Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/6r4H1bkA6HQBHKzqndzkbGN-fLc.roa
File: 6r4H1bkA6HQBHKzqndzkbGN-fLc.roa (raw, json)
Hash identifier: aHRcxKC7eM9v241orSIrtl55ETVWmoxd9czIqtemS2Y=
Subject key identifier: EA:BE:07:D5:B9:00:E8:74:01:1C:AC:EA:9D:DC:E4:6C:63:7E:7C:B7
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019421B1F3FB3BD2EB424F9A8A5E5CFCF865
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/6r4H1bkA6HQBHKzqndzkbGN-fLc.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203466
IP address blocks: 188.214.194.0/24 maxlen: 24
213.134.13.0/24 maxlen: 24
2a06:f940:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f3:fb:3b:d2:eb:42:4f:9a:8a:5e:5c:fc:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabe07d5b900e874011cacea9ddce46c637e7cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:42:ec:1a:55:08:9e:d3:f5:19:36:72:b3:
a0:77:71:07:9d:7e:5b:86:73:f1:84:69:25:43:f8:
8c:96:73:2e:37:82:35:bf:fc:7d:c6:a4:6b:88:74:
58:fb:71:af:de:c0:bb:bd:a0:7b:ed:9a:72:12:33:
8e:ed:b7:ed:0e:f5:18:dc:e8:bc:54:dd:14:f2:de:
ef:fd:ff:a9:ca:43:7c:36:3d:40:7b:46:9b:e0:6f:
93:f6:a9:50:14:f5:b0:34:87:68:44:90:ac:81:23:
55:84:09:1e:33:bd:d7:fd:a7:d6:9d:61:6b:02:d6:
b3:34:a9:69:95:29:e6:b5:59:6f:60:7c:05:37:39:
7b:8a:46:f4:07:df:e0:42:48:c3:f7:6a:18:7b:37:
2e:3f:70:c8:71:93:70:9c:d8:ff:e7:60:04:be:ef:
0a:35:a3:b9:77:5d:84:c8:f6:4a:55:e6:0a:d9:12:
76:a3:77:84:7a:7d:0d:01:29:45:24:73:d2:81:53:
47:98:84:bf:4c:e2:1a:51:61:0c:db:5c:81:d9:38:
13:a4:ce:bf:07:a2:c0:3c:cf:40:b7:f6:d6:2f:1d:
5d:14:c8:1f:36:e1:e4:30:87:87:9b:8a:2a:36:85:
c9:00:5c:6c:f5:f1:00:00:d0:14:36:fc:65:e6:60:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BE:07:D5:B9:00:E8:74:01:1C:AC:EA:9D:DC:E4:6C:63:7E:7C:B7
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/6r4H1bkA6HQBHKzqndzkbGN-fLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.194.0/24
213.134.13.0/24
IPv6:
2a06:f940:1::/48
Signature Algorithm: sha256WithRSAEncryption
32:4c:d7:77:ec:20:24:1e:89:60:0b:0f:57:14:4d:a4:3c:19:
70:f9:17:b1:cb:44:60:fa:ac:27:c1:53:c9:b6:9a:fd:a1:f6:
16:2b:be:56:1e:ca:f7:1e:ee:fe:cd:27:b1:28:f3:85:27:93:
49:9f:05:34:41:2d:44:73:ef:a3:05:72:e1:5b:13:d6:63:6d:
b3:38:00:73:a4:7d:09:0d:0a:fa:8f:3d:9b:0f:1c:f1:6b:97:
ed:c2:1b:e8:21:58:1f:22:c4:2a:1d:9f:54:82:b2:79:c6:4d:
8f:65:f4:a1:9f:57:4c:5b:d4:21:fd:cc:64:37:14:e8:e8:11:
37:c4:9c:5a:7c:6f:3e:55:4a:56:d2:81:30:eb:c3:cf:f1:46:
17:ef:02:75:5b:f2:1f:f3:db:a7:0b:ec:d3:06:94:4a:8c:47:
10:91:9d:d0:c2:f4:2e:dc:8c:ee:95:6b:5c:30:80:ae:ac:78:
9a:c6:52:f7:83:ed:37:ba:3f:83:52:da:dd:fa:cf:bc:ea:49:
34:20:7b:fb:21:9c:b2:fd:4b:82:8a:eb:f1:ec:f1:22:72:89:
58:98:ea:f3:8a:73:15:c8:7c:dd:a5:f4:89:04:61:85:96:4d:
14:0e:8f:ec:a6:4e:01:cd:82:ea:5a:56:5d:79:fd:4b:32:a7:
0c:39:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:08 2025 by rpki-client