Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa
File: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (raw, json)
Hash identifier: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=
Subject key identifier: EA:6C:29:81:9E:63:33:23:94:DE:E1:81:D2:A9:F6:45:B9:76:F6:F5
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 0194258F3AD98E098DDB457BAD843F99734B
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206141
IP address blocks: 87.237.160.0/22 maxlen: 22
2a06:13c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3a:d9:8e:09:8d:db:45:7b:ad:84:3f:99:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea6c29819e63332394dee181d2a9f645b976f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:c9:05:34:0f:33:ee:fc:08:b2:cc:d8:5b:
60:93:31:ae:e4:88:41:49:b6:a2:f5:77:9d:17:84:
70:f8:2b:41:c2:74:cf:bc:87:15:59:d2:7e:21:83:
bb:0c:9e:9a:af:cc:c0:ab:3b:a5:f7:aa:26:65:b0:
16:34:67:d0:0b:47:95:1d:ef:d7:ec:f0:9a:d3:c4:
8a:ff:b0:7f:d0:23:0c:b1:0e:f0:50:48:6f:7a:fc:
a5:2c:6a:8e:37:62:74:d8:9e:ea:a8:68:81:d2:60:
22:81:87:0c:ce:c5:69:38:67:16:72:70:9f:84:3b:
d3:86:85:c9:58:c6:28:2c:91:72:f0:00:99:f1:b4:
0a:16:ae:e3:7f:96:8e:c2:ce:04:9f:c9:00:34:10:
51:39:14:10:18:91:c0:b6:a0:a3:2f:8d:46:10:09:
27:5a:88:1c:05:9b:1c:68:fa:40:83:1b:6b:f9:5e:
55:61:8c:1a:6e:bb:79:4c:cc:5a:fe:ee:a7:ab:42:
a5:c2:f2:0b:4d:12:b3:c3:80:f8:34:6c:37:a8:ce:
ef:64:43:71:9f:01:7b:0c:5d:2a:b7:7a:36:b7:e0:
f5:d0:23:2b:36:ab:f3:41:b8:a1:78:dc:43:21:00:
3c:67:9f:77:a2:40:5a:d2:c2:e5:c9:d3:eb:03:8f:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:29:81:9E:63:33:23:94:DE:E1:81:D2:A9:F6:45:B9:76:F6:F5
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.160.0/22
IPv6:
2a06:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:ea:3d:e8:0b:dd:36:74:ad:43:13:5c:e1:52:f6:f1:56:d0:
71:9b:5c:08:49:66:bf:2c:8c:bf:ea:18:7c:60:32:e9:39:bd:
1d:5f:33:c5:e4:1e:88:3b:46:12:cc:b4:e3:de:3b:38:e6:15:
40:24:bd:67:fd:ad:fd:35:b8:ec:91:9b:b7:25:df:fe:68:dd:
30:01:58:70:38:cc:d6:71:c0:a4:5d:10:af:e6:5f:bc:8a:ee:
de:68:78:b0:3f:69:08:45:d5:c3:77:4a:03:8c:a6:6b:c3:37:
92:74:02:35:b2:9c:af:13:ff:36:15:43:f6:a1:fc:dc:0f:f4:
26:ce:b6:30:a9:07:f2:e1:e0:1e:75:28:b2:0e:cf:e2:a6:c5:
6f:16:d7:74:ad:4f:12:5b:2c:0b:71:ce:c3:1a:11:fa:68:58:
db:3b:1e:3f:c4:e4:8e:4f:ab:a8:29:74:7f:ee:51:b0:2d:af:
87:b7:e6:05:9c:ce:1a:4f:18:c1:8a:ef:8c:ea:ba:ed:f8:1a:
d3:2c:c9:04:d7:63:3a:75:86:c6:ec:94:eb:0a:3b:70:8d:e7:
b9:81:ac:72:4e:53:50:93:7d:25:35:9e:94:7d:ac:fe:80:de:
28:42:9c:1d:40:fb:3e:ae:53:e6:51:eb:89:f1:d6:50:14:85:
b3:36:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:33 2025 by rpki-client