Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/6MMtZ0p0S3UErh0fFksqehnDVrk.roa
File: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (raw, json)
Hash identifier: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=
Subject key identifier: E8:C3:2D:67:4A:74:4B:75:04:AE:1D:1F:16:4B:2A:7A:19:C3:56:B9
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 019424B3E8ABD96674AB9CCE49935C131847
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/6MMtZ0p0S3UErh0fFksqehnDVrk.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25039
IP address blocks: 145.225.60.0/24 maxlen: 24
145.225.63.0/24 maxlen: 24
145.225.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e8:ab:d9:66:74:ab:9c:ce:49:93:5c:13:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c32d674a744b7504ae1d1f164b2a7a19c356b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:d0:4a:c8:f6:59:61:92:46:c7:9e:a7:8b:
0b:c7:49:c7:2f:bb:d5:3c:16:c2:6e:de:69:7c:43:
b8:bb:30:7f:e4:91:18:a9:d9:d3:8b:b0:4c:be:16:
16:2a:87:5e:6c:76:95:75:a1:43:43:df:33:15:f6:
6c:2c:be:d8:a4:c7:0b:fe:32:0e:2c:b5:79:68:75:
07:61:ac:9b:f6:15:0a:5a:ac:4a:27:f6:f5:bd:b5:
0c:a9:67:71:99:83:28:e3:c7:62:c7:0c:02:cf:22:
21:60:3b:75:62:f7:44:08:60:99:25:75:15:ef:42:
9e:44:1f:10:49:28:21:63:5e:ca:3e:51:62:08:a8:
8e:d2:d1:57:6e:d0:fc:79:f8:08:d6:c8:68:1a:57:
20:c1:78:74:82:3f:2e:28:b2:47:3c:fc:7a:a3:e0:
0e:1d:0e:83:75:ee:df:49:7e:a5:0b:b9:a2:e3:fd:
58:3d:e1:12:23:6b:b5:82:44:d3:f9:ef:73:df:cc:
f9:c7:eb:df:5b:11:e0:d2:38:53:6b:78:7d:6d:41:
f5:be:85:bd:c3:77:a5:f9:f1:28:3e:26:ab:28:11:
75:77:6a:e4:df:42:0a:a5:f0:f1:f6:5f:69:af:a0:
88:48:95:c0:fd:1d:3e:a5:90:f9:67:f3:ef:33:9f:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:2D:67:4A:74:4B:75:04:AE:1D:1F:16:4B:2A:7A:19:C3:56:B9
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/6MMtZ0p0S3UErh0fFksqehnDVrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.225.60.0/24
145.225.63.0/24
145.225.75.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ae:c7:d5:ae:e8:50:ea:15:e8:28:e6:3f:54:ff:24:31:06:
c5:10:60:a0:27:c7:c1:b7:b7:1d:93:a6:01:2e:35:b1:ae:04:
db:ad:b5:9a:36:d5:e0:e6:5f:27:73:91:b2:29:2b:0e:20:f5:
2e:1d:e7:93:f2:a7:89:aa:39:55:7a:b2:a9:ee:8b:da:5a:ca:
1f:6b:14:12:41:cc:93:0a:f0:c2:0d:65:88:9c:a4:d0:6f:73:
0f:93:0f:df:92:44:5a:1b:42:65:24:5a:77:47:bc:af:68:f2:
26:11:88:ab:21:73:f0:34:8b:e5:63:f4:5c:ee:d5:b1:47:3e:
2f:3c:1c:8d:db:6a:23:e1:d1:f9:92:8a:ef:9e:3c:73:ec:0c:
43:13:68:53:3b:e7:2a:f3:be:ea:48:02:01:63:8d:12:42:a8:
43:28:47:67:30:a5:dd:3a:91:45:d1:0b:2b:fa:6d:34:b1:cd:
a2:19:b5:63:dd:80:af:dc:bf:e0:df:e7:40:f5:20:6f:e5:94:
be:65:04:bc:0e:a5:ec:0b:f3:72:e4:df:4d:4a:0f:dc:d3:97:
9d:09:b0:d5:11:50:72:c5:cd:89:4a:a6:a5:76:2e:b9:1b:a4:
aa:d7:3d:13:f5:54:9b:6d:64:3c:bc:17:ce:15:0b:dd:52:59:
5a:64:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:58 2025 by rpki-client