Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6OvmO88KKOc8CtrkvPzsR6MSEKs.roa
File: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (raw, json)
Hash identifier: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=
Subject key identifier: E8:EB:E6:3B:CF:0A:28:E7:3C:0A:DA:E4:BC:FC:EC:47:A3:12:10:AB
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61C1B18AF200D38A1721F076E93FA
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6OvmO88KKOc8CtrkvPzsR6MSEKs.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206106
IP address blocks: 147.234.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1c:1b:18:af:20:0d:38:a1:72:1f:07:6e:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ebe63bcf0a28e73c0adae4bcfcec47a31210ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:3b:09:f9:3a:ee:eb:c8:1f:30:b4:cd:d0:
da:e2:3d:e0:e8:d8:26:eb:65:02:76:9b:61:57:33:
df:2a:33:6f:b8:e9:c8:4c:0f:f3:b1:d3:8c:fb:be:
b4:f4:bc:64:81:dd:ca:f4:19:5c:ca:9a:a0:08:a1:
38:a4:7c:f3:91:e1:95:c7:c8:d1:6d:cf:1b:56:26:
d3:84:4f:4c:fe:47:99:36:11:42:fc:52:6f:b3:f2:
a2:d5:1f:60:58:d4:a1:c1:f6:9b:87:ce:e2:4d:e1:
25:6f:f9:a1:6d:99:7c:e4:88:b5:67:d1:c4:6d:9f:
4d:d3:a7:de:25:72:df:4d:51:3b:14:66:33:d0:e0:
cf:97:a8:4b:ab:e0:3d:93:04:2b:dd:94:b5:05:e9:
b0:f2:f0:fd:f3:0b:a2:80:1d:70:6c:cd:81:c4:93:
82:0e:16:88:f7:20:bf:21:f5:a2:c7:03:94:6d:f4:
4a:56:58:de:58:85:5d:01:db:40:18:64:8f:4c:61:
a7:1c:88:69:8d:65:00:12:3b:15:96:44:cf:a8:10:
f8:2d:11:74:80:87:35:c2:54:49:67:2f:98:af:ef:
f3:79:28:d1:4f:14:ef:f4:0d:54:4e:73:bb:51:89:
3b:92:e0:ba:a3:57:d5:08:d8:10:a1:b4:8a:d7:cd:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:E6:3B:CF:0A:28:E7:3C:0A:DA:E4:BC:FC:EC:47:A3:12:10:AB
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/6OvmO88KKOc8CtrkvPzsR6MSEKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.52.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ce:dc:ce:e0:f3:b4:fd:38:13:f6:af:ff:42:34:98:b5:ca:
f1:67:7d:fa:37:13:69:00:24:bc:a7:9a:a4:d3:c1:20:ed:75:
1c:15:a8:f2:f6:07:94:0b:69:c8:c9:b6:fa:d9:5a:8e:34:e2:
05:e2:60:84:50:41:5c:69:3d:32:36:a1:18:6d:58:d4:87:94:
54:11:ca:05:b5:c6:61:ec:f6:7c:85:6d:80:7e:c8:9d:56:64:
01:1d:88:f9:24:63:42:37:26:0e:c5:21:b0:f7:62:b1:bf:b7:
a3:c1:6c:49:48:64:74:f3:63:6c:44:ab:ba:ff:52:ab:fd:e4:
cf:6d:3c:7b:4d:28:6f:ad:aa:32:9e:fe:94:88:57:37:e1:df:
33:2e:83:22:c8:ec:34:ca:59:8a:3a:6e:99:d5:68:1e:61:fc:
26:1c:9f:66:09:2b:2b:fb:b9:2e:69:0d:a3:b0:7f:a2:f6:fa:
39:0d:0a:32:88:04:51:e4:7e:59:37:32:71:3f:1c:2c:07:22:
5d:d7:b0:29:b6:e9:fa:ae:02:35:0e:c2:dd:6d:35:b8:19:ae:
ff:dc:75:4a:f1:f5:39:dd:dc:3e:3a:7d:32:f5:1f:69:1f:db:
a0:0b:74:c5:b8:85:c7:67:ea:dc:86:ab:2b:7c:d7:ef:64:d1:
90:d0:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:14 2025 by rpki-client