Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/6GBLph1Gylzo64Ed8z4s_J7hLIQ.roa
File: 6GBLph1Gylzo64Ed8z4s_J7hLIQ.roa (raw, json)
Hash identifier: UkuG9b39Ssw9YIHOuRCxtjpt3O6nOXBxq5MDBUvAW6s=
Subject key identifier: E8:60:4B:A6:1D:46:CA:5C:E8:EB:81:1D:F3:3E:2C:FC:9E:E1:2C:84
Certificate issuer: /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial: 018D13D7EE0E7D62E55E6B53C294E4EA28FD
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/6GBLph1Gylzo64Ed8z4s_J7hLIQ.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.35.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
195.96.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ee:0e:7d:62:e5:5e:6b:53:c2:94:e4:ea:28:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8604ba61d46ca5ce8eb811df33e2cfc9ee12c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:f1:eb:38:60:aa:44:52:7c:ba:fb:03:4d:
25:76:af:5b:b9:5e:b3:88:91:3e:5e:60:62:55:1f:
37:f5:31:3c:93:a0:bb:bd:53:4a:04:89:ad:02:33:
0a:28:d9:9b:f3:62:cb:b5:a3:01:59:7d:c1:00:8c:
16:e8:7f:cf:44:8d:d0:9e:86:8b:d5:23:f4:d0:5f:
eb:90:36:2f:3e:5c:99:87:54:de:1a:72:88:04:79:
3a:c5:27:a8:2b:3e:87:e6:08:78:a0:9c:bc:87:23:
65:8b:d5:bb:85:20:d1:dc:12:05:4e:9d:2b:9f:83:
02:4a:23:28:2b:17:d7:2a:48:5a:32:95:25:cb:d2:
48:e0:e5:be:f1:4c:f0:de:82:f8:c6:3a:4e:53:9b:
cc:60:91:69:44:8e:0f:9c:5d:2e:42:1f:95:d9:cb:
31:34:7c:78:da:36:3a:21:72:d4:04:54:aa:3a:9d:
4b:07:d9:95:4b:83:0e:77:c3:88:b3:ee:b1:fe:8c:
87:21:50:d4:24:6d:a5:93:cc:47:a8:b2:e0:c1:f7:
7a:54:3b:36:eb:20:1f:19:d8:8a:4e:43:ec:d7:33:
06:dd:23:f2:33:8e:ea:e4:e6:f8:f5:36:db:9c:b8:
4a:59:d6:d7:4b:47:b3:5f:38:a3:e1:4e:74:a8:b6:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:4B:A6:1D:46:CA:5C:E8:EB:81:1D:F3:3E:2C:FC:9E:E1:2C:84
X509v3 Authority Key Identifier:
keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/6GBLph1Gylzo64Ed8z4s_J7hLIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.35.0/24
146.19.148.0/24
195.96.155.0/24
Signature Algorithm: sha256WithRSAEncryption
74:26:4e:b6:39:3b:db:6a:f6:f4:5b:9e:20:8d:1f:74:f2:0d:
66:e1:83:cb:0d:74:87:7f:ed:57:a3:b4:ef:48:27:f6:2b:01:
29:91:f8:7b:1d:50:55:a6:49:9a:80:8c:71:f7:de:a8:4b:8c:
7f:ac:06:44:ce:c4:40:e7:1a:f5:5c:b9:b3:29:5a:29:72:e6:
b7:fb:3f:e8:07:13:00:cc:4f:17:ac:1d:4d:b9:05:08:0b:aa:
52:ea:c9:e2:e3:cf:c5:a5:40:62:1e:3b:d8:16:5d:64:c8:54:
00:4e:5e:9c:c0:99:47:06:3d:0b:95:9d:00:27:94:e7:d0:52:
a2:2a:1a:a2:6e:7c:91:3b:9b:4d:10:5a:5c:a1:81:53:06:e1:
be:21:b2:fc:cb:a5:bf:40:7d:77:4f:ff:59:35:80:cc:eb:f5:
ba:38:19:1a:d0:b2:10:86:94:aa:82:68:4c:a1:65:8d:62:2e:
28:db:cc:da:e7:eb:39:35:fb:91:fe:29:3d:7a:b4:58:8f:37:
fc:1d:5c:7d:5b:87:f3:63:d0:af:cf:c8:70:1f:6b:7d:ea:5f:
7e:16:2a:57:76:db:ef:d9:af:90:b5:18:ff:50:2e:35:2e:53:
51:b6:41:b3:8e:4a:23:a7:04:53:d0:48:1d:35:25:28:d9:3a:
a6:46:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org