Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa
File: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (raw, json)
Hash identifier: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=
Subject key identifier: E8:0A:42:FA:31:D0:21:C2:40:05:96:06:4E:76:A3:E1:C0:D6:4D:9D
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 0194258F75EDF68B20E77AFA7878C7339A52
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48294
IP address blocks: 91.194.46.0/23 maxlen: 24
94.126.208.0/21 maxlen: 24
185.38.244.0/22 maxlen: 24
185.77.56.0/22 maxlen: 22
185.81.244.0/22 maxlen: 24
185.81.252.0/22 maxlen: 24
185.126.248.0/22 maxlen: 22
188.164.224.0/21 maxlen: 24
194.150.200.0/23 maxlen: 24
2a02:5d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:75:ed:f6:8b:20:e7:7a:fa:78:78:c7:33:9a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e80a42fa31d021c2400596064e76a3e1c0d64d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:c5:46:62:47:36:39:2b:2f:ac:8b:f5:55:
b8:5d:f4:0e:40:8e:f5:35:28:89:49:31:5d:47:6e:
a2:c9:56:6a:a5:61:de:98:5f:42:d1:06:fc:23:b0:
3d:03:59:fe:56:da:27:a0:22:89:5a:da:17:fa:c7:
2b:38:5c:6a:da:d0:7e:d3:e0:2b:ec:8b:af:c7:f6:
29:11:76:45:30:99:c0:49:70:c1:d2:c0:b5:1a:65:
05:7c:26:37:14:b9:30:71:cf:82:24:68:29:85:38:
bc:33:a0:40:7f:86:90:1c:8a:55:d6:19:d6:c3:d3:
42:81:b5:58:6c:da:3f:bd:9d:70:0c:c3:d0:09:39:
80:bd:1f:2f:9e:7a:05:34:d0:48:8d:1a:5e:0c:82:
25:c0:2d:47:30:3c:73:b5:05:98:8f:a1:70:31:bb:
7d:d9:97:73:bf:c7:23:c7:6f:b9:1a:67:fa:3d:66:
73:06:10:0e:cb:f9:fc:55:bf:17:c3:6d:bf:8d:f0:
de:db:92:ab:a4:11:f8:42:69:69:59:95:e6:6f:51:
66:8a:89:67:d9:2d:38:af:18:76:46:97:47:08:f8:
fd:b4:b6:8e:04:62:3a:94:a6:8e:55:70:42:64:2e:
e2:56:67:50:46:fa:bf:0a:49:90:08:12:db:45:38:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0A:42:FA:31:D0:21:C2:40:05:96:06:4E:76:A3:E1:C0:D6:4D:9D
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.46.0/23
94.126.208.0/21
185.38.244.0/22
185.77.56.0/22
185.81.244.0/22
185.81.252.0/22
185.126.248.0/22
188.164.224.0/21
194.150.200.0/23
IPv6:
2a02:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:64:39:67:e5:69:a7:4d:b5:1d:c4:6b:80:7b:c8:4f:ea:a2:
1e:02:e8:60:5f:69:0f:d5:64:7b:ee:a1:68:88:09:67:29:29:
fe:7a:0b:6d:4e:11:9f:54:df:66:27:e5:cd:17:5b:f9:9b:fb:
3e:cb:ef:80:21:28:5e:8c:a4:d1:2a:d2:ac:bd:9d:30:bf:d6:
0f:32:f1:d2:28:e5:d3:ce:05:05:df:01:bb:eb:be:36:cb:de:
4a:25:c3:24:2e:1a:f8:bf:0c:26:08:8b:a2:6f:ec:8f:e3:99:
ae:8d:80:ab:66:3d:14:86:2c:9d:38:a2:58:e8:66:22:61:16:
97:dd:2f:e8:7a:d1:52:cc:5c:d7:f3:cf:d2:d3:bc:b2:5f:ba:
64:2d:06:21:80:0a:76:da:8e:89:dc:18:fb:4d:2d:d5:d3:d6:
eb:ae:f1:ae:71:01:01:b6:98:66:35:40:16:94:1b:24:9c:5f:
b3:d0:f9:7f:93:98:d5:e7:80:03:26:a7:de:82:f0:6d:10:0b:
be:bc:4f:79:57:90:23:13:20:ff:5e:7b:da:ef:2f:3a:d0:b8:
9a:d2:d2:4f:12:47:f3:1b:21:52:14:6b:5a:4b:ef:50:9c:59:
fa:0b:57:ed:4a:44:0c:fe:a4:7a:a2:a6:3c:01:fa:a2:8f:98:
4c:f0:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:45 2025 by rpki-client