Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa
File: 6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa (raw, json)
Hash identifier: WRnwpfl8kuTVj7apaEiYFn6tm3l6ZkpWo7ENQmbJBXw=
Subject key identifier: EA:F3:15:9B:6C:E3:1E:74:BA:8D:61:AF:8F:F2:4F:04:FA:08:7A:34
Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial: 019428231E33A716EF2818D5CE7D7B8C1968
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa
Signing time: Thu 02 Jan 2025 17:49:37 +0000
ROA not before: Thu 02 Jan 2025 17:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48450
IP address blocks: 94.247.64.0/21 maxlen: 21
94.247.64.0/22 maxlen: 22
94.247.68.0/22 maxlen: 22
185.123.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1e:33:a7:16:ef:28:18:d5:ce:7d:7b:8c:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Validity
Not Before: Jan 2 17:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf3159b6ce31e74ba8d61af8ff24f04fa087a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fe:21:36:ed:0c:ef:8a:60:1c:bb:ba:04:5d:
d7:78:0a:03:37:b8:59:1f:5b:e2:d2:77:82:58:99:
38:3a:f2:91:55:af:7a:c9:8e:dd:65:1f:31:15:02:
f7:c0:ca:d3:b2:e6:76:45:09:6f:10:a9:13:f9:02:
96:25:98:bc:5a:64:ac:4f:a3:0d:62:0f:9e:9e:ca:
bd:e1:09:37:68:bb:36:d2:b4:48:5a:fd:42:39:6a:
bc:34:77:ae:03:47:00:4a:cb:ec:e2:ac:89:90:4f:
78:ee:60:22:96:18:02:c1:0c:ef:fa:1e:90:23:28:
07:ab:b0:d4:87:dc:14:31:8f:40:98:21:3f:fc:c6:
47:da:d6:4c:d2:53:4c:93:46:0f:b0:d1:fb:41:1d:
76:a2:7b:06:28:94:94:dc:a2:7b:12:d6:b1:67:6c:
d8:f0:e8:29:a4:8e:47:0b:cb:d2:43:16:0e:eb:b9:
56:be:62:db:97:2f:11:6c:2a:2c:27:03:eb:34:b2:
ef:d1:2c:dc:8b:b7:3f:a1:2d:1d:2b:78:d4:0e:fe:
ab:94:4d:bd:72:06:fc:55:0e:18:74:05:22:9c:7f:
57:eb:31:ba:01:2f:30:e7:57:5a:85:30:6a:18:55:
28:89:0e:d3:35:a5:cb:d7:33:18:c5:fd:0a:5a:3b:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F3:15:9B:6C:E3:1E:74:BA:8D:61:AF:8F:F2:4F:04:FA:08:7A:34
X509v3 Authority Key Identifier:
keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.64.0/21
185.123.16.0/22
Signature Algorithm: sha256WithRSAEncryption
47:9f:ed:3a:bf:9e:07:96:5b:0e:44:bc:3b:05:c2:f3:7f:f0:
ee:e1:03:9e:c0:da:6c:69:eb:90:12:41:10:6c:10:f1:71:4c:
7b:67:28:a9:6f:d6:60:19:85:ea:be:f8:86:e3:bb:e0:84:67:
c5:2b:c5:07:eb:35:1a:86:db:7e:5e:ac:2a:a0:46:8e:11:b7:
47:63:0b:f4:2e:58:27:0a:fa:5d:20:c4:82:6d:b4:27:54:76:
da:d9:c4:78:9d:a1:b7:c8:8f:99:aa:df:35:58:9c:1a:9d:6c:
4f:76:9d:9d:a5:7d:26:82:13:9f:1a:d3:30:8b:9c:ab:a6:fc:
4e:d2:c6:1b:3e:18:0d:21:4a:10:ea:ca:65:1c:23:e9:59:b5:
1b:26:09:24:4f:56:a9:5a:d3:d0:fd:c5:5a:b4:2f:9f:33:76:
1a:f1:e5:5b:7e:d2:5b:b5:c8:8e:f2:c9:50:26:72:79:79:b3:
d3:9e:d3:9c:c0:cb:3b:19:43:f9:39:4d:50:4d:f1:10:5e:50:
d3:ce:72:f9:a7:ec:b8:58:7c:46:cf:d9:79:63:62:80:1e:35:
16:a7:d0:20:4c:b6:c4:07:45:9f:0d:d5:4d:65:4e:2f:ea:da:
50:d7:1f:ae:c3:9f:76:f5:ea:9a:ee:46:cd:5b:5c:dc:b6:cd:
6b:99:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:41 2025 by rpki-client