Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6TCS1sWJdLPyjEg-R8oob2wGZNY.roa
File: 6TCS1sWJdLPyjEg-R8oob2wGZNY.roa (raw, json)
Hash identifier: yI6+6C8zDBu1fpaa0Kj9QcwMZDjBRNP/0CRccwxbStU=
Subject key identifier: E9:30:92:D6:C5:89:74:B3:F2:8C:48:3E:47:CA:28:6F:6C:06:64:D6
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF1D4F924C68E7DC657C4837C2FB2
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6TCS1sWJdLPyjEg-R8oob2wGZNY.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216173
IP address blocks: 2a0e:aa07:e130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f1:d4:f9:24:c6:8e:7d:c6:57:c4:83:7c:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e93092d6c58974b3f28c483e47ca286f6c0664d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:81:90:c1:b0:ba:73:68:b0:90:46:4d:8f:
b2:a9:6d:17:50:7a:a8:27:c6:d4:63:80:85:0e:ec:
d8:eb:ec:f1:11:0d:49:cc:bf:3e:fd:0a:c6:ea:39:
d0:5d:40:5e:be:79:4e:67:cc:c5:4c:1a:48:2a:5f:
d9:69:49:96:af:8d:ed:93:2c:e2:a6:76:dc:8f:77:
05:af:20:12:11:55:39:70:74:97:e1:53:55:e2:33:
5b:d5:f8:71:84:f4:e7:c5:8f:aa:fe:3b:3e:79:55:
4a:c0:ef:74:ce:ea:4b:de:fc:36:3a:48:5c:0a:3f:
47:63:71:19:b4:45:d5:04:99:d8:86:6a:ca:37:75:
a3:39:e0:d2:bd:11:f0:20:c5:e2:f2:73:fb:9a:b9:
b6:4d:7a:e9:ff:4b:6a:35:63:3a:5f:ac:c4:15:a8:
27:8c:c8:80:cc:a4:4d:f5:3e:fe:49:38:7e:15:c4:
6c:28:03:75:10:59:69:c9:9d:57:0d:59:19:bd:72:
ea:64:6c:79:16:31:91:ef:4f:fc:e3:af:fb:16:a4:
7d:c8:01:ed:f0:25:ea:8a:40:73:1d:41:26:0f:da:
e3:59:90:2e:33:4e:8c:22:18:6e:e1:9e:43:65:33:
10:97:c9:e5:74:f6:45:f3:db:86:b0:0c:f8:02:db:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:92:D6:C5:89:74:B3:F2:8C:48:3E:47:CA:28:6F:6C:06:64:D6
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/6TCS1sWJdLPyjEg-R8oob2wGZNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e130::/44
Signature Algorithm: sha256WithRSAEncryption
bd:86:13:5f:0b:9b:87:5f:15:bf:85:42:b8:57:3b:c7:e3:d3:
2d:c8:f2:87:13:22:df:fa:2f:19:c2:55:21:5d:1c:05:9c:46:
a4:bb:70:dc:b1:27:07:5d:52:26:a4:ed:be:e8:a0:71:fb:a4:
ea:65:45:82:c5:a4:3b:ee:b2:9d:6b:32:61:51:87:5d:2f:63:
a0:df:3e:fb:61:65:52:ac:45:2f:f1:04:0c:05:57:05:3e:c8:
10:73:59:a3:9c:08:f1:ed:ce:c1:43:fe:48:8c:63:ba:3f:58:
dc:18:28:60:ba:a8:41:3d:81:f1:dc:9f:3a:f2:b7:21:1d:1a:
87:b1:de:60:dd:12:cb:fc:fa:8d:55:d4:fb:76:db:3c:6a:cb:
64:e7:9b:3c:e8:d6:b0:8a:68:1f:f9:23:46:9e:72:88:01:1f:
57:f2:96:d0:6b:c2:60:0e:d0:4b:87:21:88:11:d9:70:9d:c8:
5d:74:03:d6:52:02:c3:a2:f2:7f:97:ca:29:d4:92:f4:6b:5d:
e4:6d:ef:41:d5:05:e0:ad:bb:5e:f2:31:99:cf:0d:11:66:89:
0e:13:81:8d:37:f9:32:ad:40:91:8b:2b:42:65:e0:c5:49:6e:
84:9e:f9:1b:30:5d:ca:8e:9b:d8:95:fa:89:d5:d1:82:8a:74:
22:8c:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:37:13 2025 by rpki-client