Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/6sg-P39qer0CUrzA_uXSg0vszBc.roa
File: 6sg-P39qer0CUrzA_uXSg0vszBc.roa (raw, json)
Hash identifier: BtDMAPlh73D8tS/cVliMiK4efkj80iE1lHPVUQ2zsGw=
Subject key identifier: EA:C8:3E:3F:7F:6A:7A:BD:02:52:BC:C0:FE:E5:D2:83:4B:EC:CC:17
Certificate issuer: /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial: 0186B6D160C6A953504E937420A641CBDD60
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/6sg-P39qer0CUrzA_uXSg0vszBc.roa
Signing time: Mon 06 Mar 2023 12:07:00 +0000
ROA not before: Mon 06 Mar 2023 12:07:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 194.62.42.0/24 maxlen: 24
2a11:7e06::/32 maxlen: 32
2a11:7e05::/32 maxlen: 32
2a11:7e01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:d1:60:c6:a9:53:50:4e:93:74:20:a6:41:cb:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Validity
Not Before: Mar 6 12:07:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eac83e3f7f6a7abd0252bcc0fee5d2834beccc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:cb:d9:0b:cc:7a:ab:cf:00:01:c3:77:c5:
c3:dd:55:bb:a1:47:f9:4d:15:28:51:51:73:77:2d:
82:4f:10:a7:69:d6:62:62:ad:b3:65:e4:8e:e2:15:
d6:84:a9:1c:70:45:db:dd:92:44:f8:cc:ef:78:03:
c8:a2:3d:14:7a:ec:c0:6b:1e:ea:18:15:0a:d9:6d:
f7:78:02:05:52:cc:d3:02:4e:06:d9:9e:7d:20:75:
2d:29:ef:97:95:17:52:44:3b:da:3d:43:6b:13:f1:
ae:89:18:b4:07:9a:6a:2c:a4:92:eb:ab:d8:f1:be:
1b:5a:69:20:01:74:4e:d9:6e:a3:9a:2e:a4:1c:5e:
be:00:85:76:5a:4c:b7:80:29:f6:f6:b0:c8:96:30:
af:38:97:b1:84:99:3c:7d:97:40:8c:c2:9f:09:70:
c6:9d:8b:e4:a7:6c:cd:9b:b1:f0:78:38:59:f1:71:
86:1f:4a:a3:b2:0d:0a:4f:ce:a5:3c:45:e2:42:27:
8b:b8:64:9a:51:fd:31:03:d7:c2:cc:fa:54:d3:a3:
67:cb:eb:55:a0:df:67:fe:5f:5c:0c:7b:60:8f:5f:
00:01:23:a7:1f:df:5f:17:e2:9e:33:1f:8b:a8:25:
a4:c7:49:5a:2c:1b:82:f2:da:d5:f0:bd:19:e2:a7:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C8:3E:3F:7F:6A:7A:BD:02:52:BC:C0:FE:E5:D2:83:4B:EC:CC:17
X509v3 Authority Key Identifier:
keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/6sg-P39qer0CUrzA_uXSg0vszBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.42.0/24
IPv6:
2a11:7e01::/32
2a11:7e05::-2a11:7e06:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:b2:ec:25:c4:c2:ba:fc:5f:7a:ec:ce:a5:28:30:f1:ae:7d:
8f:fe:63:d3:4c:da:27:e6:59:3a:a9:4d:be:65:af:d8:70:ef:
95:6b:58:71:9e:01:9c:e9:12:4d:cd:a1:4d:64:16:5d:39:c3:
bc:62:f1:91:2f:b9:aa:a8:bb:01:09:ee:fc:5b:e5:c1:88:2d:
b0:ac:b2:c3:a7:f9:19:58:77:28:cd:ed:96:a7:8d:17:21:72:
c5:56:29:e7:ea:a2:d4:13:f9:11:63:28:89:34:3a:cf:79:3a:
08:3e:9d:85:6e:24:75:3e:c8:d4:0a:e1:22:6d:9d:99:23:b6:
09:3e:a7:f6:25:d6:2b:4e:e8:e3:01:0b:16:12:e7:16:96:b3:
56:9c:90:a6:d8:4a:38:92:88:30:92:13:3e:0f:86:38:c8:f2:
c7:bc:b7:22:3c:8f:8c:ad:43:3a:3b:e9:d2:1a:45:04:70:3d:
6d:02:f4:e6:90:8e:b6:c9:ee:ec:0e:b9:b9:b7:d0:ac:a6:60:
32:28:eb:cd:ea:a1:f3:7c:8a:58:41:48:11:65:ed:da:e3:0d:
84:06:a3:96:47:d1:15:fd:90:4b:91:85:25:10:28:e2:37:db:
b4:dd:3b:ae:05:54:34:68:45:cf:33:a8:ad:69:3c:d6:8c:fd:
d2:c6:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org