Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/a7Mmox05FctxLO9d7U_gqAKcITs.roa
File: a7Mmox05FctxLO9d7U_gqAKcITs.roa (raw, json)
Hash identifier: hCVmpMlGjWX5Xp8rxJUpSZFSC2MxwjRT7gf8I8vXCbk=
Subject key identifier: 6B:B3:26:A3:1D:39:15:CB:71:2C:EF:5D:ED:4F:E0:A8:02:9C:21:3B
Certificate issuer: /CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Certificate serial: 01856CE64570E92B5A543DE977CEB361F250
Authority key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/a7Mmox05FctxLO9d7U_gqAKcITs.roa
Signing time: Sun 01 Jan 2023 10:35:08 +0000
ROA not before: Sun 01 Jan 2023 10:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.37.82.0/24 maxlen: 24
185.247.116.0/24 maxlen: 24
185.247.119.0/24 maxlen: 24
185.181.9.0/24 maxlen: 24
185.181.11.0/24 maxlen: 24
185.227.109.0/24 maxlen: 24
2a07:3b80:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:45:70:e9:2b:5a:54:3d:e9:77:ce:b3:61:f2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Validity
Not Before: Jan 1 10:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bb326a31d3915cb712cef5ded4fe0a8029c213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:2d:79:a2:f5:01:82:17:65:b4:68:15:0e:
fe:b8:2e:e5:82:6a:8d:d1:75:2c:4e:59:97:20:5d:
9b:fd:09:de:74:0e:ba:82:e5:c3:69:d2:ac:6a:ef:
2b:3b:1b:2f:9a:a7:50:fc:b3:2d:76:8d:34:6e:b5:
a0:16:66:6d:47:96:16:45:95:27:e0:8e:45:e9:d0:
51:49:86:94:f3:6b:4d:a0:b7:5b:97:81:59:58:37:
62:e3:93:cb:2c:c2:32:21:c6:b0:8f:9c:3a:64:3f:
c4:29:57:48:6d:51:d5:f9:94:44:4e:e5:88:bc:af:
1d:72:63:88:2d:0f:c0:eb:7f:a0:c6:98:1c:e7:b1:
6b:70:86:19:ee:b0:3a:cb:c0:63:6d:1d:cc:92:1d:
58:0c:45:21:f8:48:78:b2:34:63:09:36:ea:a3:9e:
7b:b8:82:f3:cb:10:14:39:96:73:a4:87:e5:87:05:
d1:fd:a8:c5:da:e8:1e:c5:32:55:49:58:a9:3b:64:
23:3a:77:f3:8b:ff:f3:91:73:2c:fb:e0:d3:a4:4e:
49:d3:5a:e3:08:c5:09:a8:1f:fa:d3:77:e1:e0:20:
23:bd:a3:96:ed:b6:0a:c8:a4:d4:fd:b2:0a:e8:a0:
c3:bf:a2:20:20:54:15:8d:59:c2:50:2c:7c:06:3e:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B3:26:A3:1D:39:15:CB:71:2C:EF:5D:ED:4F:E0:A8:02:9C:21:3B
X509v3 Authority Key Identifier:
keyid:92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/a7Mmox05FctxLO9d7U_gqAKcITs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.9.0/24
185.181.11.0/24
185.227.109.0/24
185.247.116.0/24
185.247.119.0/24
194.37.82.0/24
IPv6:
2a07:3b80:2::/48
Signature Algorithm: sha256WithRSAEncryption
0c:51:21:c2:4d:18:44:8f:18:98:e9:25:08:6c:c6:35:2c:28:
94:6b:67:10:4f:53:80:fc:d2:de:7b:b7:54:25:07:1e:7c:48:
50:dd:3f:e0:fb:c1:61:e2:43:01:04:8b:9c:3a:75:52:95:c1:
03:a0:e5:9b:bd:74:cc:bc:77:dc:7d:18:94:a4:1e:67:ab:4a:
1d:62:36:35:bf:8a:0b:50:b8:39:28:89:43:74:2f:34:0c:6c:
a5:be:3c:48:88:b1:83:94:53:4c:d4:ff:36:2e:01:55:6b:9a:
fd:45:a0:bf:7e:0b:4b:92:48:b0:13:06:2a:bb:da:bb:58:b6:
79:3d:5e:16:ba:5f:1e:2c:39:c8:71:bd:c4:4c:1d:24:a9:cc:
23:e7:48:2e:d9:77:db:d8:6d:c7:b6:f7:f8:22:f2:30:01:27:
14:78:d4:ab:a4:34:e4:f5:c6:76:09:2d:cc:52:63:2c:49:04:
ed:79:25:27:ee:a4:98:2d:3d:ea:29:c9:c2:56:91:da:88:41:
dc:34:6d:97:2c:fb:d5:76:b4:60:55:45:e1:1c:6a:7b:67:6a:
6d:9d:4e:2f:05:58:fc:fa:71:c0:5f:ad:03:69:bf:a6:79:9d:
e2:e8:94:a1:54:2e:72:33:50:3f:e4:07:0e:e9:62:f6:80:2c:
8b:8b:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:40 2024 by rpki-client on console-fra.rpki-client.org