Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa
File: 6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa (raw, json)
Hash identifier: iJ+ODuzSS+eoKFDYbDz9e9c9YTvR+yNB1U32FzztfQg=
Subject key identifier: EB:EE:F5:86:C7:CD:ED:28:3D:4A:A7:0D:EE:28:F9:61:D7:78:BF:16
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 01942748399540789D5CD1D8A6EC3DA69107
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3215
IP address blocks: 193.26.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:39:95:40:78:9d:5c:d1:d8:a6:ec:3d:a6:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebeef586c7cded283d4aa70dee28f961d778bf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:6b:62:45:c9:76:61:71:4d:39:ed:c2:10:
4b:4e:a9:9a:da:3e:51:c4:7d:a8:91:45:15:5a:49:
0f:61:73:4b:e0:18:cb:70:77:1c:ab:a8:d1:72:88:
64:99:8f:4c:1a:14:60:b9:72:c5:08:ac:7a:2b:b2:
79:8e:3d:f5:d4:a7:08:70:21:9d:d7:02:b1:91:3b:
2c:b6:4c:ca:05:00:5a:7c:55:9c:e7:52:7a:e2:b8:
99:ca:35:cb:8d:d5:59:83:57:e1:7b:8f:b4:d5:53:
f0:5b:a8:a9:20:cc:e9:07:1f:39:9d:30:8a:5d:4d:
87:c0:6a:da:63:6a:12:fa:1e:84:fd:5d:6a:39:85:
c9:8d:8c:3a:1a:70:1c:73:98:eb:da:eb:96:8f:ca:
e2:0a:a4:c9:7d:f8:b8:e0:ed:49:ae:a6:00:dc:5d:
fd:11:bd:6e:c2:41:bf:25:0a:81:43:02:2b:4e:cf:
b6:8c:ce:98:35:19:97:49:88:85:89:2c:8b:f2:29:
5b:63:17:82:96:1c:7f:69:12:93:da:18:d7:e6:6c:
b9:0e:d4:10:2c:a4:bd:33:6b:33:78:7f:47:23:fd:
a7:23:af:dd:02:f1:f4:c4:6f:1e:d7:6d:e0:2d:c6:
56:01:16:c1:84:28:62:6c:89:b7:a6:45:f9:e9:59:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:F5:86:C7:CD:ED:28:3D:4A:A7:0D:EE:28:F9:61:D7:78:BF:16
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/6-71hsfN7Sg9SqcN7ij5Ydd4vxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.29.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ce:30:dc:0d:d5:63:c8:72:45:29:fc:f8:08:29:1f:70:7d:
f4:e0:55:72:32:06:34:d9:1a:d1:8d:25:b3:76:a9:7e:2a:a0:
0e:6f:78:fe:9b:f5:ae:bb:36:36:06:a2:8d:ce:2f:88:43:c0:
56:f4:a6:82:63:fb:eb:04:bf:6c:30:44:3e:00:28:6c:e2:3b:
f1:d0:3b:a2:76:d7:09:41:c0:45:8b:29:9e:eb:d1:24:87:88:
f3:35:ae:2f:85:5b:19:79:66:4c:c5:d6:24:fd:c8:66:e1:e3:
63:d1:ce:29:62:d9:fd:48:a6:0e:91:65:d4:1b:61:59:99:fa:
75:74:54:95:93:e7:5a:7b:f3:25:c4:47:dd:7e:ff:f4:68:37:
70:14:63:14:34:b9:3f:81:8b:9b:13:01:3e:0e:ad:4f:5b:36:
2f:75:a5:7e:2f:84:88:09:4f:f1:ce:7a:8e:e2:5f:5e:fe:4b:
43:ad:40:12:be:0c:f8:3f:57:72:4b:7e:89:c7:43:c4:03:e6:
8f:2e:3b:b3:9a:ce:ee:44:42:8f:f6:da:a2:c5:3c:3f:ed:36:
28:c9:44:15:f4:07:58:fc:58:ca:de:35:10:78:9d:1b:d1:dc:
1f:77:8a:9b:76:c2:16:04:86:91:a7:b8:3d:fa:54:48:38:fe:
32:6d:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:32:17 2025 by rpki-client