Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/6WjEYiAadQ4CseMNGmaAUXvkFn0.roa
File: 6WjEYiAadQ4CseMNGmaAUXvkFn0.roa (raw, json)
Hash identifier: PK+C0+KeXZI4L6MQC1uL/oFmAZmh4mjDQ7EevcCnPUA=
Subject key identifier: E9:68:C4:62:20:1A:75:0E:02:B1:E3:0D:1A:66:80:51:7B:E4:16:7D
Certificate issuer: /CN=ada8569b4c69dade2beeca0f895dfb5c68205486
Certificate serial: 0D62D52B
Authority key identifier: AD:A8:56:9B:4C:69:DA:DE:2B:EE:CA:0F:89:5D:FB:5C:68:20:54:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rahWm0xp2t4r7soPiV37XGggVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/6WjEYiAadQ4CseMNGmaAUXvkFn0.roa
Signing time: Sat 01 Jan 2022 06:59:53 +0000
ROA not before: Sat 01 Jan 2022 06:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49375
IP address blocks: 178.17.240.0/20 maxlen: 20
188.94.40.0/21 maxlen: 21
45.85.60.0/22 maxlen: 22
2a02:1648::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224580907 (0xd62d52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada8569b4c69dade2beeca0f895dfb5c68205486
Validity
Not Before: Jan 1 06:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e968c462201a750e02b1e30d1a6680517be4167d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:1a:f0:f9:82:de:6c:d7:b5:4d:20:5f:93:
af:83:3b:a6:33:85:17:5b:aa:3a:6d:9d:9c:50:d7:
87:96:c4:ce:07:7b:dd:1d:2f:95:75:46:d2:ac:da:
4f:25:20:4b:d2:3f:90:24:2d:85:be:82:e2:3a:17:
d5:53:2b:44:75:67:bc:1c:fc:83:bd:1a:f0:6b:87:
71:48:41:cf:c9:38:4b:93:76:8b:e8:9f:52:ba:d9:
81:9d:56:f4:48:55:3a:c8:08:ed:11:f7:7f:c5:8d:
2c:50:b2:1a:01:c3:74:37:38:90:5d:ad:8d:50:c5:
35:4f:f0:28:65:84:60:fd:3f:26:a1:57:be:b0:a3:
ae:7d:9f:26:b9:65:57:4a:78:8f:8e:7a:de:cf:d5:
e8:f1:3d:af:aa:a7:03:e8:ae:66:44:41:72:1e:7e:
8b:59:00:e3:fb:6b:59:95:3c:6d:a1:9f:a4:e8:ad:
ce:87:33:23:af:7e:80:25:68:ad:11:9d:fb:ef:3b:
9a:88:9e:3d:86:fd:44:32:ce:f2:52:c2:88:87:5d:
84:bd:1a:d4:be:69:d8:5a:db:97:27:42:60:d8:47:
77:b2:76:7b:c5:76:3b:31:6a:1a:c8:f8:31:f4:5c:
a4:be:28:ca:70:70:7a:1f:b6:11:26:55:49:41:0c:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:C4:62:20:1A:75:0E:02:B1:E3:0D:1A:66:80:51:7B:E4:16:7D
X509v3 Authority Key Identifier:
keyid:AD:A8:56:9B:4C:69:DA:DE:2B:EE:CA:0F:89:5D:FB:5C:68:20:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rahWm0xp2t4r7soPiV37XGggVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/6WjEYiAadQ4CseMNGmaAUXvkFn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/rahWm0xp2t4r7soPiV37XGggVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.60.0/22
178.17.240.0/20
188.94.40.0/21
IPv6:
2a02:1648::/29
Signature Algorithm: sha256WithRSAEncryption
7e:be:c5:b6:f5:0a:f6:23:55:ee:54:04:54:f7:38:5a:4a:cc:
3c:7b:e7:71:1b:74:a4:72:b1:05:e8:b8:cf:75:d8:bd:f1:a7:
7b:b9:d2:79:f5:34:eb:3f:1c:e0:55:b7:b9:be:73:2c:6c:82:
a4:57:67:b0:11:05:08:a8:53:c9:76:f1:e9:69:79:4a:aa:3d:
95:a3:6c:6b:6b:4b:6d:51:7d:02:ff:e4:0f:e3:6f:69:66:89:
25:7f:60:4d:96:bc:d1:3b:fb:18:bc:61:24:1c:05:e0:76:9a:
71:16:9b:f0:2e:dc:fd:61:32:cb:56:5d:f6:e9:18:57:65:8f:
ab:3c:d6:7c:45:09:68:b7:e3:e5:0c:da:b8:a0:80:8b:54:85:
04:07:e7:70:fc:09:d1:f4:8f:f4:0d:2b:7d:1f:8a:4a:da:a6:
53:65:9c:37:9e:43:36:28:83:e0:64:b2:bf:7e:84:1d:24:0b:
06:b9:4c:c1:6f:6c:67:79:ae:14:2c:b8:8e:ac:8b:14:60:cb:
04:6a:3b:e0:b1:ac:f3:df:9c:11:91:ef:30:ae:81:d9:c2:8d:
3d:1e:05:3d:27:6e:fc:29:18:4b:a4:19:1a:0a:86:a7:64:d8:
d1:ca:3c:87:db:bb:74:a7:85:3d:af:24:da:fc:77:4e:fb:41:
b7:13:fc:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org