Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/6nWnFXyS5F1ASwTmxTI-OKrVInw.roa
File: 6nWnFXyS5F1ASwTmxTI-OKrVInw.roa (raw, json)
Hash identifier: nIb7NvpCUlKnok0WYLAdZJHgh2sr4DtEdqaSpiUSP2U=
Subject key identifier: EA:75:A7:15:7C:92:E4:5D:40:4B:04:E6:C5:32:3E:38:AA:D5:22:7C
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019427B3F32C52A4BEEB1E487F93CDB5F71C
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/6nWnFXyS5F1ASwTmxTI-OKrVInw.roa
Signing time: Thu 02 Jan 2025 15:48:12 +0000
ROA not before: Thu 02 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207684
IP address blocks: 194.92.64.0/21 maxlen: 21
194.92.72.0/23 maxlen: 23
2a0a:3a40:1001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:f3:2c:52:a4:be:eb:1e:48:7f:93:cd:b5:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Jan 2 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea75a7157c92e45d404b04e6c5323e38aad5227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:01:ad:48:85:ca:a5:e3:68:a6:a5:dd:bc:
68:a8:fc:07:80:e5:1a:47:ac:24:90:9f:c9:8b:d1:
bd:81:18:4f:db:3a:53:ac:dd:d3:f9:de:3f:ff:e0:
19:ac:35:38:26:69:32:61:0f:75:1f:38:c7:d5:4b:
2f:89:56:43:e7:24:a3:d0:42:93:39:4f:10:84:8f:
e1:d6:d9:1a:7f:ce:15:94:4a:34:df:9f:83:0b:b4:
aa:74:bc:c2:13:98:53:32:15:64:94:ce:23:7f:b4:
ce:97:5e:e2:3a:7c:83:2a:69:73:35:2f:c6:e9:10:
14:90:07:fb:bb:51:0d:2d:0e:3e:18:83:02:35:cb:
97:66:22:54:73:91:1b:50:6c:25:30:24:80:d8:50:
e3:1f:3f:71:92:92:7d:0c:a2:1d:34:3c:be:10:27:
45:f3:09:27:87:1a:ff:0c:12:b9:21:7b:57:8b:6f:
98:19:f7:6c:15:00:f2:6b:c4:dc:cd:21:53:b4:e6:
0e:72:13:14:29:5a:e6:18:62:6d:59:49:d3:70:99:
96:df:a3:da:6c:b1:d3:fc:bb:51:66:9a:68:3f:3a:
29:4a:5b:25:c1:e9:72:c9:4c:50:96:06:3a:e5:d4:
34:14:4a:ff:75:7d:09:df:4b:0a:e2:82:a8:06:a9:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:A7:15:7C:92:E4:5D:40:4B:04:E6:C5:32:3E:38:AA:D5:22:7C
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/6nWnFXyS5F1ASwTmxTI-OKrVInw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.64.0-194.92.73.255
IPv6:
2a0a:3a40:1001::/48
Signature Algorithm: sha256WithRSAEncryption
2d:0c:a9:d1:67:7f:b3:1a:a0:81:0b:76:d3:f9:a9:c7:66:8d:
eb:9b:c7:e0:25:0d:55:c5:00:05:b9:4b:45:7b:80:d8:cf:3c:
dc:8e:22:18:c4:c7:c5:49:7f:4f:cc:1a:7d:0c:b0:9a:4c:58:
af:b8:54:52:2d:d7:12:cb:d7:2c:68:16:a3:a0:d6:b2:06:68:
8b:e9:ff:d2:5e:7d:66:e3:8d:20:5d:43:b6:88:b6:15:07:0d:
4b:eb:1f:9b:53:d8:23:c5:5b:61:41:ee:2e:4a:4a:79:8b:ff:
8e:b6:58:48:f7:a3:0e:9d:50:c7:5e:4d:50:37:e8:de:c2:70:
e2:df:f6:7b:3c:c9:7b:30:57:21:f4:00:d3:2f:b4:e2:c6:60:
60:ac:e1:4d:51:55:42:90:63:c6:30:fe:ee:5f:47:1d:86:89:
09:81:d6:a9:28:6d:69:8f:d5:92:4f:ac:ab:6f:0e:d7:6a:76:
7d:6d:e3:15:f5:b6:01:d6:d1:75:e0:c8:de:11:e2:95:54:78:
75:cb:ae:97:03:ab:2d:c8:05:e1:b2:49:a2:96:05:16:0b:f8:
16:80:e0:0e:c6:2b:da:37:cb:69:85:dc:64:30:4c:89:39:88:
c3:e1:96:8d:f8:68:ea:78:19:e7:41:28:58:54:5f:bc:06:7f:
25:8c:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:44 2025 by rpki-client