Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/6bwL5YHScOT2TjF50UOzWmSHFbM.roa
File: 6bwL5YHScOT2TjF50UOzWmSHFbM.roa (raw, json)
Hash identifier: J7fubjulsksJL2y5CCyjiA6636klGKicCVaiq1Tvfs4=
Subject key identifier: E9:BC:0B:E5:81:D2:70:E4:F6:4E:31:79:D1:43:B3:5A:64:87:15:B3
Certificate issuer: /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial: 01945A1359F91D1EE10004C2821805337E1B
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/6bwL5YHScOT2TjF50UOzWmSHFbM.roa
Signing time: Sun 12 Jan 2025 10:33:25 +0000
ROA not before: Sun 12 Jan 2025 10:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13037
IP address blocks: 91.235.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5a:13:59:f9:1d:1e:e1:00:04:c2:82:18:05:33:7e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Validity
Not Before: Jan 12 10:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9bc0be581d270e4f64e3179d143b35a648715b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:83:55:03:ee:48:cf:53:2f:fe:63:2f:a9:
14:a5:9b:94:32:dc:c3:fb:82:35:63:99:fd:e4:82:
ae:51:6b:1b:99:df:5b:8f:77:08:2d:9b:da:38:a8:
f1:0f:09:81:fa:a0:2a:f3:5b:31:f7:7c:09:33:a5:
9f:2a:6e:2d:de:df:53:40:f2:98:5d:cb:d5:6f:e1:
11:05:30:ce:1a:d2:f5:ad:b2:ce:80:1d:79:a4:ff:
93:ab:ae:4d:d0:be:e6:29:3c:28:e1:fa:a0:5b:5f:
62:c6:82:ed:b1:55:d4:53:ab:73:26:aa:74:15:64:
41:d2:e4:23:b7:1b:f5:2c:05:f1:11:0d:4e:e7:de:
df:9f:e5:2d:cb:df:01:7e:60:2d:cd:aa:9a:20:0c:
58:a9:b7:5a:df:2f:96:14:36:ee:1c:d3:c9:7f:02:
d1:b5:0c:a9:a0:55:f0:3f:66:1a:2c:f1:a6:89:95:
9a:64:09:12:31:9c:f2:d8:84:3e:e5:48:b1:a3:f3:
8a:8d:46:77:7a:bc:f2:20:00:29:e7:8b:ee:70:18:
66:c1:4c:cd:fc:72:37:21:f6:e8:4e:19:a9:ea:35:
d6:7e:56:07:e6:4b:9b:ed:79:4c:40:d6:e7:96:f5:
f2:fa:7f:46:f6:24:5c:a1:8a:59:35:dd:1e:84:9f:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:0B:E5:81:D2:70:E4:F6:4E:31:79:D1:43:B3:5A:64:87:15:B3
X509v3 Authority Key Identifier:
keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/6bwL5YHScOT2TjF50UOzWmSHFbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.214.0/24
Signature Algorithm: sha256WithRSAEncryption
87:01:ae:15:94:95:c5:04:0d:fa:a5:73:e9:23:fb:ce:c0:b5:
d3:c0:a0:a6:c5:a8:a4:1b:b3:75:ed:3d:2e:57:79:15:80:5b:
37:cb:5b:76:5f:7b:56:12:73:37:db:2d:5a:7f:8a:2a:7b:fc:
18:70:bb:cf:bd:b6:7b:11:f0:a4:d6:6d:78:30:f0:92:f4:7e:
ef:f2:86:ff:8a:12:ef:0a:c6:71:d7:17:b3:03:32:dc:a5:4c:
6c:36:a2:9d:35:ad:8c:9d:01:96:7d:3d:db:b0:7f:bd:41:7b:
e0:8c:99:bf:74:62:28:1f:9f:8f:02:a4:b5:c0:a6:2c:2e:92:
48:4f:ed:82:e1:e0:cd:4c:e9:7e:a0:54:63:57:1e:1f:93:86:
fa:d6:43:d0:33:d1:c2:80:31:97:d2:83:37:74:4d:13:27:a6:
28:7d:1f:da:a7:d1:12:84:20:57:7e:6c:06:80:ab:5c:64:14:
43:ad:f9:93:ab:9b:77:4c:5a:a1:dc:4e:d0:0e:b5:15:95:46:
f8:e0:5e:22:ab:00:c6:d2:2c:db:35:2f:79:c4:08:46:cf:46:
30:76:7a:19:13:ee:d8:3f:48:1b:05:70:9b:80:d3:5c:85:f3:
d7:0c:5f:28:27:e8:12:81:5d:75:8e:60:c6:ff:28:88:8f:70:
97:87:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:34 2025 by rpki-client