Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa
File: 6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa (raw, json)
Hash identifier: qSzWqPlKHdtkFhY0N3iiqf+44mjD24bSbWGh/QepF9U=
Subject key identifier: E8:15:CB:5F:42:C7:E8:8A:05:9D:51:20:99:E4:E6:9E:39:37:B1:33
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746EEB43736990587F143FF5E9C87DD
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa
Signing time: Thu 02 Jan 2025 13:49:07 +0000
ROA not before: Thu 02 Jan 2025 13:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ee:b4:37:36:99:05:87:f1:43:ff:5e:9c:87:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e815cb5f42c7e88a059d512099e4e69e3937b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:7a:70:c6:b7:dc:b1:db:86:c0:6e:93:ae:
92:8d:ed:51:a7:cd:ce:5c:37:7a:2f:9b:f3:2c:dd:
7d:ea:40:fa:86:56:60:eb:13:82:be:0b:dd:09:07:
91:52:8a:b4:b8:f5:2f:eb:e8:19:c4:2e:fe:ae:f9:
87:44:93:0b:c8:4e:4a:90:08:cc:f9:f9:1d:eb:8d:
7f:5f:78:8a:40:f0:e9:26:6a:2d:d5:bb:05:25:0d:
f7:df:d8:f8:0e:65:0c:90:04:0d:c3:e5:07:a0:4d:
6d:3d:1f:17:e3:68:54:cf:6e:19:56:81:db:e1:79:
89:e2:96:08:98:1a:29:90:f9:44:a2:c2:63:e8:6d:
12:7e:3c:93:6c:e5:54:fe:e6:69:1e:f0:96:aa:9a:
e0:85:a2:6f:17:8b:9c:ea:ba:e0:72:5e:ba:bc:21:
4f:8f:ba:aa:20:3d:ad:fd:6c:13:d9:6e:5c:5b:14:
fa:0d:d7:1a:61:e7:61:8a:d2:21:62:96:b5:c4:0a:
94:b7:40:b0:75:e3:5c:be:28:54:42:02:6f:cd:8b:
dd:18:7f:c2:8e:5d:99:44:12:92:33:a1:51:c2:b3:
28:4f:d5:61:41:79:7f:46:ee:d9:c6:ca:da:c0:e7:
39:c8:08:1a:74:16:03:77:78:7b:5f:64:37:ef:2b:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:CB:5F:42:C7:E8:8A:05:9D:51:20:99:E4:E6:9E:39:37:B1:33
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.44.0/22
195.179.80.0/22
Signature Algorithm: sha256WithRSAEncryption
63:d9:8c:57:37:ca:a2:fb:71:b2:6c:4e:18:c8:9b:59:58:7b:
7a:29:c0:41:85:aa:8d:f5:d1:55:24:c6:c9:65:74:55:5c:99:
bc:41:a2:16:3f:fe:97:eb:21:ce:d2:b5:e3:45:5b:76:6e:24:
c7:65:bb:5a:70:9c:40:66:53:a7:cc:08:d1:b3:2c:dc:81:88:
f0:0f:8f:c9:37:ad:f4:2f:4a:c7:bc:c7:7e:d0:a4:1e:9e:58:
33:31:f8:81:0e:66:62:59:69:c2:78:31:51:00:27:b9:2b:8d:
1d:0e:86:34:e4:13:33:65:ad:1d:53:d1:c2:0f:93:00:33:0d:
22:88:37:31:db:e5:89:23:af:12:23:d9:da:87:b1:48:43:70:
8c:80:30:19:6f:40:66:49:b8:83:ca:8b:aa:63:48:20:3d:16:
02:c2:34:76:33:b3:61:e4:1c:ba:5a:6b:76:eb:87:6b:53:4e:
3f:17:b9:62:62:39:7b:df:9d:ce:ba:af:01:5b:8b:24:a7:03:
f6:2a:3b:a3:e2:20:67:91:71:03:2f:b0:80:bd:3b:0d:55:94:
db:29:28:44:96:92:2f:b7:0f:12:3c:a0:87:63:da:b4:04:9d:
72:39:48:a3:81:dc:05:82:39:b3:c4:09:02:18:3f:7f:01:91:
b5:20:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:10 2025 by rpki-client