Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/e778W73IP-mfn6G1UcCVOAWbb7Q.roa
File: e778W73IP-mfn6G1UcCVOAWbb7Q.roa (raw, json)
Hash identifier: Hir7GrDXL5XgSgdCjiWInSYR7zu1K58Z5ki8qKX2kvE=
Subject key identifier: 7B:BE:FC:5B:BD:C8:3F:E9:9F:9F:A1:B5:51:C0:95:38:05:9B:6F:B4
Certificate issuer: /CN=cc464d9f8f4e6fd19808857b27d3416c78a89633
Certificate serial: 01856C1369B735309C78C5238D37E458C49B
Authority key identifier: CC:46:4D:9F:8F:4E:6F:D1:98:08:85:7B:27:D3:41:6C:78:A8:96:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEZNn49Ob9GYCIV7J9NBbHioljM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/e778W73IP-mfn6G1UcCVOAWbb7Q.roa
Signing time: Sun 01 Jan 2023 06:44:49 +0000
ROA not before: Sun 01 Jan 2023 06:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48264
IP address blocks: 195.178.117.0/24 maxlen: 24
195.178.116.0/24 maxlen: 24
185.232.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:69:b7:35:30:9c:78:c5:23:8d:37:e4:58:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc464d9f8f4e6fd19808857b27d3416c78a89633
Validity
Not Before: Jan 1 06:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bbefc5bbdc83fe99f9fa1b551c09538059b6fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:51:d5:0d:ec:b0:b0:54:71:b3:f3:55:74:
5e:f1:8c:ad:51:65:3c:22:de:ec:55:54:22:45:f6:
6f:81:b8:8d:3a:cc:b0:bd:c8:3f:5d:c4:22:53:9e:
22:11:3f:a2:10:0e:bb:0e:7c:6e:18:3e:eb:9b:b8:
9f:07:9b:44:d0:da:f5:98:dc:cc:e8:ac:df:e7:69:
8c:23:42:45:6c:2f:71:82:c6:8f:ab:ab:92:4e:a9:
4f:3a:b9:fb:08:35:6d:d8:e0:f9:72:29:cd:c6:9b:
3d:25:5a:1c:2c:72:45:d5:fb:04:29:b9:ad:0c:81:
2e:56:75:db:dc:b7:d7:c9:85:df:f1:8a:04:40:a4:
5b:2d:a9:0f:b6:1c:74:c9:0e:89:b6:9b:61:ff:17:
c8:bd:d7:d2:53:76:e1:4b:26:ec:f4:ab:05:1d:e1:
82:45:fa:2f:96:e6:69:f3:bd:9c:ce:11:e1:0f:72:
db:1a:b9:6a:8c:3c:07:47:ec:cf:4d:0a:f5:38:3a:
fb:83:40:5b:6a:2f:90:b3:41:1e:5c:5e:aa:43:d1:
5d:b8:a3:db:0d:d2:43:f2:19:70:cd:20:9e:46:e9:
42:82:53:a8:8f:41:89:56:cd:29:86:65:6f:d7:f8:
08:6e:a2:79:ef:09:0f:76:c0:34:c0:b5:3f:99:16:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:FC:5B:BD:C8:3F:E9:9F:9F:A1:B5:51:C0:95:38:05:9B:6F:B4
X509v3 Authority Key Identifier:
keyid:CC:46:4D:9F:8F:4E:6F:D1:98:08:85:7B:27:D3:41:6C:78:A8:96:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEZNn49Ob9GYCIV7J9NBbHioljM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/e778W73IP-mfn6G1UcCVOAWbb7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e5014c-039e-4405-8ab4-0da646df0a52/1/zEZNn49Ob9GYCIV7J9NBbHioljM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.128.0/22
195.178.116.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:52:94:3d:90:fc:4b:a7:72:27:e6:bd:4c:b4:5d:ad:bc:ca:
66:d8:5e:8e:e4:42:e4:19:02:4a:9a:ed:77:8c:57:41:06:af:
4e:3d:d9:d5:e7:82:c5:27:8c:cf:2d:8a:8a:6f:6c:a8:a1:75:
34:b4:f8:c1:c0:4c:91:da:d1:21:10:84:20:5b:b9:9e:b0:7e:
58:5b:b1:e8:1a:1c:1d:d9:f8:3e:bb:ae:21:83:51:16:dd:83:
50:6f:eb:02:55:5a:24:17:85:ee:3c:a8:17:28:54:a0:d2:3c:
1e:d6:9c:09:f7:56:1d:d0:29:28:f6:73:85:f2:f6:87:0e:bb:
a5:41:56:03:3f:81:de:40:7f:04:54:74:8b:63:1c:c1:83:ad:
e4:75:f6:69:6d:19:c4:43:be:d1:29:13:da:72:7d:ac:80:09:
b4:72:04:6c:e6:6a:92:d7:05:68:98:92:df:de:33:5f:9e:99:
50:c8:c5:19:0c:31:32:4b:37:a1:04:c0:65:4c:86:46:68:e1:
f0:8b:f9:55:47:d5:15:66:43:97:45:06:85:b3:58:89:82:17:
4d:47:5a:d2:80:9f:eb:37:70:1b:92:c8:5a:ef:b7:7c:9b:1c:
7e:61:3c:bd:c1:2f:6c:7f:3a:1f:7a:f6:14:5f:9d:08:c4:0f:
c2:bd:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:55 2024 by rpki-client on console-ams.rpki-client.org