Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/7BWnSYC7-xjpU5m55qZhhgnw6kA.roa
File: 7BWnSYC7-xjpU5m55qZhhgnw6kA.roa (raw, json)
Hash identifier: Sa7BeT3VZZjIg47lSQVb/5ZINhos3o/W4uobOHJcHAI=
Subject key identifier: EC:15:A7:49:80:BB:FB:18:E9:53:99:B9:E6:A6:61:86:09:F0:EA:40
Certificate issuer: /CN=10a69541eb068e6d2e596c481d93fd6bf9771267
Certificate serial: 018F38B3618BFA43B6774C6909112E231C53
Authority key identifier: 10:A6:95:41:EB:06:8E:6D:2E:59:6C:48:1D:93:FD:6B:F9:77:12:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKaVQesGjm0uWWxIHZP9a_l3Emc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/7BWnSYC7-xjpU5m55qZhhgnw6kA.roa
Signing time: Thu 02 May 2024 09:47:10 +0000
ROA not before: Thu 02 May 2024 09:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20811
IP address blocks: 37.186.128.0/18 maxlen: 24
46.234.224.0/19 maxlen: 24
84.18.128.0/19 maxlen: 24
89.190.160.0/19 maxlen: 24
93.89.48.0/20 maxlen: 24
95.171.32.0/19 maxlen: 24
185.6.192.0/22 maxlen: 24
212.46.160.0/21 maxlen: 24
217.199.0.0/19 maxlen: 24
2a02:490::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:b3:61:8b:fa:43:b6:77:4c:69:09:11:2e:23:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a69541eb068e6d2e596c481d93fd6bf9771267
Validity
Not Before: May 2 09:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec15a74980bbfb18e95399b9e6a6618609f0ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:ec:c8:3c:3a:89:42:40:ab:92:78:2c:ba:
96:9a:69:16:aa:3d:3a:2b:11:a0:03:f4:6a:1f:2c:
57:03:05:88:0f:25:d6:d8:70:0c:8a:79:03:88:ee:
ca:da:db:e6:85:90:55:bc:86:2a:29:62:59:5a:cb:
2e:d2:af:77:9d:8f:a0:26:5b:7b:59:42:4f:7b:e9:
f8:5e:fc:f3:03:79:49:b5:bd:39:d7:dc:91:72:25:
5d:9b:87:01:cd:ef:8e:d4:e5:40:04:63:85:76:25:
c6:c1:2e:c2:87:88:1d:75:8b:95:eb:e4:e8:5c:6c:
9c:2b:aa:a7:b1:d9:7d:96:53:c8:cb:4e:c7:36:b3:
6e:7c:a6:67:9a:e0:9a:e9:59:56:3a:b8:bc:09:a2:
59:e0:c7:be:cf:a0:31:c7:8a:4d:6a:d7:00:3e:e4:
3c:4a:08:9f:e0:27:7d:15:fb:84:26:37:92:36:de:
67:a3:c0:27:a5:3b:8b:dc:7f:b1:13:93:75:2b:dd:
5f:57:2c:e6:34:ae:c1:e6:92:6d:58:84:e6:95:72:
a6:e2:14:38:8b:fc:e8:0a:63:8f:c1:ce:97:55:a3:
32:c9:60:0c:09:df:fd:2b:97:9c:3a:2b:cf:3d:d1:
b8:e0:4a:45:06:a1:7b:a8:2d:d5:d6:54:a7:53:75:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:A7:49:80:BB:FB:18:E9:53:99:B9:E6:A6:61:86:09:F0:EA:40
X509v3 Authority Key Identifier:
keyid:10:A6:95:41:EB:06:8E:6D:2E:59:6C:48:1D:93:FD:6B:F9:77:12:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKaVQesGjm0uWWxIHZP9a_l3Emc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/7BWnSYC7-xjpU5m55qZhhgnw6kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1ef119-2bae-42e4-b02f-7e18fd6afdfd/1/EKaVQesGjm0uWWxIHZP9a_l3Emc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.128.0/18
46.234.224.0/19
84.18.128.0/19
89.190.160.0/19
93.89.48.0/20
95.171.32.0/19
185.6.192.0/22
212.46.160.0/21
217.199.0.0/19
IPv6:
2a02:490::/29
Signature Algorithm: sha256WithRSAEncryption
35:4f:3c:3a:50:bf:26:0c:49:cb:16:68:24:8a:28:24:3a:e5:
74:26:6d:a2:d4:7a:4c:49:af:13:67:70:43:ca:39:49:bc:2a:
33:7b:34:43:1a:04:42:55:e8:c3:bb:13:fe:b5:de:fb:89:90:
85:e2:0b:ec:45:f6:e3:10:25:dd:5d:1f:5a:1e:48:00:06:1e:
d2:83:f2:a7:a6:f1:1b:86:87:5a:58:58:a8:1b:0a:5a:84:e5:
f3:88:69:cd:58:0a:71:06:b0:4e:13:09:5a:89:92:41:04:b6:
b7:07:1e:d1:2c:42:19:de:18:54:37:fd:d8:41:cb:e1:23:5c:
76:ab:3e:ea:ac:a2:ed:16:a0:7a:5e:65:88:db:28:4b:c1:7d:
34:44:c8:46:0a:eb:ce:e8:54:2a:de:1b:d5:41:82:ac:ea:dd:
88:d0:0c:c4:9d:fe:9c:34:44:8a:4c:d4:e3:51:fe:2c:48:4c:
20:41:ec:2f:a8:5d:b7:2f:09:69:ee:0d:e2:1e:d2:67:db:74:
6c:c4:c8:ea:7a:cf:26:d4:8d:9d:a5:35:3a:fb:e6:c2:e9:3c:
0e:db:e7:45:44:f6:8b:85:b3:c2:ab:c4:f6:02:65:e0:7d:c2:
f8:3d:f2:38:09:2e:41:54:1b:b9:08:a0:40:2c:a9:c3:f0:bc:
9a:06:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 11:05:45 2024 by rpki-client on console-fra.rpki-client.org