Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/bT90MwvNyxUSu3xzpTDQa7LOu_o.roa
File: bT90MwvNyxUSu3xzpTDQa7LOu_o.roa (raw, json)
Hash identifier: hruhjsv5wwomS84zqVSIKFdHw3KRptwGuVSNTCetcpE=
Subject key identifier: 6D:3F:74:33:0B:CD:CB:15:12:BB:7C:73:A5:30:D0:6B:B2:CE:BB:FA
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 018CC64B78C111C66C8D7D26840BF2CCCA94
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/bT90MwvNyxUSu3xzpTDQa7LOu_o.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.64.0/24 maxlen: 24
94.124.66.0/24 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.68.0/24 maxlen: 24
94.124.69.0/24 maxlen: 24
94.124.70.0/24 maxlen: 24
94.124.71.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.157.0/24 maxlen: 24
185.187.158.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:18::/48 maxlen: 48
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:9::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:78:c1:11:c6:6c:8d:7d:26:84:0b:f2:cc:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d3f74330bcdcb1512bb7c73a530d06bb2cebbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:72:68:32:b7:e6:b9:67:53:9b:43:0b:ee:
29:89:21:d7:05:58:ad:a6:14:b2:de:83:a5:bf:f5:
e0:d1:81:89:97:7f:58:fa:e4:16:07:95:a9:08:38:
34:6e:4f:6e:e8:07:be:38:ce:23:e5:cd:3c:23:95:
60:10:08:4f:b6:9f:f4:27:62:fe:67:f2:f3:d0:08:
c4:92:bf:48:e7:ab:79:1f:6b:40:51:85:d4:bf:e9:
f5:c7:8e:48:0d:83:4b:07:47:be:fe:a4:b7:b9:11:
ac:93:b5:65:b8:e5:18:ff:e2:57:8b:ee:dc:d2:65:
1e:0c:8b:10:94:c9:ca:9e:b8:bb:07:b8:b4:12:94:
33:eb:a3:ee:b9:6a:9c:29:84:41:af:ca:69:e3:f9:
4f:78:17:de:0c:1f:57:04:d7:b6:0b:79:b7:5e:7d:
4c:67:ef:95:55:08:57:26:93:1d:b7:c4:f3:7c:52:
ae:59:8d:a0:f6:fe:0c:78:39:e0:2e:a4:27:d5:70:
b9:cb:3c:ea:d2:ac:bc:38:43:cf:a8:c8:c3:06:21:
f4:ef:84:72:be:6e:01:10:1f:08:00:d6:27:1a:6d:
00:07:44:52:23:ed:d6:37:a2:da:6c:06:f7:a8:55:
bc:c8:5f:d2:e9:f3:c5:55:2d:4a:83:17:e9:f0:a2:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:74:33:0B:CD:CB:15:12:BB:7C:73:A5:30:D0:6B:B2:CE:BB:FA
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/bT90MwvNyxUSu3xzpTDQa7LOu_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:9::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:18::/48
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
53:4f:99:a1:0d:66:7a:53:02:6c:12:ff:b5:57:f1:4d:28:6c:
9e:ab:ea:26:e2:78:bc:b6:77:c9:84:95:d1:29:a1:a6:81:52:
49:b0:f3:fd:7a:1a:ea:a1:2b:aa:8c:6c:95:b3:b6:81:0e:a0:
9f:b6:83:d0:22:97:00:2c:00:8d:52:de:5c:2a:df:46:9e:63:
bb:c5:9b:4a:13:33:1c:bd:d9:43:c1:9d:7b:99:bf:da:ce:dc:
6d:5d:b3:c7:ea:58:43:53:77:69:50:63:e3:8b:e3:4a:64:28:
ef:c6:31:3d:4d:5f:2f:14:e6:0e:ac:b8:f9:c9:e0:42:50:58:
52:7c:c4:e8:9e:c0:fe:87:55:93:42:b1:b9:e9:ee:94:9f:c1:
d0:b5:af:4f:ca:48:ce:19:71:20:b1:f6:08:82:4b:3f:b9:b9:
6f:63:1a:dc:3f:df:2d:76:ee:e0:17:19:a4:21:56:cc:62:73:
b0:c3:b8:7b:77:c6:24:f6:98:8c:d8:72:88:aa:84:8e:48:2d:
e0:ed:36:97:b3:d4:0b:dc:ac:73:cd:86:20:09:4f:aa:e5:35:
99:14:ae:2d:e1:8c:2b:52:b5:3a:64:ed:39:40:4c:42:7c:dd:
09:6c:d0:77:c1:c3:61:26:27:4a:29:8b:dd:36:b7:36:ca:f6:
69:a2:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org