Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/6Fu-cjiu1OME4q_FzIjOTZ4lbPs.roa
File: 6Fu-cjiu1OME4q_FzIjOTZ4lbPs.roa (raw, json)
Hash identifier: Jzrv/7q7slK1iGd0VJtR2MtKvx0Yi1YogBC/u3xy+uA=
Subject key identifier: E8:5B:BE:72:38:AE:D4:E3:04:E2:AF:C5:CC:88:CE:4D:9E:25:6C:FB
Certificate issuer: /CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Certificate serial: 01848625A2160B780F47FF49CE2BBD8C0675
Authority key identifier: C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/6Fu-cjiu1OME4q_FzIjOTZ4lbPs.roa
Signing time: Thu 17 Nov 2022 15:12:03 +0000
ROA not before: Thu 17 Nov 2022 15:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
37.46.16.0/21 maxlen: 21
2a0b:17c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:25:a2:16:0b:78:0f:47:ff:49:ce:2b:bd:8c:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Validity
Not Before: Nov 17 15:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e85bbe7238aed4e304e2afc5cc88ce4d9e256cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:1b:a2:14:ec:e4:f4:22:24:c6:6d:f6:a4:
6b:a7:b1:00:14:ec:36:b9:66:00:99:cc:34:e4:33:
83:36:e6:a2:ce:84:a8:72:c1:c0:97:81:98:51:c1:
87:76:25:a0:02:04:97:e3:e7:cb:97:cb:fe:22:73:
f5:87:04:b0:a2:c1:51:38:f5:5d:e6:aa:42:c3:00:
e2:e1:20:7d:41:82:77:96:ad:02:4f:56:05:c2:81:
06:65:93:f3:48:ed:2a:77:8c:af:fe:39:d3:14:99:
8e:71:3f:c2:47:0d:b4:fd:96:39:3e:29:4c:fa:af:
a3:3d:72:69:f0:c2:97:cd:ee:dc:d3:57:b8:77:c2:
33:96:2a:32:95:de:7b:a8:4d:d4:dc:ef:b7:41:ba:
f4:5e:47:5f:a0:f3:ca:af:c1:33:b6:32:5d:15:75:
69:e3:d1:db:a7:30:d5:7e:e1:ac:99:fe:e2:5b:e1:
01:8f:38:6e:c1:9c:b5:16:28:35:d6:9e:a1:c3:91:
b7:85:6c:a7:6b:3d:e9:63:4d:fb:ce:51:e4:0a:3f:
b0:72:53:03:7c:ce:de:4f:5b:1f:ee:1a:17:80:17:
8e:b6:11:12:94:d5:db:18:b5:00:c6:fb:21:22:e8:
fe:3b:27:25:e9:94:c9:8f:67:82:74:37:d9:d6:c6:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:BE:72:38:AE:D4:E3:04:E2:AF:C5:CC:88:CE:4D:9E:25:6C:FB
X509v3 Authority Key Identifier:
keyid:C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/6Fu-cjiu1OME4q_FzIjOTZ4lbPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/x3l4GbJFsWvgtHlY9-ar2Og9CZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
93.92.8.0/21
94.247.48.0/21
IPv6:
2a0b:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
88:16:79:94:07:89:d8:5e:a0:92:10:ad:4d:d9:5a:6f:29:38:
12:d0:2f:e4:e1:fe:1d:00:ea:31:33:b5:21:a2:99:62:91:95:
ec:f6:f1:b3:dd:ac:07:3f:90:97:53:f8:73:21:c2:8f:8b:17:
49:e3:15:ac:14:6d:95:bb:05:20:17:5a:cc:0f:c2:fa:a2:6e:
cf:1e:d3:e3:c1:86:10:78:83:af:a4:8a:01:c5:04:c3:0a:51:
fa:ef:36:d3:1a:93:9c:d7:07:69:bf:b3:94:66:67:f5:0d:66:
2e:e9:f9:19:99:93:cd:39:18:ab:5e:ba:70:1b:0e:e0:36:ed:
10:77:32:e8:4f:80:25:a6:41:35:06:32:7c:b2:0c:3f:0b:ff:
e4:56:d9:70:e9:d4:83:62:1a:2d:a5:c2:b0:dd:6e:01:df:6c:
61:7d:79:9c:7e:1d:9d:68:4b:90:04:ea:e9:ef:fe:bc:8b:6a:
34:2d:8c:f8:9b:81:5c:12:17:d6:ea:59:46:8f:d5:be:c2:35:
4d:17:a5:0e:30:af:f1:50:79:b9:24:2b:ed:ed:ab:3d:2d:34:
c4:05:62:a5:6b:ef:1f:55:d5:22:2a:90:a4:9a:0c:3a:ab:2b:
78:d3:30:43:a0:90:6a:82:42:1e:53:3b:a8:4e:6b:07:6e:66:
06:0a:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:15 2024 by rpki-client on console-fra.rpki-client.org