Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/ajD8jZzSQtfiu7yeiG50HL-hr4Y.roa
File: ajD8jZzSQtfiu7yeiG50HL-hr4Y.roa (raw, json)
Hash identifier: PnnAdNtieW1hmupuoZfD/cdyGRSnhO6hgOy9qwIosCU=
Subject key identifier: 6A:30:FC:8D:9C:D2:42:D7:E2:BB:BC:9E:88:6E:74:1C:BF:A1:AF:86
Certificate issuer: /CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Certificate serial: 04925749
Authority key identifier: 6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/ajD8jZzSQtfiu7yeiG50HL-hr4Y.roa
Signing time: Sat 01 Jan 2022 10:55:05 +0000
ROA not before: Sat 01 Jan 2022 10:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206495
IP address blocks: 194.150.70.0/24 maxlen: 24
194.9.56.0/23 maxlen: 23
194.150.68.0/23 maxlen: 23
194.150.71.0/24 maxlen: 24
194.9.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76699465 (0x4925749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Validity
Not Before: Jan 1 10:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a30fc8d9cd242d7e2bbbc9e886e741cbfa1af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:7e:df:ed:37:2a:9b:6f:db:f1:71:09:01:
7b:0f:84:3f:7d:f0:d5:ea:26:c6:ba:af:54:76:98:
64:93:23:05:82:bf:a7:9a:a2:eb:77:6d:d6:7e:7c:
d8:7e:13:f9:7c:c8:d6:04:5e:4b:0e:eb:a9:b2:56:
83:46:af:5f:7c:5b:99:5d:3d:2a:16:02:91:13:1d:
ca:d8:76:3a:67:a7:0b:68:4a:8d:e1:50:a8:6e:34:
2f:52:15:b8:d9:8d:7d:58:bb:a0:2d:09:a9:3e:bf:
74:29:e3:a3:c2:0b:2f:a0:14:56:f0:f0:7a:df:cc:
62:ed:ff:99:2b:20:47:f3:90:0e:ee:10:8c:df:d0:
e6:2c:08:88:02:6e:f8:2d:ee:35:ae:6d:67:8d:b4:
56:5a:77:58:fa:a4:d2:a4:31:2a:e9:2c:36:04:43:
da:4b:1e:6b:cb:1e:da:1b:2a:b8:a9:68:b0:07:1b:
bd:97:d3:bb:71:ed:b3:77:29:ab:9d:26:21:68:77:
81:03:6e:74:db:d9:13:a3:70:31:a5:00:d8:6c:f5:
88:69:62:e4:b5:14:d0:1c:ec:57:95:4b:35:d6:06:
d6:a6:d5:22:a3:b0:f4:9e:e3:5c:9f:cb:7d:77:8b:
e4:de:d1:8e:13:44:a2:39:31:59:df:fb:03:f2:bc:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:30:FC:8D:9C:D2:42:D7:E2:BB:BC:9E:88:6E:74:1C:BF:A1:AF:86
X509v3 Authority Key Identifier:
keyid:6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/ajD8jZzSQtfiu7yeiG50HL-hr4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.56.0/23
194.9.80.0/23
194.150.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:4b:d7:92:7c:37:41:50:20:dc:22:72:1c:c7:6f:87:88:4c:
74:d4:ad:1b:4e:61:ed:af:68:10:90:f7:c5:e8:5a:9a:72:d3:
91:8e:19:47:76:c3:0b:e4:83:17:06:5e:e3:8f:28:21:67:dc:
60:52:1f:45:0a:18:c0:d4:1e:20:4e:11:be:53:d1:e4:bc:3a:
36:27:94:67:94:9a:e5:ba:78:7e:39:31:27:2e:d3:3d:f3:55:
fd:9b:fe:d2:8f:60:9b:10:34:7f:d9:14:9b:b2:ec:61:28:91:
d4:fe:a3:a4:93:04:3a:80:2b:72:8f:a7:9f:f9:03:2e:e0:6b:
a6:33:44:00:5d:2a:01:7f:1b:dd:a8:81:23:ae:1b:b1:a7:0f:
33:7d:ea:87:8c:38:62:33:ce:33:51:78:3b:d0:ef:ac:88:80:
1a:f4:6e:d2:bb:d9:11:2a:b3:51:c7:30:3f:4e:f4:16:d3:69:
c8:fe:b2:1b:19:29:d4:b2:7b:49:3d:f2:73:bf:ff:7b:49:85:
15:5d:f1:00:12:cd:f5:0f:35:c0:9d:cf:bc:13:4e:8d:b6:38:
f4:83:37:d2:e0:03:9a:6c:38:20:a3:58:a8:42:09:c5:39:cc:
5b:f3:b4:2c:9d:9e:ea:6e:e4:33:f5:80:49:56:d0:b2:30:8c:
fd:39:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org