Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/6yE_967aOtyT7SA3eu1HAmy1ZXE.roa
File: 6yE_967aOtyT7SA3eu1HAmy1ZXE.roa (raw, json)
Hash identifier: Ft4GA1hEti4msbpisEL13lGMrXqm6xv7Y4COm/rasXg=
Subject key identifier: EB:21:3F:F7:AE:DA:3A:DC:93:ED:20:37:7A:ED:47:02:6C:B5:65:71
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019428269674EE6597A05BAA9AAC37CC629D
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/6yE_967aOtyT7SA3eu1HAmy1ZXE.roa
Signing time: Thu 02 Jan 2025 17:53:25 +0000
ROA not before: Thu 02 Jan 2025 17:53:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15577
IP address blocks: 194.187.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:96:74:ee:65:97:a0:5b:aa:9a:ac:37:cc:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Jan 2 17:53:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb213ff7aeda3adc93ed20377aed47026cb56571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:99:d8:e0:40:d2:b4:f9:3c:11:84:70:f4:
4e:92:19:f0:a2:e4:46:1e:f2:1a:7a:45:88:49:11:
ab:d4:65:2b:71:a3:8f:cd:b2:82:83:a0:6d:f4:c0:
cd:df:69:bc:9a:33:5d:8e:55:49:9d:e2:b0:c0:11:
cc:ff:66:ba:83:5f:6c:69:fe:45:45:a1:23:e2:41:
33:6c:ff:5e:35:71:62:40:87:60:77:88:f7:58:58:
d9:02:f3:f9:30:39:0c:3b:dc:e0:3e:d2:a3:6a:10:
c1:f3:7b:b7:96:62:67:58:f5:c1:49:cc:7d:6f:09:
e4:2b:05:95:c7:f2:c8:1b:89:27:c2:28:30:74:0e:
4f:32:06:5c:b3:37:8a:f7:48:29:97:b4:c5:e6:6d:
39:a9:94:2a:45:29:4d:31:78:ea:5c:fd:b8:06:22:
5c:01:b4:07:92:1b:c7:36:41:49:1d:cb:95:7a:4b:
90:5d:d7:0f:d6:ef:60:01:61:ec:9d:18:52:88:bf:
15:76:06:68:87:76:d1:34:4a:6a:00:e2:93:77:d0:
9b:e6:d2:77:fd:09:76:52:43:a7:51:5b:a7:d5:ba:
80:c2:4b:77:ba:30:5c:d3:6d:51:7f:b6:59:ac:0a:
8c:b0:4d:36:a1:06:9b:2f:5d:4f:35:d6:45:cf:07:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:21:3F:F7:AE:DA:3A:DC:93:ED:20:37:7A:ED:47:02:6C:B5:65:71
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/6yE_967aOtyT7SA3eu1HAmy1ZXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.208.0/22
Signature Algorithm: sha256WithRSAEncryption
82:05:17:4a:69:8c:69:fa:9b:e7:3f:cf:8b:4e:b9:c8:b0:0d:
30:9e:46:df:a5:d6:5d:ad:34:ec:c1:e0:d2:29:ca:11:bf:78:
71:3d:5e:54:b4:be:47:ce:80:60:07:4e:3c:9f:8c:66:fe:40:
78:5f:96:ae:b2:97:f8:e4:f9:b0:47:34:07:98:92:b8:2b:81:
75:35:24:52:4f:56:63:3a:15:77:e6:b5:3d:8a:c2:30:dd:8c:
9a:d7:f5:d7:6c:6f:16:61:f3:00:77:4e:2c:ef:f2:ba:ae:05:
53:b1:fb:a4:94:04:88:7a:56:96:d0:5d:af:ac:f6:34:02:18:
f5:77:c8:b4:9f:0a:e1:9f:d7:42:83:09:08:0c:ee:14:69:69:
4e:dc:3e:19:06:1d:69:46:4a:7e:2a:5b:ad:c7:75:9f:b3:e3:
3f:c6:c6:83:50:8d:31:29:d5:66:a0:98:63:9a:3c:f2:95:38:
70:c0:28:ff:fe:dd:d3:41:65:f2:cd:f1:5e:f2:f9:27:bf:f8:
36:fa:33:1c:d8:9f:c1:0a:79:b5:51:08:48:12:68:af:be:d0:
83:cb:16:95:71:fd:c7:32:b1:e1:33:89:cb:70:56:79:a0:2c:
30:d4:e5:5f:c1:c3:ad:31:16:a8:e0:95:ed:1d:12:94:6d:6a:
ee:aa:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:14 2025 by rpki-client