Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/G6m36SSucA1UgGO9o5M5kLYkkg4.roa
File: G6m36SSucA1UgGO9o5M5kLYkkg4.roa (raw, json)
Hash identifier: eR6QiaUE2YBEvPQTI4qKJi+HqbeIzWqvNHB7ykDHvY0=
Subject key identifier: 1B:A9:B7:E9:24:AE:70:0D:54:80:63:BD:A3:93:39:90:B6:24:92:0E
Certificate issuer: /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial: 0194258EF7BF5D6AAE21500E3EFE17FF4006
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/G6m36SSucA1UgGO9o5M5kLYkkg4.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41617
IP address blocks: 195.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f7:bf:5d:6a:ae:21:50:0e:3e:fe:17:ff:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba9b7e924ae700d548063bda3933990b624920e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:48:5b:0e:7f:27:79:e3:63:b7:97:ac:59:
b1:69:6d:1a:09:c3:d0:5a:a0:74:cb:99:ed:88:f6:
85:46:bf:89:ec:d6:6c:03:ef:c3:37:73:f4:03:7d:
c2:85:19:1d:c4:42:18:3e:ea:e5:82:64:02:35:fc:
5f:5d:c2:01:6d:38:46:7f:39:2d:36:d2:30:bc:6a:
ec:51:97:b5:ea:f1:c6:88:ad:b7:ba:f5:ab:2e:ff:
a2:84:29:01:37:cf:16:62:d3:da:ca:6d:84:d7:2d:
6f:92:87:a7:b3:96:e8:67:69:a7:a7:f1:a0:f9:8c:
11:f5:3d:fc:53:de:3f:1a:91:41:7a:5a:e0:8c:a6:
18:aa:a6:33:06:69:1c:4a:98:ea:a6:cc:84:69:96:
1e:7d:14:18:2e:b7:9a:5a:e6:1c:fb:46:aa:10:d6:
e2:2f:a7:51:ea:6a:9f:c2:8b:89:69:ef:1d:95:38:
6c:e9:a1:f1:cb:f5:e4:4b:d8:e0:53:5d:2d:e4:f9:
de:4b:30:50:4a:44:76:54:ca:c3:38:d8:11:53:9c:
73:5b:14:1a:c9:fc:a6:00:1a:3b:d2:ca:ff:f6:d2:
21:71:9b:e1:5a:49:af:b0:9e:a0:ad:ab:39:21:f4:
3b:39:d2:65:86:5c:26:f0:d1:88:de:b4:dc:f3:b3:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:B7:E9:24:AE:70:0D:54:80:63:BD:A3:93:39:90:B6:24:92:0E
X509v3 Authority Key Identifier:
keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/G6m36SSucA1UgGO9o5M5kLYkkg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:56:13:05:82:7d:3c:2b:ca:96:ae:bd:0e:d3:20:74:b6:d4:
4e:8b:40:1b:0b:86:73:92:80:cf:fb:57:5c:19:fa:9c:a0:2f:
a0:96:f0:68:3b:2d:fe:79:e4:8e:89:2a:37:72:d1:40:d9:f5:
9a:51:11:d4:2f:eb:d2:64:eb:a6:ca:d0:37:e2:e8:5a:66:4e:
14:ad:ba:c5:46:92:3d:ee:0a:6b:bd:41:a9:40:c7:12:7b:98:
8b:11:29:b3:94:5e:3e:36:a7:f3:22:71:27:fc:e9:42:06:28:
af:a6:c7:d7:c1:a4:34:ab:aa:da:d8:ec:59:ed:f6:b1:00:32:
87:8c:f7:dc:f4:3e:20:87:8f:8a:f6:ce:bc:56:00:ee:42:8f:
55:20:75:9c:51:58:ea:a8:ee:10:b7:43:05:16:00:08:bf:71:
ba:34:33:0c:ba:b5:7c:11:58:54:ed:65:76:3e:3a:2c:66:82:
61:0c:e1:5a:9f:9d:5d:af:81:41:5a:0e:33:aa:e0:b6:9f:2a:
25:57:89:bc:ce:fc:c5:2f:ed:4f:4b:dd:69:56:cb:7e:97:66:
3c:86:dc:e1:75:84:80:69:ec:95:f1:56:a4:08:f2:3d:7f:bc:
61:68:c1:47:d4:2f:13:52:74:79:72:b9:03:17:7c:92:71:5e:
b4:0c:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:43 2025 by rpki-client