Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/6GUg_eGgnlwGaZPq01uGg5LgvFA.roa
File: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (raw, json)
Hash identifier: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=
Subject key identifier: E8:65:20:FD:E1:A0:9E:5C:06:69:93:EA:D3:5B:86:83:92:E0:BC:50
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 01942143F1B9AC149FFF7A4472AF3A05CB96
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/6GUg_eGgnlwGaZPq01uGg5LgvFA.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57317
IP address blocks: 185.134.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f1:b9:ac:14:9f:ff:7a:44:72:af:3a:05:cb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e86520fde1a09e5c066993ead35b868392e0bc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:f7:e7:d7:6e:0b:f9:11:0e:d8:6b:e7:12:
ba:cd:82:6f:85:e3:d0:fb:66:3c:c1:ce:83:34:8f:
de:0a:3b:d8:31:33:09:92:e1:88:26:79:cf:be:46:
f3:46:5a:ca:46:f1:94:15:4c:a8:48:33:4b:fc:df:
8f:ae:b6:fd:ac:13:34:f9:5c:1d:ab:5b:68:81:1f:
46:27:4f:d9:18:c1:ba:19:95:76:63:23:0e:06:2d:
10:3a:52:30:aa:4f:fa:46:fc:f2:09:fa:c8:b6:87:
d7:81:6c:a5:4d:7b:34:15:13:a9:a3:22:2b:b3:e2:
67:6a:b3:ad:7f:ef:3c:c0:ac:28:d8:f7:25:33:a2:
4c:b9:82:e2:e5:9a:90:5e:7e:9a:9c:1f:96:65:01:
22:73:cf:70:1f:6d:4f:29:5e:eb:06:db:45:d6:21:
47:6d:62:56:69:ff:94:ea:85:af:26:f9:9e:5b:04:
c8:43:c0:7d:f2:3d:a1:2a:97:7a:63:21:92:c3:e4:
9c:9d:ff:d8:8e:13:4c:8e:13:2d:86:e1:fe:9c:56:
e7:df:db:09:c2:9e:52:9e:72:b9:c4:05:bb:52:d8:
d5:e2:9b:f3:32:fe:c3:78:e8:7d:b9:14:96:a1:70:
67:3b:1a:c8:94:b8:e2:e3:9a:1f:23:f3:6e:58:0f:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:20:FD:E1:A0:9E:5C:06:69:93:EA:D3:5B:86:83:92:E0:BC:50
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/6GUg_eGgnlwGaZPq01uGg5LgvFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.242.0/24
Signature Algorithm: sha256WithRSAEncryption
83:62:70:aa:78:c7:53:09:ee:ce:de:a6:8f:f2:af:99:20:44:
b2:ac:97:51:54:74:e9:e0:7b:5a:01:ad:73:b1:70:35:41:c0:
e5:3a:0e:74:26:03:2b:76:f4:89:d5:2b:9c:f0:3d:dd:2a:f3:
1a:b0:e6:20:04:31:3d:82:40:8d:ae:a1:ef:9c:d1:21:d4:b1:
1a:c7:c5:4e:3c:b2:1c:26:7c:13:b1:bb:05:6f:cd:62:1e:55:
fe:fd:e8:3b:f7:3c:e1:24:e5:68:44:ee:cc:0c:1b:09:6e:c5:
43:d0:5e:e8:6d:3b:e6:49:ed:33:c8:cc:69:18:9d:c3:44:3e:
b1:04:e1:9f:81:77:a5:8e:0a:5d:11:4c:ae:3d:db:4c:66:28:
d0:d9:39:92:4a:7e:ce:f2:e0:bd:34:20:83:fa:aa:7d:8d:7d:
ec:ad:b7:fc:39:44:ba:58:9b:4f:09:6e:5b:00:1a:af:d5:19:
ef:dd:30:cd:a0:3e:e3:6f:c8:3a:90:5d:8c:be:8a:b3:14:ac:
fa:cd:47:47:1b:91:7d:67:98:31:14:e9:8e:cc:ee:51:97:a9:
6b:2d:17:e2:80:35:b6:54:94:db:49:a2:ac:08:c0:db:15:bc:
39:84:4f:d9:d7:c3:51:aa:bf:ed:d9:e1:2c:9f:20:40:1d:3a:
3a:2f:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:11 2025 by rpki-client