Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/6iA3QsugeBWTz0iiUYQkQlDFNf4.roa
File: 6iA3QsugeBWTz0iiUYQkQlDFNf4.roa (raw, json)
Hash identifier: 3gO3Hkmao2kkA+YKpIkt3/z+ek3W1BgjEb5ACsInpMg=
Subject key identifier: EA:20:37:42:CB:A0:78:15:93:CF:48:A2:51:84:24:42:50:C5:35:FE
Certificate issuer: /CN=b61d9e8c9a08b23a98b14c308b80dcfbf55e5cd1
Certificate serial: 018CAAAC26EFA0EE1C5E3321D652FEB38880
Authority key identifier: B6:1D:9E:8C:9A:08:B2:3A:98:B1:4C:30:8B:80:DC:FB:F5:5E:5C:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/th2ejJoIsjqYsUwwi4Dc-_VeXNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/6iA3QsugeBWTz0iiUYQkQlDFNf4.roa
Signing time: Wed 27 Dec 2023 09:47:38 +0000
ROA not before: Wed 27 Dec 2023 09:47:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34087
IP address blocks: 152.65.32.0/19 maxlen: 19
152.65.64.0/19 maxlen: 19
148.252.64.0/18 maxlen: 19
152.65.96.0/19 maxlen: 19
152.65.0.0/19 maxlen: 19
152.65.0.0/17 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:ac:26:ef:a0:ee:1c:5e:33:21:d6:52:fe:b3:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61d9e8c9a08b23a98b14c308b80dcfbf55e5cd1
Validity
Not Before: Dec 27 09:47:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea203742cba0781593cf48a25184244250c535fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:14:ce:a4:da:7c:95:aa:22:0c:c2:7b:cd:
b8:f9:27:a4:ac:14:d3:9f:be:df:60:e1:0e:d1:c2:
a4:16:1d:7a:fc:a8:bf:6b:e5:a8:ff:d3:ad:80:d9:
6c:a4:0e:15:d7:2e:ba:f0:86:50:a7:57:57:70:e4:
51:e3:29:cc:43:ea:52:48:1d:f3:0f:07:96:bc:dc:
1a:2c:0a:f7:77:ac:54:b7:c5:f9:c1:3f:f9:c2:45:
d5:82:8b:a4:a9:af:f4:88:e9:8f:8b:08:84:90:10:
bc:02:9e:da:86:88:4e:e1:b5:1c:37:5e:e1:30:c8:
91:23:87:27:fb:d3:30:ff:7c:bb:56:fd:df:15:c2:
5a:c1:00:06:51:3a:50:e3:86:a5:e3:24:c7:a5:6b:
37:45:c4:c2:e4:f1:a2:68:f7:9d:ef:24:75:bd:12:
82:a9:ab:ee:b9:16:53:c7:df:eb:94:f5:99:1c:d9:
76:03:55:08:75:2a:4f:35:b4:fc:04:38:0e:8f:9d:
3b:8f:ca:b0:fa:6c:63:24:b0:79:5b:c7:ce:f4:01:
7a:1d:00:2a:72:63:70:4d:62:f4:1a:3d:af:b9:71:
93:f9:07:fe:68:f8:7b:d9:2d:d5:28:c8:61:9b:f7:
5f:7c:0e:7d:01:ae:bf:e2:a2:29:b8:aa:82:7b:76:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:37:42:CB:A0:78:15:93:CF:48:A2:51:84:24:42:50:C5:35:FE
X509v3 Authority Key Identifier:
keyid:B6:1D:9E:8C:9A:08:B2:3A:98:B1:4C:30:8B:80:DC:FB:F5:5E:5C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/th2ejJoIsjqYsUwwi4Dc-_VeXNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/6iA3QsugeBWTz0iiUYQkQlDFNf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.252.64.0/18
152.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9f:80:ce:69:20:f4:e2:41:2d:9c:c9:ea:10:e7:16:2d:f8:38:
0e:46:91:58:60:b6:11:04:8b:62:c1:67:5d:57:65:a9:5d:5e:
50:e5:73:78:17:dd:6e:3e:5a:ab:03:66:81:65:e7:39:da:7b:
dc:b1:e0:26:e0:60:f0:58:8f:30:df:e0:b6:56:8d:e6:3e:7a:
b0:95:a1:b7:cf:5e:1e:76:cb:48:4e:83:24:38:85:98:8b:1a:
88:47:a9:65:5e:aa:7c:13:d5:52:06:5e:f5:7f:db:03:08:ab:
23:c1:e6:df:c7:54:16:bd:85:10:3e:d7:b3:6f:14:a4:f6:e9:
e2:bf:ec:81:d6:98:13:20:f1:24:d9:dd:0d:d6:fc:09:52:20:
e3:26:e8:87:31:d0:4d:e0:91:fe:a2:ff:1b:43:6f:23:8f:9d:
7c:b4:ec:40:c3:03:54:8b:d0:d7:38:6b:97:8b:63:9b:a3:cd:
65:5c:9b:3e:ed:5c:2e:6e:2d:5c:94:33:c4:e9:20:07:71:a2:
10:83:45:44:7b:49:95:e6:a4:a2:a3:e2:08:2c:41:c6:e7:cf:
38:10:8a:9b:f7:ce:25:d2:0c:7f:6a:c5:7d:af:22:b0:34:ad:
09:dd:85:fc:34:f8:8f:1e:1e:18:ee:61:02:de:38:b7:6b:f7:
dd:c5:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org