Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa
File: tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa (raw, json)
Hash identifier: Wy9lKsdp9Di7MryHAEfUWFGv7fEx23Pr2YF9NFfmLVY=
Subject key identifier: B6:61:00:7F:D6:57:64:F5:98:86:42:91:48:A9:B6:44:56:70:BB:9F
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 019469C8104F20A51C96462E31BFBDEAE4BB
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa
Signing time: Wed 15 Jan 2025 11:45:06 +0000
ROA not before: Wed 15 Jan 2025 11:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48296
IP address blocks: 212.6.48.0/24 maxlen: 24
2a13:a8c0:1::/48 maxlen: 48
2a13:a8c0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:c8:10:4f:20:a5:1c:96:46:2e:31:bf:bd:ea:e4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: Jan 15 11:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b661007fd65764f59886429148a9b6445670bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:3e:45:76:69:77:85:a0:5c:ef:b7:e9:68:
08:be:f3:6e:76:3e:89:23:2d:c8:62:34:d7:61:c9:
37:d0:46:71:10:e3:fe:2f:5e:6b:c5:45:6d:39:cd:
2f:08:74:95:d6:dd:25:62:d8:fa:0b:d0:45:00:e7:
8e:de:75:d2:6d:62:08:5d:61:11:d1:7b:dc:89:f4:
8c:a8:99:9e:0a:92:4e:e8:97:66:09:dc:3e:d3:86:
30:1c:15:64:91:d1:67:e4:e5:ee:52:81:65:9c:ff:
e4:df:62:0f:e3:1a:ed:c6:79:b6:bf:1d:b0:88:19:
5c:74:6d:86:50:78:4f:0d:68:6d:22:52:e3:a9:01:
42:aa:0b:0d:99:4d:c9:a7:82:57:36:23:9b:12:b7:
3c:1f:e9:92:92:13:eb:16:5b:93:ef:9a:75:13:6c:
ae:ee:1d:46:b8:bf:a0:9a:9c:3e:f0:af:b3:50:1d:
3e:35:cd:39:b8:2a:a1:c1:6d:75:0b:2a:76:70:86:
a3:4e:55:cd:30:77:40:53:0c:60:36:93:14:2c:b6:
0f:4b:7e:d9:68:e1:d8:a7:87:fe:91:7b:3f:d6:fa:
9c:c0:ad:c6:a0:38:63:7b:82:ed:10:2d:43:45:af:
32:09:d8:52:9e:f0:4c:36:27:38:d9:37:9f:33:c6:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:00:7F:D6:57:64:F5:98:86:42:91:48:A9:B6:44:56:70:BB:9F
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.48.0/24
IPv6:
2a13:a8c0:1::-2a13:a8c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3b:f8:c3:dd:2d:34:de:8f:2e:8e:d8:3c:fc:f2:2a:86:db:fd:
af:af:f8:8f:eb:c3:1f:62:7c:a8:a9:d3:de:ff:ba:d2:3f:f1:
9e:b1:83:9a:94:d0:82:68:3c:52:1b:df:36:a4:d8:ad:91:b4:
2f:90:3d:3d:af:ea:b1:bc:ae:ad:c7:18:f0:64:46:95:dd:93:
0d:62:04:b5:be:71:ef:f3:3d:08:f5:90:bc:46:ce:c4:35:4a:
d6:1c:39:6b:17:a4:5a:f0:34:f0:84:10:5e:04:dd:e0:c2:ff:
de:85:76:a7:72:a1:61:32:9a:c2:89:4e:fd:eb:a4:7a:93:61:
0f:90:11:4c:15:1c:76:64:aa:8b:98:1c:e9:1d:43:85:e4:a1:
29:2c:e6:1b:b4:4f:ba:4d:b5:f0:b3:4e:02:00:d5:b0:06:1d:
9a:b6:b5:ad:32:a3:54:71:94:3b:58:d5:f5:70:de:f9:d7:51:
b9:be:f7:c6:97:d7:9a:eb:66:22:21:b1:8f:2e:0e:96:9c:6a:
54:89:bc:b7:1e:a9:62:ec:00:58:b3:c6:a5:64:9a:9b:f5:45:
93:d9:90:75:00:89:d1:ae:07:18:00:0e:37:eb:99:5f:cc:34:
f1:c5:c0:97:0c:51:0c:2f:f6:d6:f8:c9:f4:7f:7f:eb:56:5a:
de:cc:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:38 2025 by rpki-client