Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa
File: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (raw, json)
Hash identifier: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=
Subject key identifier: E9:E9:33:7B:30:90:4D:14:49:E9:A9:E2:D6:42:E5:82:5F:7F:50:44
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 0194228DEFEE4CEC4E2B6FD1285EFF0BF7BD
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60565
IP address blocks: 185.28.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ef:ee:4c:ec:4e:2b:6f:d1:28:5e:ff:0b:f7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e9337b30904d1449e9a9e2d642e5825f7f5044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:c6:ab:cc:57:e9:c6:6e:65:49:5a:be:95:
76:4d:a8:a7:0b:5f:00:6c:c3:40:06:f4:c3:21:45:
7c:2a:64:42:28:2a:60:f4:af:9f:1d:d7:e2:82:95:
97:c6:d6:e4:45:d6:9f:d2:7d:36:86:31:7b:3e:1c:
c4:93:a2:ba:f4:d6:2a:9f:39:13:09:29:0a:4d:06:
c7:58:b7:fa:08:80:ba:e3:9e:1a:2b:d9:47:c7:74:
fd:9a:be:2b:61:ac:98:9c:50:75:08:55:a6:d4:4a:
64:45:7f:ab:71:4e:ff:4d:cd:63:ac:fa:9c:62:da:
73:d6:67:d6:9f:4d:62:cd:0d:26:2e:25:de:80:30:
35:e2:3d:4a:83:82:6a:86:6c:df:37:30:22:d3:24:
2c:78:24:31:7f:10:a9:46:40:03:0e:ee:ec:57:96:
4a:68:37:81:3b:a3:8e:64:f7:65:c0:e2:6c:1f:55:
93:aa:4f:1e:c0:53:4f:ce:5e:6f:a6:db:e3:67:5e:
01:49:93:47:1f:56:32:e8:53:6f:d9:2c:9d:c7:90:
22:7a:02:36:31:d5:19:f2:ba:56:95:8f:42:e8:e5:
be:46:9c:2b:69:cf:9c:fb:8f:42:4c:9e:26:2e:e5:
10:dc:a9:06:b2:6d:90:23:6c:56:9d:25:08:bd:49:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:33:7B:30:90:4D:14:49:E9:A9:E2:D6:42:E5:82:5F:7F:50:44
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.178.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a1:8d:9a:eb:e9:93:29:74:7f:20:eb:03:c9:70:fe:66:c8:
3b:1b:88:3c:b3:3f:40:dd:3a:bd:d3:b9:a6:ab:ac:9e:db:7f:
ba:db:d6:2b:3f:22:b7:39:15:0b:3c:86:0c:20:4d:20:a4:d5:
d8:a4:4f:05:22:d9:47:81:41:53:ba:94:ff:8b:a4:6f:6a:6f:
e3:9c:6c:04:05:88:42:c4:a2:21:a6:79:4a:b7:8e:50:ab:ee:
ca:5d:a1:86:56:d2:46:42:04:df:ba:86:f5:fb:47:aa:43:3d:
09:17:8e:0f:3a:35:f8:1e:80:58:5d:5b:43:06:49:c4:18:4f:
03:a2:7d:c0:38:d6:fb:5a:a0:f0:15:5f:59:8b:6b:a5:e5:56:
00:ed:fc:ef:2b:a0:a9:08:24:07:99:77:ed:e5:a1:fa:a8:44:
95:b7:36:d2:c3:8a:24:e9:a0:c8:2b:70:e6:4c:6c:83:00:80:
61:e4:61:13:29:e6:9d:cb:e9:01:dd:74:6a:ce:08:b2:28:26:
64:06:a2:32:cc:56:e7:4d:be:72:78:4d:ed:eb:56:f1:eb:1b:
64:bb:90:d7:6b:6d:17:0c:6f:dd:ef:db:ad:37:d7:0c:50:97:
b8:ff:bf:b0:8a:a1:d4:09:93:ba:36:33:a9:64:81:15:58:18:
d9:70:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:35 2025 by rpki-client