Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa
File: 6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa (raw, json)
Hash identifier: snOYWWn9LAXIRFMHKtV6wAS6uhRRwhXxfRK2VSExR1k=
Subject key identifier: EA:3B:C4:FD:71:E3:96:73:48:EB:E1:6D:08:F5:42:AB:46:26:B2:A6
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 019427B509AAFF8DF5038B0D434018A777C2
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa
Signing time: Thu 02 Jan 2025 15:49:23 +0000
ROA not before: Thu 02 Jan 2025 15:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200187
IP address blocks: 80.94.82.0/24 maxlen: 24
185.35.144.0/22 maxlen: 22
2a04:4fe0::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:09:aa:ff:8d:f5:03:8b:0d:43:40:18:a7:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 2 15:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea3bc4fd71e3967348ebe16d08f542ab4626b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:32:3b:68:80:19:1a:d3:e9:c8:dc:b6:f5:
31:04:7c:cd:2b:eb:e6:46:92:12:0d:03:dc:02:a0:
59:d7:59:b5:d9:8c:20:d6:ee:5d:40:77:c7:df:c4:
88:13:16:b4:16:14:dc:90:1d:8b:35:fb:07:23:b0:
80:74:d3:0a:a4:6d:f0:3e:d3:36:8b:20:c0:f4:b5:
74:3a:cf:33:3b:06:53:9e:89:57:1d:e6:46:0d:e8:
38:23:a9:85:e5:45:52:de:7b:d3:2f:ca:eb:1b:26:
8f:02:9d:31:6d:6c:f8:3a:44:0e:22:36:21:e2:23:
06:6f:85:93:3c:9e:9d:d0:52:95:75:29:7f:52:b2:
10:e9:fe:a3:9d:1d:d8:81:03:68:82:89:41:9e:44:
e4:17:83:60:a3:2d:05:01:7a:08:2b:79:0f:f0:85:
05:0e:e1:71:8f:d3:a5:e0:ad:60:f5:78:13:11:a1:
9e:7b:b9:73:46:bd:36:66:2f:7e:27:7b:b9:b0:af:
d8:24:23:35:22:19:e2:4b:3c:c1:8e:f0:f2:c1:57:
2d:3e:c7:bd:af:95:d1:ac:3f:d8:08:9d:ee:79:56:
37:53:f5:af:ee:39:36:65:68:f3:07:b8:9b:ee:ae:
04:7e:58:e5:3f:27:9d:11:d1:96:41:40:c0:a5:7c:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:C4:FD:71:E3:96:73:48:EB:E1:6D:08:F5:42:AB:46:26:B2:A6
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.82.0/24
185.35.144.0/22
IPv6:
2a04:4fe0::/30
Signature Algorithm: sha256WithRSAEncryption
6d:6b:15:26:54:ab:05:c8:53:92:9b:db:ec:87:83:bc:b3:e4:
fb:2c:86:d9:04:b2:4b:c3:fa:61:4f:27:65:0e:27:e3:58:8a:
bc:a3:6e:47:4f:de:e9:bd:e0:de:4b:de:f6:83:3f:1c:82:2b:
19:90:e7:07:11:c4:18:22:66:dd:ff:8e:c3:a4:59:b4:ee:70:
cc:4e:ad:e8:0f:6e:74:a1:c2:fb:c4:b6:07:a9:ab:88:98:19:
b6:85:94:fa:f7:e9:5c:94:e8:41:a8:ae:60:5b:52:f1:f5:f9:
fd:48:e7:c8:3e:8c:e2:3b:55:58:b5:80:c8:85:32:99:84:87:
1f:ce:32:0b:ad:f9:05:c1:2a:49:5e:5c:8b:0f:12:0c:d6:94:
da:18:4e:46:80:cc:28:50:67:ed:0d:03:f6:b6:e6:59:9e:46:
ae:94:53:90:20:08:df:6c:ab:4c:02:26:a4:93:29:e3:f8:11:
0b:e4:bf:c0:71:d8:d3:11:21:a9:94:8d:28:6a:cb:9c:a5:10:
d5:6c:f7:96:d3:a1:51:b3:fb:45:f1:63:a2:21:5e:31:9c:7c:
75:4a:46:70:a9:9b:ab:49:51:de:13:41:ac:8a:3c:9e:9b:f7:
ec:4a:be:84:32:8f:d1:15:2c:4b:57:0e:5f:1e:72:23:0f:e4:
4c:d2:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:23 2025 by rpki-client