Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/st6znzzjITPuMpSJjrFEMFP1Czc.roa
File: st6znzzjITPuMpSJjrFEMFP1Czc.roa (raw, json)
Hash identifier: 067ZjD6QcnN3Mx53z7WybhHoKvt/9PnpqqLQEBpco4o=
Subject key identifier: B2:DE:B3:9F:3C:E3:21:33:EE:32:94:89:8E:B1:44:30:53:F5:0B:37
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67A34112F34EDBB2A3B95FAFFAA32
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/st6znzzjITPuMpSJjrFEMFP1Czc.roa
Signing time: Thu 02 Jan 2025 15:50:57 +0000
ROA not before: Thu 02 Jan 2025 15:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9924
IP address blocks: 2.18.16.0/23 maxlen: 23
2.21.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7a:34:11:2f:34:ed:bb:2a:3b:95:fa:ff:aa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2deb39f3ce32133ee3294898eb1443053f50b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:d2:db:0f:d4:e3:91:98:3f:4b:d5:1b:31:
47:ef:90:04:c2:ab:e2:13:9a:3b:c2:ab:9b:f7:d4:
14:7f:7e:0c:05:f7:10:f3:4b:c7:7d:5c:4b:db:21:
a7:f3:54:d6:2f:19:c3:67:a7:c0:b4:b0:33:42:35:
3c:2b:0a:02:8a:9b:90:5a:ba:5f:77:4d:c5:23:64:
3f:a1:ea:6d:86:cd:33:ad:5b:8b:01:5b:f5:3b:45:
75:26:94:e1:27:d1:4e:2f:59:15:62:b8:71:2b:51:
bd:7f:7d:6d:fc:f6:9c:aa:a5:86:0f:4a:c2:d1:d5:
03:1e:d8:00:a2:b7:c3:06:40:bd:75:7a:0b:99:79:
16:c8:f0:4d:3b:7a:53:7b:11:ac:82:4d:11:30:63:
91:8e:48:85:72:70:da:30:00:62:c4:94:2e:8d:4e:
94:70:c3:50:7d:82:f3:4d:ba:5e:d6:38:27:6e:10:
a9:91:34:a9:d6:03:3c:22:2e:60:33:2b:0f:d6:e6:
14:90:27:8d:fe:fa:e5:8a:db:6b:14:75:f0:8c:2b:
b6:e5:b8:77:b8:90:d5:e1:15:0c:7d:bc:c2:71:00:
d0:fe:ef:38:cd:68:e3:56:5b:f6:96:69:65:67:13:
11:2d:92:ea:f4:df:2b:d3:fd:35:63:8f:dc:a9:5f:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:B3:9F:3C:E3:21:33:EE:32:94:89:8E:B1:44:30:53:F5:0B:37
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/st6znzzjITPuMpSJjrFEMFP1Czc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.18.16.0/23
2.21.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:05:6c:b3:a5:18:51:b2:15:4d:3b:ec:7e:5e:bd:47:28:39:
30:79:8e:d7:4f:ad:38:a4:eb:04:05:7f:3b:95:e2:ed:98:52:
81:95:9c:4f:73:ad:6a:47:66:74:84:c0:0d:4b:28:61:b5:23:
55:0b:5a:f1:50:09:37:5f:be:33:73:fe:85:b9:be:b8:cf:90:
a3:8e:fe:a1:64:8a:28:21:f8:a8:8d:c6:36:9f:12:d6:31:e1:
74:67:86:1a:eb:d7:09:d3:47:44:c2:7e:b0:5f:eb:8a:a9:34:
52:ec:4c:f5:fe:18:32:16:89:11:45:e7:57:2e:51:1a:ce:2f:
03:d8:4d:06:82:0f:95:d0:50:37:e3:5c:96:53:08:2a:42:9f:
b0:e8:80:8d:40:43:01:5a:59:3a:d8:2f:f3:b9:87:ed:28:21:
29:ee:81:97:ec:49:80:7d:7f:fb:b6:90:b6:76:0c:f9:71:b8:
63:68:13:ea:a6:52:8e:50:20:7f:3a:80:4b:3a:13:e8:e9:14:
c0:36:7a:a3:cc:e5:88:d8:01:8c:2f:c0:6d:a9:4d:5d:9d:e5:
cc:94:a0:cd:a9:9d:1e:18:91:92:06:e4:44:f3:b3:53:1f:0d:
8e:c8:74:16:9d:16:c4:2d:fe:bc:45:cd:46:e8:c9:52:ff:cb:
3f:c0:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:06 2025 by rpki-client