23:83:5e:f7:9d:96:
0c:f1:7a:c9:c7:bc:bd:90:fc:4f:a3:f8:42:02:c1:
f0:37:d8:8f:db:eb:35:e0:63:59:d9:92:d6:b5:15:
aa:57:e5:13:53:89:8c:95:3c:11:de:48:f1:40:5c:
97:43:f6:45:10:bb:a2:69:7e:cb:17:5f:84:b2:74:
80:67:f9:00:1b:4f:15:48:94:11:d6:35:a2:3a:f1:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:83:AE:6D:12:33:0C:6B:9A:FF:1C:70:68:B3:54:DF:71:0D:53
X509v3 Authority Key Identifier:
keyid:A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/h-mDrm0SMwxrmv8ccGizVN9xDVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.192.0/20
185.21.4.0/24
185.21.6.0/23
185.88.132.0/24
IPv6:
2a00:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
08:f8:b6:94:36:ed:e4:42:29:f4:59:f3:72:44:8a:6e:1a:c3:
1e:8f:24:95:f0:9e:fc:3c:72:aa:05:83:cd:0e:0a:52:74:a5:
66:2e:7b:ba:04:c3:c7:b0:20:62:5e:75:d9:74:22:b4:d9:0d:
2d:24:d1:df:65:ae:0e:4d:ac:cd:f4:c0:7f:2e:62:53:4f:de:
e8:2a:a2:65:e1:64:30:b2:42:03:30:16:4b:6e:34:1f:5c:b2:
57:77:04:03:23:9a:f7:da:87:1a:ea:81:e4:16:15:9d:40:7e:
df:c9:cc:0c:ee:11:43:ba:21:41:d3:17:5e:ca:b9:0c:c7:12:
35:32:6a:b8:04:2a:67:63:35:8e:ee:56:da:8e:91:10:57:56:
cd:31:b7:c2:bf:20:86:a3:67:05:25:4d:82:64:dd:ec:fc:18:
02:ee:47:17:3f:10:93:3c:81:1a:a8:52:45:1c:fe:83:eb:6b:
2b:38:31:d2:87:21:16:6f:43:26:e8:cd:6a:42:ac:82:70:c0:
a3:14:ef:e4:c4:0b:a3:7e:f9:15:fe:2e:cf:a7:74:eb:59:a7:
7d:ed:51:16:0a:f4:b1:b4:0f:38:ef:be:bb:d9:c3:d3:29:fd:
bd:55:a2:99:8f:5f:79:6b:71:8b:dd:2a:c9:a6:6d:80:c5:6f:
93:46:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org