Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/6rs7i3vA94rQ8ebECLSNNJ1ESvE.roa
File: 6rs7i3vA94rQ8ebECLSNNJ1ESvE.roa (raw, json)
Hash identifier: E52tMvrdTBTqcv+jQmW0VQSoDf/CVyZpK9bOXVZ3Rw0=
Subject key identifier: EA:BB:3B:8B:7B:C0:F7:8A:D0:F1:E6:C4:08:B4:8D:34:9D:44:4A:F1
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01942748500D00898ADAC6E634DBF1F2EEA2
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/6rs7i3vA94rQ8ebECLSNNJ1ESvE.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33951
IP address blocks: 91.193.96.0/22 maxlen: 22
95.175.0.0/19 maxlen: 19
193.239.206.0/23 maxlen: 23
194.63.132.0/22 maxlen: 22
217.11.135.0/24 maxlen: 24
2a04:1200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:50:0d:00:89:8a:da:c6:e6:34:db:f1:f2:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabb3b8b7bc0f78ad0f1e6c408b48d349d444af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:66:75:5f:eb:7e:29:be:a9:f0:6f:22:eb:
41:de:ec:39:98:b9:ec:5e:69:54:1a:6c:3f:22:12:
33:64:4e:fd:56:69:36:4f:90:98:3a:9c:f1:b0:e9:
96:75:97:18:71:fa:84:a4:fe:60:f8:a5:4e:dd:9a:
47:82:8e:30:41:25:36:a8:b1:12:d0:c1:b2:11:a5:
0d:e8:6c:39:74:b7:96:5e:3a:47:c1:b0:1d:2f:a6:
bd:9c:97:60:1d:03:52:0a:fb:a9:e9:76:ce:37:5d:
a9:12:c0:44:f7:6c:65:fc:b0:ea:40:58:c9:48:2f:
f2:f8:34:b7:32:a9:96:c6:d7:a5:b5:b0:39:53:1d:
09:82:a7:d2:22:75:75:19:4a:ce:4b:e2:b0:51:0a:
3e:b8:4f:60:28:e3:74:97:e1:f8:0d:b9:a6:24:4a:
1d:b1:dd:ce:b6:0c:fc:4c:44:50:4b:c5:a8:cf:85:
90:46:ac:d4:18:17:de:8b:7a:74:59:42:ac:43:82:
2c:b2:db:cb:1a:27:02:83:d7:0d:b9:a8:b0:66:bc:
e0:1c:00:1f:a6:37:43:16:3a:11:64:1e:27:53:90:
7a:db:26:03:ee:a1:ec:ac:49:48:78:09:ea:46:96:
59:5b:ca:db:0d:68:b7:aa:8b:df:ab:ce:fd:dd:55:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:3B:8B:7B:C0:F7:8A:D0:F1:E6:C4:08:B4:8D:34:9D:44:4A:F1
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/6rs7i3vA94rQ8ebECLSNNJ1ESvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.96.0/22
95.175.0.0/19
193.239.206.0/23
194.63.132.0/22
217.11.135.0/24
IPv6:
2a04:1200::/29
Signature Algorithm: sha256WithRSAEncryption
46:28:bd:66:bd:51:75:6f:8d:eb:d4:b2:86:8e:f9:8b:ec:1b:
c6:5f:ec:3c:15:4f:81:30:23:52:ee:05:a1:2f:9a:04:4a:3a:
8f:da:21:0b:bd:5b:eb:db:00:07:97:51:35:26:64:43:d3:e2:
d5:c8:f1:56:3c:4b:75:bc:df:6f:e8:9d:5a:df:12:d1:83:65:
14:91:6b:95:a8:83:8b:b4:cf:56:fb:96:13:95:f4:45:e6:4e:
25:1f:56:00:1b:de:5c:bd:68:40:11:8c:e8:41:74:71:50:c7:
df:be:92:7f:12:2e:14:27:20:24:62:87:e1:85:e3:43:c9:33:
72:0c:90:f8:17:21:50:86:9c:7c:96:58:cc:c5:21:88:0d:a5:
d7:bb:1a:72:96:91:1f:9d:f4:01:1f:12:3a:5c:b5:66:4c:97:
44:ed:ea:39:75:95:6e:e3:87:ef:fd:07:35:8c:7c:42:2e:ab:
4a:b2:63:3b:75:17:46:e3:c2:b1:71:54:fe:2a:fe:f5:3c:f3:
86:2b:50:24:6f:37:c2:78:1a:fe:41:4e:cb:70:a6:8c:12:ae:
a1:d4:33:60:af:3b:09:45:c6:48:c7:6b:ad:ea:36:92:38:d8:
b4:39:e3:df:42:93:ae:85:09:6a:75:b3:81:0d:3e:2e:e2:b0:
68:d5:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:28 2025 by rpki-client