Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa
File: 6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa (raw, json)
Hash identifier: Emdh1wPq8o8m6XW7TGUMCluD0dAa1SuqkmrugOmuj5g=
Subject key identifier: E8:40:F2:BD:ED:40:C0:3E:83:AF:BC:8B:4E:E3:5B:37:E5:F2:E2:8E
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 019427B4F0CBAA65C2F42FBF054D16BD4278
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa
Signing time: Thu 02 Jan 2025 15:49:16 +0000
ROA not before: Thu 02 Jan 2025 15:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216273
IP address blocks: 92.61.168.0/21 maxlen: 24
2a10:6540::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f0:cb:aa:65:c2:f4:2f:bf:05:4d:16:bd:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Jan 2 15:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e840f2bded40c03e83afbc8b4ee35b37e5f2e28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:1c:f9:c6:35:e9:b2:b4:4a:d5:d5:d6:3e:
23:9d:f7:0e:f1:84:49:66:e6:42:b9:93:9a:9a:6b:
ca:62:e8:88:b6:62:0b:15:b2:38:68:85:17:a3:f5:
cf:78:a4:dd:f3:7a:78:96:a0:42:f3:78:06:11:2c:
64:44:7e:95:00:6f:ce:41:3f:5e:4f:c8:70:d0:07:
56:de:62:64:2e:18:f6:b6:9d:4b:63:54:f3:c9:14:
b3:23:66:74:98:34:76:4e:01:b9:fa:fb:8f:23:9c:
0a:7b:e4:e4:58:73:7d:07:33:8b:36:7c:99:4b:7c:
f9:57:20:36:34:2f:5b:9b:64:ab:0a:01:47:bd:af:
fe:69:94:9d:4f:e4:a9:48:40:81:3c:b0:02:20:24:
13:3d:da:ec:42:e7:d0:b5:a4:d3:c2:e8:04:d8:72:
32:c3:7a:e0:4e:f5:c9:1d:47:5f:18:89:e8:32:8c:
19:09:a8:10:f6:a0:46:07:a3:56:a7:b8:53:51:91:
3f:f5:25:5c:41:4e:dc:38:d7:b5:cc:de:03:d8:b8:
5d:fe:6e:74:50:09:e6:89:59:47:e2:51:bb:75:ac:
bf:fe:2e:04:47:5a:a6:b8:46:96:36:2e:46:38:b4:
0f:43:39:a8:81:68:d3:70:3c:f9:49:20:11:7d:40:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:F2:BD:ED:40:C0:3E:83:AF:BC:8B:4E:E3:5B:37:E5:F2:E2:8E
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/6EDyve1AwD6Dr7yLTuNbN-Xy4o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
2f:a4:69:8f:71:f0:71:3d:c3:65:45:7b:b7:8d:cb:76:eb:a1:
23:bd:ea:83:21:35:72:22:68:21:e0:ea:69:33:8a:a0:08:2d:
9e:42:7e:c4:a3:39:06:e4:f8:c5:1f:c8:54:1c:1d:07:ea:3c:
a9:96:01:fb:4e:85:93:43:c7:d3:ce:64:06:0d:2a:44:8a:d7:
95:4c:7a:2f:bc:ec:41:74:5a:35:18:d1:e1:98:5d:aa:0d:f3:
bf:a9:a5:d4:ef:12:24:45:4a:4c:d1:71:81:58:fe:71:52:e5:
04:64:79:d7:0f:88:76:c2:90:46:38:d5:ae:42:53:a6:7c:35:
60:bb:a4:3a:90:19:61:e3:d5:fa:c5:bb:69:b6:98:00:f7:e5:
1b:b1:63:5c:e9:06:7d:c2:50:33:c9:f9:7a:3a:8f:03:e3:15:
b6:7a:3b:e2:a1:20:49:6e:02:73:ec:17:6a:c5:c0:cd:ea:25:
6d:0f:50:47:d2:7e:ff:cd:f3:dd:c3:7d:68:00:38:dc:02:64:
8e:a0:7f:5e:08:8f:65:77:5a:e8:c9:be:67:01:2d:77:f9:8b:
09:2d:96:5b:82:aa:68:b3:fa:6f:5a:35:41:e4:f1:99:14:cb:
a4:0e:ab:4b:b1:30:c1:aa:8b:f5:67:4b:21:3d:7c:ca:3e:ea:
1d:29:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:04 2025 by rpki-client