Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/6vHfmVbuJr2XlKys97kNDMSkrOI.roa
File: 6vHfmVbuJr2XlKys97kNDMSkrOI.roa (raw, json)
Hash identifier: N6qSgRXQpIEuHaiSGwLI4gnd6z5xG7origEE2mVBBoY=
Subject key identifier: EA:F1:DF:99:56:EE:26:BD:97:94:AC:AC:F7:B9:0D:0C:C4:A4:AC:E2
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 0184DDD3FFBDD8CF3778AD46F7EC10A807ED
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/6vHfmVbuJr2XlKys97kNDMSkrOI.roa
Signing time: Sun 04 Dec 2022 15:49:28 +0000
ROA not before: Sun 04 Dec 2022 15:49:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207059
IP address blocks: 185.167.78.0/24 maxlen: 24
185.167.79.0/24 maxlen: 24
2a0b:4e00:3::/48 maxlen: 48
2a0b:4e00:4::/48 maxlen: 48
2a0b:4e00::/29 maxlen: 48
2a0b:4e00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:d3:ff:bd:d8:cf:37:78:ad:46:f7:ec:10:a8:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: Dec 4 15:49:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaf1df9956ee26bd9794acacf7b90d0cc4a4ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:29:02:12:e1:63:f4:e8:e9:4b:b2:13:ba:
4c:5a:48:04:81:ba:1a:e6:59:a8:19:78:91:dc:4b:
19:67:1a:88:c8:c1:8c:8d:c6:41:79:26:f6:04:c5:
e3:fa:f6:03:2e:bc:77:e3:28:2b:7f:bd:64:80:bd:
52:0f:2c:ae:1b:00:72:58:c8:dc:c2:13:9d:c1:12:
5d:6e:2c:91:6b:f4:ad:44:98:1b:06:14:5b:ef:7a:
5a:5a:65:d8:4c:ad:63:07:fd:20:b9:f7:df:9f:e9:
f8:f0:e2:ef:03:79:6e:58:cf:73:55:a1:da:9d:c1:
70:0d:4b:3f:ea:3a:0b:80:b0:37:5b:9a:a3:93:b2:
1f:84:92:e1:b4:cb:ef:e8:e2:e9:a6:ef:76:a2:c5:
13:ee:f8:62:6d:4e:7f:b9:34:90:32:8f:ef:37:79:
6a:ca:32:9d:d0:90:e9:94:84:60:16:a7:2c:25:47:
05:2d:b4:38:87:c6:95:97:56:bf:36:8f:ab:bb:0d:
79:9e:26:1c:26:60:68:a7:b2:4d:7e:30:2a:c0:ba:
69:2b:d9:91:e5:77:b0:d8:e9:fa:b1:39:b7:f4:fb:
77:30:05:30:73:c7:ac:82:53:50:37:7d:33:c7:a3:
a4:7b:ba:38:99:11:51:38:9f:f7:2c:c0:01:a2:98:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:DF:99:56:EE:26:BD:97:94:AC:AC:F7:B9:0D:0C:C4:A4:AC:E2
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/6vHfmVbuJr2XlKys97kNDMSkrOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.78.0/23
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
26:03:f4:d4:e9:7e:a5:1c:4a:18:f0:7f:a5:6b:5c:50:7c:a0:
82:48:fe:bb:8b:c4:45:c9:01:a7:e4:0e:fe:ec:d4:08:cf:f6:
43:e2:a4:aa:7b:09:3c:64:ff:b5:5a:61:f3:28:c3:84:84:c9:
2e:74:02:fd:21:b6:bc:a7:73:30:49:4d:86:28:30:d4:7e:8e:
d4:28:e7:2f:1b:75:17:1c:4d:22:15:01:e7:ba:ae:d0:32:05:
fa:e9:e6:d9:f6:86:bc:f8:1a:57:f9:c3:05:e6:27:81:96:0b:
14:47:31:87:64:e3:81:64:3c:db:53:e7:4c:83:26:35:3b:62:
f1:25:ec:b4:46:d7:36:67:09:56:27:23:1e:b3:6d:c7:0a:01:
c3:c8:38:38:15:e4:25:2d:1c:0e:77:6f:db:29:15:30:68:89:
0e:7c:78:02:ba:c2:f5:11:90:25:7a:e0:33:9d:27:c0:00:0b:
8a:e1:05:fe:90:cf:ea:3f:a7:99:de:75:1b:62:61:ee:19:95:
3a:cc:bf:22:ec:56:66:5f:86:3f:e0:80:93:de:b3:8a:f9:41:
73:8a:5e:6c:bf:4d:db:b9:e0:0e:50:05:c6:f5:f9:42:a8:d3:
ca:30:ea:50:a1:a6:63:d5:be:72:43:5a:e8:cc:a3:b4:8f:62:
f5:5e:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org