Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/uc6-YZTdPaiCygzCUqfKIgPjOxM.roa
File: uc6-YZTdPaiCygzCUqfKIgPjOxM.roa (raw, json)
Hash identifier: lpRDNnYYsBuMRYwq7tzgQdFRk9MbpBKn+O5SN8oWXMA=
Subject key identifier: B9:CE:BE:61:94:DD:3D:A8:82:CA:0C:C2:52:A7:CA:22:03:E3:3B:13
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 019570FB6ADBAA6B6DAD52445014FC41F1FE
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/uc6-YZTdPaiCygzCUqfKIgPjOxM.roa
Signing time: Fri 07 Mar 2025 14:21:19 +0000
ROA not before: Fri 07 Mar 2025 14:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.0.0/23 maxlen: 24
195.242.7.0/24 maxlen: 24
195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
2a13:5940::/32 maxlen: 32
2a13:5945:7::/48 maxlen: 48
2a13:5945:c::/48 maxlen: 48
2a13:5945:22::/48 maxlen: 48
2a13:5947::/40 maxlen: 48
2a13:5947:130::/48 maxlen: 48
2a13:5947:150::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:fb:6a:db:aa:6b:6d:ad:52:44:50:14:fc:41:f1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Mar 7 14:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9cebe6194dd3da882ca0cc252a7ca2203e33b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:d4:fe:b9:ff:a3:ce:91:bb:10:34:db:ab:
60:cf:37:77:d3:c9:c7:8a:fb:d6:5f:d0:41:bf:05:
60:98:30:d8:1f:64:b3:90:01:05:5c:06:eb:05:8f:
4c:87:fd:55:16:a1:ec:c7:55:60:c5:61:1b:c9:21:
7d:22:4b:be:e7:53:41:64:f5:97:23:fc:3f:f5:5f:
7e:0f:9c:38:1d:fb:c3:5d:1d:a0:f6:66:70:63:88:
5d:4f:7b:07:22:40:12:07:c8:be:95:7c:20:c0:f4:
24:1f:0c:e6:49:b0:cc:2c:34:87:d7:73:63:d5:5c:
3c:ad:d6:51:c6:60:9d:36:0e:24:57:08:74:19:25:
7d:54:b9:06:3e:c0:02:62:43:e0:61:3c:4f:c5:30:
d6:c2:d6:91:6b:1e:95:f2:de:e2:36:7c:2a:ac:14:
a2:52:a7:98:59:7e:2d:a7:8a:09:0c:c8:b2:80:dd:
a0:66:2a:a9:52:b1:37:8f:72:c6:da:fc:e0:8e:07:
87:d4:a1:6b:77:6f:50:78:72:23:5a:de:8e:aa:e1:
c1:18:d0:19:e4:fb:c0:84:3a:15:c8:3a:46:01:46:
4d:18:1e:3b:53:54:3c:c0:9a:76:09:38:b4:5d:f7:
1a:f9:09:25:ed:c8:c3:3b:71:c9:18:0e:17:a8:af:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:BE:61:94:DD:3D:A8:82:CA:0C:C2:52:A7:CA:22:03:E3:3B:13
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/uc6-YZTdPaiCygzCUqfKIgPjOxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.0.0/23
195.242.7.0-195.242.31.255
IPv6:
2a13:5940::/32
2a13:5945:7::/48
2a13:5945:c::/48
2a13:5945:22::/48
2a13:5947::/40
2a13:5947:130::/48
2a13:5947:150::/48
Signature Algorithm: sha256WithRSAEncryption
7c:7b:06:64:cb:06:68:b1:ad:73:f1:aa:23:6a:f0:fa:09:a8:
7c:39:dc:ce:1c:bc:e5:f1:1e:80:ca:c7:00:a9:d5:95:fe:e7:
d8:01:6c:23:5b:51:62:60:99:60:a3:b2:2c:60:8a:5a:44:5e:
66:e0:8c:e9:01:db:7c:58:95:d6:e4:4e:fe:04:82:3e:cb:41:
75:ea:13:0e:6b:08:fd:e5:3a:91:c4:0a:bf:66:b7:27:0e:5d:
ef:53:53:dc:ca:db:aa:d8:ab:58:64:61:26:7b:67:16:0e:ad:
b0:55:d1:72:37:f1:22:ae:e4:0a:64:63:04:ad:16:e8:da:42:
47:82:fe:2f:09:e5:da:5c:83:fb:1f:d6:7f:82:76:6d:f6:ee:
92:a6:ce:18:54:23:f9:d8:76:7f:df:e2:c3:64:57:5f:99:83:
7c:ea:b9:f6:f9:95:24:29:21:e6:1f:30:b2:a7:ec:a5:23:e4:
25:d3:3b:b8:b6:2b:76:e1:bd:99:b3:fd:87:ed:53:c3:17:a3:
a5:ea:31:30:76:b1:e3:74:f2:6f:a3:68:2d:0d:14:aa:a8:10:
a9:66:6b:93:85:da:c5:1b:1b:b8:c4:b2:0c:ad:c3:87:41:29:
f7:a0:9f:86:3b:c3:96:58:5c:de:f1:89:52:72:f4:7e:c4:bd:
7a:1b:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:40 2025 by rpki-client