Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/6sg-ssTppJ_sAsU2RuFI4-iTWnE.roa
File: 6sg-ssTppJ_sAsU2RuFI4-iTWnE.roa (raw, json)
Hash identifier: neGoqEmolQvdU8xJwut7gb2UHhP6Jv/D60GmhJuZkm0=
Subject key identifier: EA:C8:3E:B2:C4:E9:A4:9F:EC:02:C5:36:46:E1:48:E3:E8:93:5A:71
Certificate issuer: /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial: 0183B1317AEECFA4274EFBEB554DDA9DA98A
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/6sg-ssTppJ_sAsU2RuFI4-iTWnE.roa
Signing time: Fri 07 Oct 2022 06:45:53 +0000
ROA not before: Fri 07 Oct 2022 06:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42237
IP address blocks: 193.105.134.0/24 maxlen: 24
91.236.116.0/24 maxlen: 24
185.217.2.0/24 maxlen: 24
185.217.1.0/24 maxlen: 24
185.217.0.0/24 maxlen: 24
185.246.130.0/23 maxlen: 23
185.246.128.0/22 maxlen: 22
2a0d:8986::/32 maxlen: 32
2a0d:8985::/32 maxlen: 32
2a0d:8982::/32 maxlen: 32
2a0d:8981::/32 maxlen: 32
2a0b:c040::/32 maxlen: 32
2a0d:8987::/32 maxlen: 32
2a0d:8984::/32 maxlen: 32
2a0d:8980::/32 maxlen: 32
2a0b:c041::/32 maxlen: 32
2a0d:8983::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:31:7a:ee:cf:a4:27:4e:fb:eb:55:4d:da:9d:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Validity
Not Before: Oct 7 06:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eac83eb2c4e9a49fec02c53646e148e3e8935a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:2c:bd:7a:4e:75:03:54:2d:83:0c:61:6b:
2a:7d:52:71:76:8a:6d:ef:a9:81:04:96:3e:34:30:
d2:b3:4d:1b:cb:06:56:aa:29:fd:67:14:61:36:9e:
b3:ef:26:a2:2e:da:c6:2c:11:72:6a:f7:c5:0c:17:
b5:cf:5d:22:09:19:de:a8:a1:6c:20:e8:99:31:4f:
d3:e9:00:9d:88:60:6f:a0:33:33:08:35:ce:a1:4e:
0f:ff:b4:59:4d:a4:ba:40:df:91:1b:1d:75:2a:41:
01:c0:03:0f:b3:91:fb:f3:7f:5f:c3:4f:43:5e:00:
81:49:1b:da:a2:62:a3:44:8b:8d:0a:30:4c:a4:e1:
ec:04:37:69:02:19:60:c6:b6:e9:3e:0e:7e:62:7f:
14:ce:a9:5f:58:9c:56:31:44:e6:45:a9:f0:2f:b7:
5e:e5:5d:ca:55:50:09:0b:e0:6b:4e:91:b0:f4:dc:
25:2f:47:ac:57:ee:c4:ce:2c:0b:16:db:69:a4:a7:
b1:2e:a8:b5:8d:58:03:e5:3a:03:e4:d2:5e:57:2c:
95:fc:98:ce:f7:73:25:41:fd:22:ef:c2:3f:ce:ec:
92:3f:51:0a:68:a5:ed:f4:9b:74:38:5a:d9:b9:3c:
1e:08:ba:34:ae:8b:a7:3a:63:7d:92:8f:2f:3c:81:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C8:3E:B2:C4:E9:A4:9F:EC:02:C5:36:46:E1:48:E3:E8:93:5A:71
X509v3 Authority Key Identifier:
keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/6sg-ssTppJ_sAsU2RuFI4-iTWnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.116.0/24
185.217.0.0-185.217.2.255
185.246.128.0/22
193.105.134.0/24
IPv6:
2a0b:c040::/31
2a0d:8980::/29
Signature Algorithm: sha256WithRSAEncryption
98:b4:f6:51:df:3f:45:ff:cc:c9:93:c4:bb:57:d8:d6:d1:3b:
e1:71:0f:2a:0b:76:73:16:28:6c:2b:7e:80:bc:cd:a2:3b:b4:
d4:4a:a9:6c:a2:ff:2f:eb:08:b2:38:8b:8c:5c:7d:dd:76:37:
16:35:2f:9f:b2:48:5e:57:ff:16:da:35:f8:94:31:5d:1c:59:
0b:6d:a5:84:3b:56:ad:50:6e:d5:1c:62:1a:33:33:e0:bc:f5:
85:bc:f2:f8:b3:99:a5:f3:fa:3f:3d:bb:84:b5:35:f6:09:7a:
0e:01:2a:c3:95:6d:13:61:cc:26:f4:f1:a6:7b:bd:a4:d6:28:
fd:0e:4d:e9:6d:a6:2b:d6:05:2c:f2:5c:6f:a6:81:bf:37:37:
b3:c6:1f:df:4a:f4:7e:84:fa:75:0d:23:01:f3:07:8f:0f:30:
de:f3:2a:b0:6f:14:9f:ec:de:55:db:7f:ed:9c:3a:f1:8f:0f:
c4:f4:52:68:7f:36:d2:99:c3:f8:75:65:58:50:1c:a3:01:f0:
83:60:a3:c2:61:f5:4e:ef:97:86:64:fe:5a:91:21:b5:4b:fd:
4d:0b:04:58:1f:ee:52:81:c3:59:14:20:5f:af:6d:08:3f:c4:
0a:e1:f9:ad:33:c4:79:8e:88:07:07:45:22:12:b3:cb:e1:19:
1a:22:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:44 2024 by rpki-client on console-ams.rpki-client.org