Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/1-9DbJi5jE57Pl5jrqPEth8zWTyI.roa
File: 1-9DbJi5jE57Pl5jrqPEth8zWTyI.roa (raw, json)
Hash identifier: FEmrD915t2x/Bvixygwv8jPDu1w/tggDREyxGYTpkL8=
Subject key identifier: FB:D0:DB:26:2E:63:13:9E:CF:97:98:EB:A8:F1:2D:87:CC:D6:4F:22
Certificate issuer: /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial: 0194258F43C854B116852A88A48C332CC434
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/1-9DbJi5jE57Pl5jrqPEth8zWTyI.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9063
IP address blocks: 185.53.156.0/22 maxlen: 22
2a02:2c60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:c8:54:b1:16:85:2a:88:a4:8c:33:2c:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbd0db262e63139ecf9798eba8f12d87ccd64f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:bb:64:9a:76:d1:1a:07:d3:cd:0a:30:ee:
d0:eb:45:21:b9:24:99:bd:99:65:fa:9b:27:bc:c6:
fb:4e:ad:be:a3:91:c0:87:73:a1:7b:2f:5d:17:7b:
4f:32:33:e5:ae:f5:e6:b0:3f:69:bd:af:bf:63:b2:
15:c3:b5:23:36:8f:ee:6c:dd:48:93:4a:61:74:cb:
56:a0:f8:f1:b6:22:b8:0f:50:f9:6a:96:42:fa:1b:
79:93:8d:64:5a:02:e7:d5:81:c0:4a:e6:29:da:cd:
35:0d:47:8d:de:e8:11:d4:12:37:d7:76:42:d9:14:
99:86:64:0e:74:10:dd:f2:0d:bf:77:34:82:b3:ac:
23:e9:48:b7:44:e1:35:96:f4:aa:6a:9c:d5:ef:6c:
4e:91:43:cc:56:0e:91:82:3c:6e:76:c5:24:57:6c:
d9:85:44:0c:02:3f:6b:1d:53:45:c6:27:be:71:1d:
d4:5b:e2:2f:c7:fd:5d:09:3b:68:74:3c:cc:65:30:
d4:da:ec:c4:e2:64:23:f3:24:df:4f:b2:ad:89:3b:
bc:51:b4:45:99:16:77:28:98:0a:79:7d:98:9d:26:
e5:20:60:1d:a9:69:12:a1:e9:63:a2:43:18:a6:f1:
f7:24:9f:c9:a2:b8:20:79:83:2b:a0:31:9a:71:f5:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:DB:26:2E:63:13:9E:CF:97:98:EB:A8:F1:2D:87:CC:D6:4F:22
X509v3 Authority Key Identifier:
keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/1-9DbJi5jE57Pl5jrqPEth8zWTyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.156.0/22
IPv6:
2a02:2c60::/32
Signature Algorithm: sha256WithRSAEncryption
05:75:d0:8a:39:bc:3b:3e:3b:64:8e:77:d7:d3:81:35:65:43:
49:e2:5e:30:fa:ab:74:16:45:0f:50:9e:67:1c:2b:00:a8:d3:
0c:c3:43:36:d5:5b:ea:28:0e:c3:e4:f4:c6:66:59:b5:75:1b:
fc:6c:01:b4:17:bb:6d:de:a1:83:7d:16:8c:cf:03:86:8e:89:
ad:a8:54:1a:3c:aa:37:15:be:37:be:1a:be:f6:20:88:a3:94:
f5:cb:3f:70:db:86:8d:13:f3:86:e5:35:bd:d6:1a:26:86:6a:
b2:8d:46:0a:5c:f5:3d:0d:a5:4c:1e:ee:29:e6:17:6f:51:94:
75:70:87:01:f0:e4:ee:95:ea:9c:46:ba:ff:ca:cf:43:18:01:
a6:94:d3:5c:83:f8:13:d0:3e:79:e2:8b:37:b9:06:a0:67:bb:
f8:7a:17:3d:b9:66:75:14:23:d3:27:21:e1:4b:12:f6:8d:89:
40:22:a6:e1:37:fa:1a:58:3d:9b:be:bc:eb:0b:21:0e:3d:c4:
46:24:a2:f9:45:36:c5:3e:b5:15:88:4a:73:59:4d:18:89:78:
d4:38:03:e6:00:10:9a:18:14:09:65:f5:1a:cc:56:41:3a:43:
a6:da:13:93:8c:0b:48:b8:f0:ed:a4:b3:cc:c3:ed:df:9b:19:
fe:8b:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:30 2025 by rpki-client