Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/6kBjTVqhW7faVRm-3XEl_IMCah4.roa
File: 6kBjTVqhW7faVRm-3XEl_IMCah4.roa (raw, json)
Hash identifier: MW/9x+O/5WOBSd49qjsZ+D90ZstlRvUOg+7x8HqD4NQ=
Subject key identifier: EA:40:63:4D:5A:A1:5B:B7:DA:55:19:BE:DD:71:25:FC:83:02:6A:1E
Certificate issuer: /CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Certificate serial: 0183C786B06E49BA1D0B07D1B75DF114AB73
Authority key identifier: 0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/6kBjTVqhW7faVRm-3XEl_IMCah4.roa
Signing time: Tue 11 Oct 2022 14:50:36 +0000
ROA not before: Tue 11 Oct 2022 14:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 178.236.0.0/20 maxlen: 24
176.32.64.0/18 maxlen: 24
176.34.0.0/16 maxlen: 24
79.125.0.0/17 maxlen: 24
87.238.80.0/21 maxlen: 24
46.51.208.0/22 maxlen: 24
185.48.120.0/22 maxlen: 24
46.51.128.0/17 maxlen: 24
46.137.0.0/16 maxlen: 24
2a05:d000::/25 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:86:b0:6e:49:ba:1d:0b:07:d1:b7:5d:f1:14:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbcffabf5fabc8bcb04457c1ea6cc665f62740f
Validity
Not Before: Oct 11 14:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea40634d5aa15bb7da5519bedd7125fc83026a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:79:2f:b7:07:92:0e:f8:b2:e2:9f:c0:3a:
a7:28:ba:aa:60:0a:e8:3e:eb:1a:38:04:03:4e:69:
3e:f9:47:e2:cd:d8:ef:cf:48:34:28:84:8b:a8:6a:
21:4e:7f:17:f9:2c:e6:b9:84:93:7b:f4:aa:55:64:
1c:26:f3:a0:a7:bf:59:dd:64:b9:f7:3b:47:08:75:
3f:cb:73:c4:46:1b:69:6f:28:ce:4b:11:a8:7e:7b:
49:e1:8b:b8:e0:31:b2:ba:44:59:2e:bc:d6:2b:75:
1f:27:8b:6f:d6:dd:a1:61:df:98:3a:b4:e5:d3:d4:
de:18:dc:d4:5c:7e:2b:75:b2:eb:f5:e7:86:fd:4b:
eb:56:0a:91:a4:4f:6a:2d:82:f0:c8:fe:7a:43:5a:
dc:4b:76:ec:e2:db:8f:97:c1:d5:19:f2:22:89:12:
2e:c9:3f:eb:c6:35:4a:e9:b1:e4:7c:4b:eb:bb:bf:
72:5d:ec:2b:0b:c5:6f:6d:bf:01:d6:be:64:f2:d6:
37:3d:f5:84:53:a6:99:04:73:dd:17:bb:00:e6:09:
94:71:44:dd:69:33:43:6d:f8:96:8c:6f:36:1c:98:
8b:35:4f:35:10:b7:d8:84:53:3e:61:ed:dd:cd:c6:
51:68:2e:0a:70:19:9e:6b:39:bc:0f:b6:3b:45:bd:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:63:4D:5A:A1:5B:B7:DA:55:19:BE:DD:71:25:FC:83:02:6A:1E
X509v3 Authority Key Identifier:
keyid:0D:BC:FF:AB:F5:FA:BC:8B:CB:04:45:7C:1E:A6:CC:66:5F:62:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dbz_q_X6vIvLBEV8HqbMZl9idA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/6kBjTVqhW7faVRm-3XEl_IMCah4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1e6561-395b-4bde-bcd1-c02d585cffca/1/Dbz_q_X6vIvLBEV8HqbMZl9idA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
c8:28:3d:97:72:80:fd:e8:1f:fe:fd:01:49:9d:52:62:19:7f:
5a:84:09:14:d8:bc:7a:be:94:74:05:85:53:02:0f:aa:6a:fe:
3b:58:88:7e:da:1e:0d:91:02:9c:27:df:c6:68:b5:c3:0b:f2:
f5:1b:4c:80:87:06:6b:c4:13:73:33:31:88:8b:98:89:36:0c:
ee:ea:c9:31:82:c8:28:97:4a:57:c7:53:70:2c:69:56:8a:85:
21:1d:df:58:25:1e:cc:bc:b8:eb:c4:53:d6:a3:fc:49:78:83:
0f:cb:9e:1d:da:33:ee:62:30:61:00:74:24:eb:4d:5b:89:2d:
e9:6f:16:9d:df:96:77:48:b0:6a:8c:1c:c8:13:02:7b:3f:03:
2e:ee:3e:3f:76:1a:39:f7:40:01:a6:bb:c3:0b:65:e0:55:0e:
aa:9e:77:74:0a:29:e0:0d:43:c8:f3:a7:cf:cf:0f:15:c0:c7:
43:ea:31:c4:a5:28:1a:e6:4b:fc:44:57:5d:83:48:39:4f:a5:
5a:66:3f:7b:a7:46:99:0d:23:8b:6c:dc:36:fb:1c:6a:44:35:
c7:fd:a6:06:7c:41:92:47:dc:8b:8e:31:4b:54:33:c0:14:12:
81:0d:57:ee:51:ca:a9:13:07:09:83:df:3b:1e:6c:f1:b3:cc:
84:88:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:23 2024 by rpki-client on console-fra.rpki-client.org