Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/m6kbyX2dg432nJUP-6NvVSIYxH0.roa
File: m6kbyX2dg432nJUP-6NvVSIYxH0.roa (raw, json)
Hash identifier: aIsWuIVVngRIpyh7QOCWs+CucWSIsZOKV5R9kx2l9t8=
Subject key identifier: 9B:A9:1B:C9:7D:9D:83:8D:F6:9C:95:0F:FB:A3:6F:55:22:18:C4:7D
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C91812DB676C74D5B54BB3A62C4F9
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/m6kbyX2dg432nJUP-6NvVSIYxH0.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39906
IP address blocks: 77.104.192.0/18 maxlen: 24
81.92.144.0/20 maxlen: 24
94.138.96.0/19 maxlen: 24
2a02:da8:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:91:81:2d:b6:76:c7:4d:5b:54:bb:3a:62:c4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ba91bc97d9d838df69c950ffba36f552218c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:b7:ff:71:54:8a:7d:79:c2:35:5f:03:08:
60:d6:43:d8:74:21:03:b2:73:f5:21:e8:3c:ef:99:
40:29:0a:b3:51:a4:b2:b3:8c:3a:68:b0:8a:b5:10:
a5:8a:0c:2d:ff:55:b7:b0:78:5d:c8:4f:61:ae:c7:
00:f3:39:40:d0:43:29:d0:3d:22:0d:b0:7b:9e:90:
cf:02:d9:29:65:23:5c:85:05:f2:69:f8:fb:cd:3e:
eb:8e:73:9c:52:d8:de:61:9a:82:d4:98:32:42:55:
b4:02:07:ad:29:7f:2e:b5:e7:5d:3c:15:c7:d4:01:
d9:54:ce:ad:d2:f1:1a:f0:82:7d:80:56:74:15:2d:
16:55:9b:ac:dc:b9:0c:44:39:e6:86:65:fe:69:1d:
33:69:cf:dc:34:57:3b:c3:41:8b:c3:32:5b:15:55:
1d:e5:73:9a:17:45:47:b2:93:4c:71:c8:60:f5:34:
d4:72:1b:e7:ad:86:4d:f2:44:8f:46:45:58:da:71:
13:74:61:39:82:69:f4:29:01:b2:c8:25:7a:d3:a7:
74:87:3f:22:92:71:47:ab:87:7e:a5:a4:5b:f8:53:
fe:00:95:bd:41:b7:e8:fb:ed:1a:76:b9:8d:3e:fe:
39:1d:ea:52:0f:e7:97:96:a2:fe:9d:32:ec:a7:9d:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:1B:C9:7D:9D:83:8D:F6:9C:95:0F:FB:A3:6F:55:22:18:C4:7D
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/m6kbyX2dg432nJUP-6NvVSIYxH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.192.0/18
81.92.144.0/20
94.138.96.0/19
IPv6:
2a02:da8:5::/48
Signature Algorithm: sha256WithRSAEncryption
13:76:af:fe:40:69:eb:65:c9:b6:a8:cd:06:50:0e:95:e7:c0:
33:2d:02:e6:a2:23:c2:7f:0f:92:20:c5:ed:d0:e9:31:2c:8a:
f3:18:bf:9f:a7:49:88:16:1a:05:d2:59:86:70:3f:c3:68:0c:
0d:cc:44:1f:4e:df:80:a2:f9:38:d4:92:1a:ef:ff:fe:18:f8:
9a:e5:c8:aa:1f:98:d8:2e:85:d0:07:a7:2c:cc:54:e9:82:63:
18:4d:65:60:b4:a2:23:84:29:21:84:24:af:c8:07:b4:cd:8f:
99:2c:c0:38:19:00:e7:07:f0:37:06:b9:f5:45:3c:36:76:56:
6c:4a:53:ce:88:a6:cb:de:74:97:fe:64:b5:99:5a:3d:3b:fc:
8f:13:69:30:0b:31:a5:cb:6d:6e:c6:ca:4c:ad:7a:8b:3d:c0:
cc:14:7f:c9:46:f6:88:c9:60:7e:68:17:43:7a:29:50:2a:1a:
e0:d2:56:05:ac:31:3c:ce:2d:41:b8:8f:3b:62:02:b6:25:e7:
45:b5:79:0f:4b:79:1a:76:ba:9c:6a:aa:bc:b4:80:85:9c:7e:
de:30:e1:f8:73:7e:f5:64:67:86:f5:b2:31:d0:61:7d:5d:e3:
d7:d3:ac:df:c4:61:2f:3a:63:85:c6:df:73:80:55:0a:5c:cc:
b3:7c:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:18 2025 by rpki-client