Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/6bKOaNTOD26M5DPQmaAIN6UyW0c.roa
File: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (raw, json)
Hash identifier: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=
Subject key identifier: E9:B2:8E:68:D4:CE:0F:6E:8C:E4:33:D0:99:A0:08:37:A5:32:5B:47
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 019423D730F3540A192A58080E0D669F3411
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/6bKOaNTOD26M5DPQmaAIN6UyW0c.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39048
IP address blocks: 193.176.92.0/24 maxlen: 24
193.176.93.0/24 maxlen: 24
193.176.94.0/24 maxlen: 24
193.176.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:30:f3:54:0a:19:2a:58:08:0e:0d:66:9f:34:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9b28e68d4ce0f6e8ce433d099a00837a5325b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:12:ba:4e:66:3e:40:cd:75:1c:27:e7:86:
8c:33:94:a0:df:1d:85:86:88:ff:d7:35:5b:dd:24:
10:f9:cd:5d:f9:b2:92:a7:43:c8:a8:59:12:d0:86:
fa:e6:c6:28:8d:d8:7e:51:51:c3:1a:ec:73:39:e1:
8d:4a:2f:9f:bb:ff:83:11:c4:25:4a:5d:f7:08:5f:
c6:b1:5c:b9:ed:df:00:67:b9:19:36:c7:15:4c:f8:
e7:1c:8e:83:5f:b6:4c:c9:4e:61:1d:4e:95:4f:53:
89:e9:a8:fa:57:f9:29:b1:6f:28:a5:13:a7:e5:35:
b4:8e:89:1b:64:37:36:11:36:50:d1:14:7f:5c:7c:
bf:12:33:95:39:1e:8f:05:bc:54:c2:96:4b:2b:2f:
55:b2:56:89:f8:88:5a:fb:27:ad:4f:47:2a:5f:f9:
ef:50:2b:09:16:c7:4b:50:ce:93:1d:06:96:24:a0:
73:b7:2c:ac:b3:16:6d:44:bd:c1:b2:b0:78:23:8d:
e1:5b:65:f1:df:88:84:87:b2:a3:ea:2b:99:1c:52:
0c:09:d6:2c:79:50:cb:f1:3b:97:ac:b1:96:e7:7f:
a8:f7:6c:21:66:51:6f:47:57:5e:4a:f7:e1:98:a7:
f4:ca:e9:5c:01:40:f8:f1:5c:f8:93:ad:bb:20:a6:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:8E:68:D4:CE:0F:6E:8C:E4:33:D0:99:A0:08:37:A5:32:5B:47
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/6bKOaNTOD26M5DPQmaAIN6UyW0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:fc:7d:89:58:1c:68:3e:d3:50:8a:db:c0:4b:ef:22:a2:e7:
28:dd:23:99:8a:07:4d:fd:b0:ef:21:7d:a1:2c:e5:41:7c:6d:
30:8a:e0:ed:c0:55:cd:99:f0:f9:19:cb:e7:2a:36:ab:ef:49:
03:0a:02:71:db:ce:62:5b:51:51:e6:35:f5:ca:4e:03:b9:d1:
4a:1b:84:44:0d:37:38:07:10:be:17:e7:65:8c:6a:95:bf:e6:
cf:a9:6d:ed:f0:bb:53:2b:f5:cc:5e:23:c5:28:1f:d0:c4:69:
f1:0d:9b:10:32:61:06:71:65:7c:8c:b3:5b:53:31:29:6e:ad:
a0:60:0a:48:88:69:64:ed:cb:2c:9e:72:13:c4:e1:a3:bd:71:
5c:f2:26:bc:ec:93:f6:b8:be:2f:18:34:da:21:9c:53:f4:c9:
74:d3:0c:f5:5a:59:44:90:a0:1d:37:75:a7:7f:d1:4d:1e:06:
ad:9b:41:fd:c4:cd:b9:df:f0:72:16:c5:cf:0c:11:7b:e1:96:
2e:b1:ad:80:ae:27:db:a2:fc:02:80:ca:5c:85:18:66:63:60:
26:0f:a8:56:89:c2:a0:52:96:93:2a:22:1f:c0:98:22:50:f7:
87:eb:f4:6f:e2:e1:d8:3b:60:27:5a:c2:a6:8b:05:e1:f9:fe:
03:7e:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:20 2025 by rpki-client