Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/6BQqkGrM3gw54Pj0HSmQY8wMCck.roa
File: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (raw, json)
Hash identifier: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=
Subject key identifier: E8:14:2A:90:6A:CC:DE:0C:39:E0:F8:F4:1D:29:90:63:CC:0C:09:C9
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019426D915C4BB20AB9B63B101315FC03F3E
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/6BQqkGrM3gw54Pj0HSmQY8wMCck.roa
Signing time: Thu 02 Jan 2025 11:49:08 +0000
ROA not before: Thu 02 Jan 2025 11:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207346
IP address blocks: 185.242.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:15:c4:bb:20:ab:9b:63:b1:01:31:5f:c0:3f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8142a906accde0c39e0f8f41d299063cc0c09c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:ab:61:85:84:36:2c:b2:e3:41:bf:2e:92:
b8:cf:c7:6d:e1:9d:76:b8:1a:77:7c:cd:2e:de:dd:
f3:f7:b2:e1:f2:57:f2:63:26:33:e2:9d:7d:f1:7e:
9e:37:07:d4:4d:46:50:eb:7a:95:be:ce:08:0d:e1:
59:36:8f:c1:37:26:a4:bd:40:4c:2b:04:06:03:4e:
e7:f0:3e:02:29:5f:d8:e3:f0:ba:25:f2:e3:d4:a3:
34:f2:f7:25:b6:65:59:e2:86:d5:1b:aa:18:02:5e:
b1:ab:72:2d:2d:4d:fc:fc:d3:09:0f:c2:a2:50:3e:
a8:25:d2:45:ae:66:dc:98:4e:7d:7e:0c:3c:3c:cf:
16:58:c6:45:ea:d5:e3:55:b3:1c:b4:a3:60:f0:c7:
86:4f:b2:67:23:7c:b2:64:42:dc:98:de:04:49:9c:
9a:4e:ab:d9:bd:1f:2d:3a:a8:5f:ef:b4:68:90:8f:
0f:6e:3b:32:e5:c5:5d:d7:45:90:5b:69:f5:df:02:
75:57:f9:02:5d:13:aa:e9:c7:9d:03:f1:49:a6:4a:
fd:17:e6:cf:ac:71:2f:ea:aa:1e:74:13:b8:5a:83:
85:c6:2d:83:cb:a8:b2:81:41:42:43:b3:e9:dd:d2:
2d:5b:3d:d0:e2:1e:4a:45:a4:2e:37:20:5d:ef:b0:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:2A:90:6A:CC:DE:0C:39:E0:F8:F4:1D:29:90:63:CC:0C:09:C9
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/6BQqkGrM3gw54Pj0HSmQY8wMCck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.216.0/24
Signature Algorithm: sha256WithRSAEncryption
91:61:34:30:10:36:2e:2f:62:cd:8a:90:7f:b7:1c:b5:8c:27:
1b:2e:fb:d4:78:18:3f:dd:c7:35:82:e3:6c:ae:a5:02:22:a4:
eb:e0:3e:dd:be:c8:44:3e:5f:64:9f:de:64:b7:16:7a:4b:75:
d5:63:ca:99:d3:89:bb:17:08:32:c0:1c:78:11:be:2b:53:37:
7f:53:0e:32:0a:57:91:33:77:b7:d5:fe:32:2c:8a:0f:25:e6:
66:ab:e4:20:70:b4:fe:ed:de:aa:a4:44:d3:cd:18:92:74:de:
a9:99:79:c2:4d:0b:95:bc:fc:a1:06:5b:17:e6:95:41:64:c6:
e6:71:6d:1b:a7:39:b3:a2:c9:7a:57:e5:93:9b:d4:70:cb:f1:
61:fb:7e:3c:5c:46:0a:3e:40:f5:1d:fe:28:95:0b:f0:2d:be:
5e:3f:25:78:9a:13:d9:ef:2d:27:21:61:ac:e7:0a:9a:90:95:
5d:6a:81:05:d3:1c:db:39:3d:55:e9:ef:28:cc:8f:37:a2:46:
31:c7:35:69:f3:55:5f:e3:9f:20:80:8d:48:71:28:3c:01:97:
43:4e:ed:df:8a:fa:73:49:44:13:a6:fa:62:46:07:a5:6f:5a:
89:27:f9:6e:23:29:07:4b:c3:1d:d1:43:9c:68:99:fa:45:71:
71:de:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:11 2025 by rpki-client