Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6SCvTs0CpZEpSLb5XR2gboi4MOY.roa
File: 6SCvTs0CpZEpSLb5XR2gboi4MOY.roa (raw, json)
Hash identifier: gULErwUvMiMK1TKAo8l7DFl7Fa2ijmN4KXsYGYY3Z78=
Subject key identifier: E9:20:AF:4E:CD:02:A5:91:29:48:B6:F9:5D:1D:A0:6E:88:B8:30:E6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01940B0B050FC87BDB68D355E98E63565E09
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6SCvTs0CpZEpSLb5XR2gboi4MOY.roa
Signing time: Sat 28 Dec 2024 02:14:19 +0000
ROA not before: Sat 28 Dec 2024 02:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 37.46.20.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0b:0b:05:0f:c8:7b:db:68:d3:55:e9:8e:63:56:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Dec 28 02:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e920af4ecd02a5912948b6f95d1da06e88b830e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:6c:c5:db:c6:8d:5c:e6:78:91:4c:36:ee:
34:58:b8:c2:e5:61:b7:de:b1:85:37:41:a7:60:75:
5e:dc:63:b8:8f:ba:38:2a:77:e1:5a:3c:58:47:3b:
8f:d6:d4:4e:84:a5:2e:ba:f8:ed:bb:47:43:04:53:
7a:b4:4d:d2:bb:09:9e:4e:7b:be:32:3c:67:34:e7:
73:04:18:5c:1a:4d:bc:e2:c2:27:cc:4c:61:d8:3c:
31:51:34:d1:f8:61:a2:cb:19:5f:ef:72:6b:b3:d0:
d3:43:0d:f7:77:78:c1:3e:4d:a8:c7:38:f5:2f:e7:
fe:92:63:6c:30:42:b1:ab:e9:25:f9:9a:44:44:9c:
80:03:bd:ce:32:16:cb:75:ff:52:57:f8:27:08:24:
7f:1f:fa:a1:1e:67:49:92:48:fd:b3:f2:e6:e1:e0:
a7:a5:0d:3d:ce:44:98:3f:6b:f3:cf:38:ba:05:69:
98:ad:ac:dc:80:76:f9:e9:4d:62:f1:a6:3e:99:75:
e6:22:78:88:49:42:c3:8f:7f:d6:78:ea:33:42:58:
80:e2:4b:74:a9:11:21:2f:31:f7:f3:49:0f:ff:6f:
d7:3f:81:de:b8:c8:96:6b:c7:02:cd:87:b8:0e:4b:
c5:f7:86:d2:dc:7a:1e:d1:bf:6d:98:ec:31:02:98:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:AF:4E:CD:02:A5:91:29:48:B6:F9:5D:1D:A0:6E:88:B8:30:E6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/6SCvTs0CpZEpSLb5XR2gboi4MOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.20.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:70:4e:5e:ba:a2:00:25:b3:64:eb:30:21:c0:4a:47:d6:56:
2f:97:49:4d:21:d3:ef:c3:0e:6d:3f:f3:78:dd:48:d0:87:f0:
29:b2:47:f1:dd:a8:1c:77:08:72:5d:6f:29:2e:88:ca:19:08:
e1:68:98:14:e5:f0:71:d5:b5:7f:73:13:af:26:28:a5:2b:0f:
92:54:e5:e7:12:e3:b8:63:77:96:0f:a3:1f:c9:d3:b3:f5:cf:
2c:a9:e3:92:75:03:c5:e6:dd:90:78:14:c8:f3:fa:7e:5b:46:
d8:eb:46:4b:16:2e:ce:ce:c7:93:52:a6:c8:77:a6:b4:63:ad:
20:6e:38:f5:28:04:bf:e8:9f:e6:d8:9f:f2:94:7d:51:0c:49:
83:23:48:e5:62:60:38:1d:7c:b3:89:e7:87:77:91:ad:4f:42:
de:65:db:c0:0b:e5:b9:e5:f4:2a:b5:c5:1a:d5:9a:dc:38:a6:
f8:48:bd:c1:8e:08:ed:d5:9e:90:07:bc:cd:3f:8d:96:c1:b3:
e8:88:5c:3a:6b:e5:e1:5f:2e:38:1b:f4:85:cd:a2:83:5e:9e:
33:ef:61:52:a3:87:3f:eb:d8:2c:3b:e0:66:45:05:0d:f2:07:
59:7e:26:49:2c:e0:58:30:63:c3:d0:86:b3:60:94:f0:cf:99:
ec:f9:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:39 2025 by rpki-client