Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/e6_C3GqPn4ebF-RtvrT4e7vtNco.roa
File: e6_C3GqPn4ebF-RtvrT4e7vtNco.roa (raw, json)
Hash identifier: bfgzSFF0IcN6LeuUKU6nu25W8svPebY8Q0XaxVry9DU=
Subject key identifier: 7B:AF:C2:DC:6A:8F:9F:87:9B:17:E4:6D:BE:B4:F8:7B:BB:ED:35:CA
Certificate issuer: /CN=cc92b236722fe10e4c57e23bec15d436b62a2862
Certificate serial: 0CECD1AF
Authority key identifier: CC:92:B2:36:72:2F:E1:0E:4C:57:E2:3B:EC:15:D4:36:B6:2A:28:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJKyNnIv4Q5MV-I77BXUNrYqKGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/e6_C3GqPn4ebF-RtvrT4e7vtNco.roa
Signing time: Sat 01 Jan 2022 07:57:26 +0000
ROA not before: Sat 01 Jan 2022 07:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42315
IP address blocks: 194.0.194.0/24 maxlen: 24
185.53.248.0/24 maxlen: 24
185.53.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216846767 (0xcecd1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc92b236722fe10e4c57e23bec15d436b62a2862
Validity
Not Before: Jan 1 07:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bafc2dc6a8f9f879b17e46dbeb4f87bbbed35ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:29:e1:ee:02:cf:9b:f5:a2:64:08:ad:8a:
81:c0:33:aa:67:43:5a:33:c9:41:68:3e:a3:03:b5:
83:15:c6:33:df:4f:69:59:2c:88:c7:03:a4:49:86:
37:59:4e:32:d7:0d:b4:e6:17:b6:e5:c9:05:b0:be:
0f:7d:ee:d7:78:1f:b3:63:7b:70:4f:e2:e9:98:2c:
7c:3b:4b:57:14:6a:a2:be:e0:b8:3c:54:a7:9f:b3:
e5:a0:13:0c:4e:a4:c1:76:8d:2e:4d:26:48:7c:ff:
0c:11:84:60:13:0a:c5:5c:da:9a:27:69:83:7b:3c:
75:28:20:15:99:9e:99:ce:25:56:20:17:71:b4:0b:
aa:6d:b2:c5:56:63:4e:7d:08:e3:ff:94:3d:7c:ed:
c9:d5:b3:64:87:29:a1:69:7f:65:1c:8e:bd:b1:fd:
31:0e:fa:f9:b3:54:23:22:40:54:65:3b:c5:ae:b5:
f3:ca:ec:b7:23:a4:ca:17:7f:f4:b3:26:31:6f:ef:
9d:66:b4:71:26:06:78:a1:f1:05:6f:73:f6:86:94:
99:ac:b7:7a:8a:41:d2:c8:37:a7:ba:df:b2:c2:58:
fc:c5:7b:dd:47:fa:b9:f1:29:73:20:38:39:84:25:
dd:a2:2f:62:11:98:41:2d:5d:f9:aa:fd:2c:f4:dc:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AF:C2:DC:6A:8F:9F:87:9B:17:E4:6D:BE:B4:F8:7B:BB:ED:35:CA
X509v3 Authority Key Identifier:
keyid:CC:92:B2:36:72:2F:E1:0E:4C:57:E2:3B:EC:15:D4:36:B6:2A:28:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJKyNnIv4Q5MV-I77BXUNrYqKGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/e6_C3GqPn4ebF-RtvrT4e7vtNco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/zJKyNnIv4Q5MV-I77BXUNrYqKGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.248.0/23
194.0.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c8:71:74:f8:34:28:3a:72:27:98:3d:83:2e:d7:84:87:87:
1f:e0:32:96:da:20:34:94:8a:98:a9:fd:d2:97:38:e5:02:da:
aa:fc:a1:ab:3b:69:c5:cd:62:3c:1b:c4:09:ba:8c:3b:f7:21:
a5:26:25:4c:3d:52:1f:8a:96:a0:d0:4e:bc:22:02:be:ba:da:
a6:82:33:c7:a4:af:98:fa:83:e3:9c:be:b8:c9:45:cc:63:fd:
90:8c:f5:70:ea:fc:8f:32:ea:55:3f:38:6e:6d:99:60:64:df:
44:d4:0f:b0:d4:5e:49:00:3a:93:a2:e2:bb:ef:25:44:83:78:
11:3b:8f:76:cb:38:1e:0d:2c:8d:c8:91:53:99:41:12:e3:6f:
9d:03:a5:71:42:ce:d4:a3:2f:60:33:95:f2:39:a0:9e:52:5f:
d3:ba:0e:ee:a4:26:c5:54:26:60:0b:cb:b8:76:42:27:92:a7:
d2:4a:ea:1d:70:59:9d:08:bf:b0:d2:4f:13:52:6f:85:3c:db:
4c:b3:cf:11:28:b5:a9:cd:bc:5e:64:f7:2c:27:ef:83:17:ab:
00:b1:bf:ba:2a:f0:f8:64:8f:c2:04:72:c3:a1:f2:55:5f:d8:
67:50:43:49:09:6f:ed:6f:da:f6:62:2b:40:19:0c:e8:cc:5d:
75:ea:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:12 2024 by rpki-client on console-ams.rpki-client.org