Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/s662bK_PWCQeGruc1iyx8-NigRg.roa
File: s662bK_PWCQeGruc1iyx8-NigRg.roa (raw, json)
Hash identifier: idsgc7/oJWq12cwCU0hzgWk+J7BgeLSNcXuqOJas9MM=
Subject key identifier: B3:AE:B6:6C:AF:CF:58:24:1E:1A:BB:9C:D6:2C:B1:F3:E3:62:81:18
Certificate issuer: /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial: 018884F5A904741324121E81B96BE5FDFBD8
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/s662bK_PWCQeGruc1iyx8-NigRg.roa
Signing time: Sun 04 Jun 2023 05:51:12 +0000
ROA not before: Sun 04 Jun 2023 05:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51185
IP address blocks: 94.124.64.0/21 maxlen: 21
94.124.64.0/24 maxlen: 24
94.124.66.0/24 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.68.0/24 maxlen: 24
94.124.69.0/24 maxlen: 24
94.124.70.0/24 maxlen: 24
94.124.71.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.157.0/24 maxlen: 24
185.187.158.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
2a02:2891:18::/48 maxlen: 48
2a02:2891:13::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2890::/48 maxlen: 48
2a02:2891:9::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2892:36::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:84:f5:a9:04:74:13:24:12:1e:81:b9:6b:e5:fd:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Validity
Not Before: Jun 4 05:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3aeb66cafcf58241e1abb9cd62cb1f3e3628118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:15:79:7e:c7:ad:f2:30:e6:2a:f0:f9:09:
7c:13:d7:ab:de:d4:3d:98:c9:99:8e:66:de:3e:78:
f6:9f:04:f1:3f:b5:41:b3:7b:ce:cd:96:de:c0:82:
43:e6:cf:2b:7f:f2:c5:6f:9c:c2:0c:58:e3:48:04:
6a:f8:7b:c7:91:75:70:3d:a7:42:69:fc:57:31:94:
5d:80:3f:8a:d8:42:38:c5:ea:ed:99:7b:43:6f:f2:
2f:14:fe:69:37:cd:18:a2:8a:d7:d4:e2:85:c8:d6:
37:fd:84:3d:a0:8c:bf:d1:da:f5:06:e2:08:e0:e2:
63:4e:44:e0:50:d0:c7:3f:c7:a2:20:93:95:cf:5c:
33:be:54:97:96:60:7d:33:48:d2:b1:f8:ee:99:f7:
1c:b5:99:7a:59:31:32:0c:9a:6d:86:37:86:35:90:
fd:c1:0a:10:5d:69:73:7b:f8:ab:bf:8e:c1:df:db:
56:6f:87:2d:75:f2:c5:a3:96:0e:c4:ce:02:d3:df:
f9:7c:62:e9:80:4a:fa:7d:1b:44:fe:85:72:46:e0:
fb:62:01:4d:d1:eb:d8:78:ba:63:05:c4:ac:c9:47:
c4:b4:8f:ce:80:67:9f:30:cb:fe:c1:d3:39:fb:c3:
58:6f:fd:21:f7:2d:9a:5b:62:83:49:5b:d1:ac:37:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AE:B6:6C:AF:CF:58:24:1E:1A:BB:9C:D6:2C:B1:F3:E3:62:81:18
X509v3 Authority Key Identifier:
keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/s662bK_PWCQeGruc1iyx8-NigRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:9::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:18::/48
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:36::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
2f:72:d7:8c:7a:58:18:15:ec:59:e2:64:da:29:2e:4a:3c:d7:
67:b4:b9:c3:68:1a:be:63:84:fa:ef:c9:a5:2d:4f:09:f6:fb:
6e:ff:4a:8d:01:4b:ea:01:6f:cb:21:13:0e:70:e9:9e:c7:cc:
16:50:49:ff:94:0a:95:37:06:37:be:51:d3:26:02:6d:7a:71:
d3:16:c8:7b:39:9d:f3:a9:bd:22:28:88:db:fd:06:83:16:54:
c7:30:83:f5:9b:1e:02:2c:23:87:68:a1:4c:2d:9b:38:7f:bd:
70:54:de:94:5a:96:ee:60:7a:7c:b1:b8:1c:7e:11:94:f0:a4:
e8:b4:ef:8c:0e:de:2c:d2:1f:09:b8:e0:44:9f:c3:07:e7:4b:
06:c5:55:50:1d:3f:6b:38:be:13:5a:13:a6:56:bb:27:ab:4f:
7d:88:1d:8c:87:c1:57:89:66:f6:ec:d9:71:32:01:eb:37:b7:
7e:1e:f5:52:06:f5:6d:5f:eb:18:1e:ca:de:49:c9:98:7a:a6:
a2:59:33:59:ec:fb:e2:d6:8d:44:d2:a1:ad:20:32:0c:b9:ad:
26:93:8b:49:ee:82:f0:b1:b8:7f:ce:52:06:ac:b9:52:7e:5e:
3b:1f:06:a5:a2:ce:d7:eb:04:af:0a:99:9a:8b:bf:4d:e6:e7:
81:b3:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:51 2025 by rpki-client