Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/6XCTUSOWxa7WsKwz6cNlndXeK8c.roa
File: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (raw, json)
Hash identifier: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=
Subject key identifier: E9:70:93:51:23:96:C5:AE:D6:B0:AC:33:E9:C3:65:9D:D5:DE:2B:C7
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019427B5E697BE3AC4965A839900A7B4CEAF
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/6XCTUSOWxa7WsKwz6cNlndXeK8c.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15962
IP address blocks: 194.1.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e6:97:be:3a:c4:96:5a:83:99:00:a7:b4:ce:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97093512396c5aed6b0ac33e9c3659dd5de2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:80:7e:f4:a0:9a:d9:32:e1:fe:45:d1:b3:45:
f7:2c:77:82:56:ea:98:78:a7:ff:59:11:61:90:5d:
e1:b9:31:45:16:3c:1b:13:87:39:45:6d:b8:a6:3d:
11:df:a3:48:1f:f3:a8:53:35:e5:90:38:91:95:45:
40:f8:97:68:06:ca:c8:f9:9d:d8:96:b6:4b:d6:6a:
58:b3:a0:28:b7:06:e8:9e:d6:47:3d:4d:c1:ab:97:
2f:91:ad:12:2d:77:17:5a:4f:98:97:d7:9c:22:ac:
70:13:cf:ef:54:70:f7:fe:00:82:71:e0:c2:b2:c1:
50:61:0e:25:06:24:6c:1d:98:38:fb:a2:81:3e:d6:
81:07:fe:a1:36:69:94:ef:6d:cb:e0:a1:f5:f8:6b:
f4:b6:6a:61:d6:ad:db:f3:dc:97:35:1f:54:ea:1b:
cc:26:75:31:e9:da:6e:bd:ef:f6:aa:fb:3d:f4:a0:
51:a1:af:05:49:69:71:e9:c9:69:f0:b0:90:aa:36:
5e:93:86:82:14:99:45:25:b4:34:67:47:41:26:79:
04:a8:d7:46:f2:db:fe:d3:15:c0:4a:6f:de:cc:0b:
57:c7:fe:3c:14:8b:8d:2a:35:53:26:06:c8:15:96:
b6:4a:eb:37:ce:3b:af:23:97:1f:36:19:6c:a0:5c:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:93:51:23:96:C5:AE:D6:B0:AC:33:E9:C3:65:9D:D5:DE:2B:C7
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/6XCTUSOWxa7WsKwz6cNlndXeK8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.185.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:10:1a:3e:2b:9f:f9:49:14:e9:ab:07:62:1d:9c:ba:48:97:
a6:79:69:79:57:b7:1d:54:5e:3e:e0:78:55:62:ba:16:2a:cf:
b9:9b:fe:50:c2:9b:78:39:26:8c:fe:a9:a6:59:67:42:d6:b4:
e8:7d:0d:bf:5c:4b:c6:3c:57:b9:02:b2:00:2e:fc:9f:dc:46:
99:ed:86:8a:1c:f3:43:74:aa:88:e8:2a:66:fd:2a:de:65:ec:
22:1f:99:b9:ba:14:63:b7:e4:bb:9b:07:e8:8a:38:9c:28:3b:
5c:35:5c:4b:79:a2:0d:eb:12:96:f9:5a:a7:b0:6a:48:9f:53:
b9:12:c8:d9:6e:48:8a:a7:82:43:9f:5d:b5:89:ae:4f:91:a9:
8a:cd:d5:ef:be:ef:9a:a1:59:36:12:44:c8:47:52:f1:7a:fc:
ec:20:f5:b4:cb:7d:1c:9d:8b:fb:a1:b0:7e:45:20:1a:83:ad:
ed:61:a8:da:6d:06:f8:f8:95:69:08:df:e9:46:f2:6a:d6:35:
bf:31:65:33:26:fa:41:fa:16:7e:89:bc:4d:da:dc:4d:a5:c4:
b8:a7:03:de:06:c4:f2:92:3a:66:a7:d0:28:d2:a0:34:e3:81:
08:2a:b0:d2:3a:7c:8a:65:d3:7f:8d:b8:f4:c2:ab:43:da:7a:
b5:67:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:12 2025 by rpki-client