Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/6JrlKE6-D36PVGMwp7ew7z1aOA4.roa
File: 6JrlKE6-D36PVGMwp7ew7z1aOA4.roa (raw, json)
Hash identifier: T1fYyT20nJ5YneHKV99StH98ng47eu4G5rhmxnPt+y8=
Subject key identifier: E8:9A:E5:28:4E:BE:0F:7E:8F:54:63:30:A7:B7:B0:EF:3D:5A:38:0E
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 01946F540B85AF106D2831927D4D62383640
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/6JrlKE6-D36PVGMwp7ew7z1aOA4.roa
Signing time: Thu 16 Jan 2025 13:36:06 +0000
ROA not before: Thu 16 Jan 2025 13:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60550
IP address blocks: 185.37.238.0/24 maxlen: 24
194.124.204.0/22 maxlen: 24
195.180.152.0/22 maxlen: 24
2a13:b240::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:54:0b:85:af:10:6d:28:31:92:7d:4d:62:38:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Jan 16 13:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e89ae5284ebe0f7e8f546330a7b7b0ef3d5a380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:fe:62:e0:22:48:9e:df:ec:d4:f3:ab:d8:
10:21:75:14:19:c2:69:1a:47:0f:34:62:89:72:d9:
2d:4d:62:ae:83:86:28:27:06:f0:a1:7e:89:1c:21:
48:c2:98:0f:9b:09:4c:38:c0:88:f3:a5:8b:49:23:
63:78:4b:cd:d7:ea:63:16:38:29:7e:7e:27:55:c6:
2d:a5:f3:0b:87:40:31:3c:8a:14:f1:ba:40:77:67:
80:62:a4:f5:f2:2f:32:a1:61:92:33:8b:2a:aa:4e:
78:ab:dc:3f:d1:59:83:a7:d3:bb:49:01:0b:72:2f:
44:26:d5:6b:18:90:34:e8:56:64:5f:5d:73:c7:44:
75:db:8a:d8:cd:c4:93:4e:c8:2e:ae:17:49:1b:4a:
6c:77:57:5f:2e:ad:bc:42:bd:2c:0f:b0:1c:cb:bd:
2c:21:ac:1b:f2:58:8c:36:38:91:41:11:93:45:95:
02:90:70:4a:e7:38:db:00:c1:e9:af:bd:11:1b:59:
a0:92:02:13:0e:1d:58:10:03:11:3f:26:34:af:f5:
10:58:4b:00:90:c3:82:0e:b2:71:0f:1a:f9:20:68:
b4:bb:b5:b5:19:e8:89:89:8b:3c:20:2a:74:e0:8c:
30:c3:fc:7e:a9:64:fd:35:7b:43:85:4d:76:5b:fa:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:E5:28:4E:BE:0F:7E:8F:54:63:30:A7:B7:B0:EF:3D:5A:38:0E
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/6JrlKE6-D36PVGMwp7ew7z1aOA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.238.0/24
194.124.204.0/22
195.180.152.0/22
IPv6:
2a13:b240::/29
Signature Algorithm: sha256WithRSAEncryption
c0:33:d2:7b:24:a5:be:95:84:15:58:50:f6:9e:f9:28:74:37:
74:71:ea:13:e6:01:89:f9:f0:e5:3f:9e:41:d3:e7:1c:d0:79:
6f:a7:8b:f0:d1:3f:ec:37:f8:e3:c5:90:6b:7e:fe:76:7a:ce:
b9:94:fd:08:87:36:f1:2a:5c:72:24:78:af:ae:aa:1e:08:73:
75:36:50:9b:c8:0f:5d:ca:58:e6:17:1b:94:96:e9:81:8c:cd:
62:5b:e9:e6:09:3b:1a:c1:d0:5d:29:91:b9:82:d4:85:3b:0c:
08:24:08:eb:c4:96:08:80:c6:4a:56:0f:ae:2f:50:f5:6b:84:
7a:34:64:64:4d:03:f5:84:5f:01:85:94:b8:8c:1d:fa:e8:f6:
d4:5f:c4:6d:22:f7:1d:18:c4:60:13:1a:2d:f4:5c:33:5a:6d:
f5:cd:61:2a:88:f9:b0:a4:65:4a:29:3b:3a:6b:cd:f5:6b:a3:
17:ee:d5:3a:df:6e:b5:87:16:f7:db:41:c2:7e:e0:8b:1d:9f:
3e:f7:09:cd:53:1a:da:94:bb:28:69:c0:f1:4b:db:dd:92:52:
9a:e9:98:e0:53:78:b9:91:7d:fd:36:08:52:9d:c3:a9:9b:56:
cd:6d:ac:f9:24:23:c6:b6:3a:4a:01:e0:15:79:d8:fc:84:81:
16:1e:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:41 2025 by rpki-client