Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/6kNn6BIjQvAgFoT0gfV_z4UBZmA.roa
File: 6kNn6BIjQvAgFoT0gfV_z4UBZmA.roa (raw, json)
Hash identifier: uXzu/1/ApCaN23qtn8UPIP+kydcgRXBWQGCcmTOr+Pg=
Subject key identifier: EA:43:67:E8:12:23:42:F0:20:16:84:F4:81:F5:7F:CF:85:01:66:60
Certificate issuer: /CN=d5720fceadeb8ae6d9a7d1a1d18db8ece4606f40
Certificate serial: 0188AF2AA956BCCDA67BCF6211A6B9BF7696
Authority key identifier: D5:72:0F:CE:AD:EB:8A:E6:D9:A7:D1:A1:D1:8D:B8:EC:E4:60:6F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XIPzq3riubZp9Gh0Y247ORgb0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/6kNn6BIjQvAgFoT0gfV_z4UBZmA.roa
Signing time: Mon 12 Jun 2023 10:33:08 +0000
ROA not before: Mon 12 Jun 2023 10:33:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.0.32.0/24 maxlen: 24
2001:7f8:14b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:2a:a9:56:bc:cd:a6:7b:cf:62:11:a6:b9:bf:76:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5720fceadeb8ae6d9a7d1a1d18db8ece4606f40
Validity
Not Before: Jun 12 10:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea4367e8122342f0201684f481f57fcf85016660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:f5:32:e5:9b:dd:45:55:32:50:50:38:8e:
55:17:87:88:be:fb:f6:e2:2a:33:87:d9:a9:b0:47:
ac:45:9f:6e:7a:2e:e0:8c:51:d4:5b:8a:c3:fb:ee:
c8:53:8b:c7:87:16:10:17:f3:59:f2:36:55:07:91:
51:91:7e:d7:83:85:8f:dd:41:a9:4e:62:ca:d5:68:
a3:a5:53:ad:4a:bc:cd:12:4d:f9:dd:dd:1d:95:e2:
03:83:bf:ab:27:4b:e8:ed:59:c0:45:2c:93:40:8b:
2c:38:62:2d:ce:df:59:44:51:f5:3a:3a:4b:ef:d8:
7c:4c:f0:36:8e:6a:b3:18:61:b1:81:e0:95:2e:ee:
43:f3:b2:b2:d0:86:08:e7:73:84:f3:ea:1c:64:5a:
5e:77:f6:1e:b0:37:75:45:ed:4e:b8:3c:76:94:1f:
d7:d8:aa:8d:6b:12:56:e3:d8:18:3a:95:bc:66:9a:
cb:ca:38:a6:35:68:e9:bd:d1:dd:fe:a1:f0:6e:83:
da:96:9f:f2:89:76:db:a3:ea:79:0d:99:6c:cd:e3:
c8:0b:30:2e:69:b9:8c:72:72:b7:c1:8f:d6:43:47:
22:b0:31:22:ad:7f:3a:ff:8e:03:50:1f:69:1d:70:
ba:36:8e:b7:0f:01:d2:76:ae:44:97:24:45:fe:60:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:67:E8:12:23:42:F0:20:16:84:F4:81:F5:7F:CF:85:01:66:60
X509v3 Authority Key Identifier:
keyid:D5:72:0F:CE:AD:EB:8A:E6:D9:A7:D1:A1:D1:8D:B8:EC:E4:60:6F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XIPzq3riubZp9Gh0Y247ORgb0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/6kNn6BIjQvAgFoT0gfV_z4UBZmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.32.0/24
IPv6:
2001:7f8:14b::/48
Signature Algorithm: sha256WithRSAEncryption
bc:1b:e4:be:6f:c6:aa:4e:81:1e:5c:51:93:98:37:c6:0a:8c:
39:51:5f:84:eb:27:5a:45:9d:3b:85:dc:6c:bb:5e:4f:6a:1f:
97:95:a0:ee:f7:05:07:22:e9:39:10:51:c2:47:66:ed:0c:b5:
db:b5:a8:86:62:b8:3c:86:1f:30:1e:46:1f:7b:ed:ff:26:74:
63:b0:c5:4d:96:2d:e4:6b:e5:52:09:46:91:f6:0f:e2:96:1c:
5a:2d:01:d9:ed:ad:3a:bf:d8:6d:7a:2d:e7:fe:2f:4f:47:89:
77:a9:63:cf:93:ad:80:55:d6:92:1d:84:ef:d4:ba:19:74:6d:
a1:0f:b3:8a:fb:ee:d5:4c:c4:55:66:0a:9c:e5:16:b5:ec:02:
65:21:17:b1:3d:a1:91:ba:47:34:a4:3a:4c:19:8b:6b:a9:47:
ff:c4:c3:b1:94:a0:1f:43:8d:d5:01:e5:2a:9e:7c:51:37:29:
48:bc:a0:07:04:d0:2f:c4:df:2a:a4:b1:00:23:21:da:d1:61:
bb:a8:2d:8c:5b:32:0b:2e:9d:67:d1:48:5c:6e:e5:6d:df:26:
83:10:b7:6d:5b:16:ce:d2:50:31:fe:0d:96:00:03:fd:99:3b:
51:66:ea:95:1f:21:ba:c2:ea:1f:26:bc:3e:1b:db:61:75:45:
11:27:1b:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYivKqlWvM2me89iEaa5v3aWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NzIwZmNlYWRlYjhhZTZkOWE3ZDFhMWQxOGRiOGVjZTQ2
MDZmNDAwHhcNMjMwNjEyMTAzMzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTQzNjdlODEyMjM0MmYwMjAxNjg0ZjQ4MWY1N2ZjZjg1MDE2NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTX1MuWb3UVVMlBQOI5VF4eIvvv2
4iozh9mpsEesRZ9uei7gjFHUW4rD++7IU4vHhxYQF/NZ8jZVB5FRkX7Xg4WP3UGp
TmLK1WijpVOtSrzNEk353d0dleIDg7+rJ0vo7VnARSyTQIssOGItzt9ZRFH1OjpL
79h8TPA2jmqzGGGxgeCVLu5D87Ky0IYI53OE8+ocZFped/YesDd1Re1OuDx2lB/X
2KqNaxJW49gYOpW8ZprLyjimNWjpvdHd/qHwboPalp/yiXbbo+p5DZlszePICzAu
abmMcnK3wY/WQ0cisDEirX86/44DUB9pHXC6No63DwHSdq5ElyRF/mBVQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOpDZ+gSI0LwIBaE9IH1f8+FAWZgMB8GA1UdIwQY
MBaAFNVyD86t64rm2afRodGNuOzkYG9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhJUHpxM3JpdWJacDlHaDBZMjQ3T1JnYjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmEyZTYtZDE2Yy00N2U2LWE1OTUt
ZTgyYzQ5MTBiZjYzLzEvNmtObjZCSWpRdkFnRm9UMGdmVl96NFVCWm1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmEyZTYtZDE2Yy00N2U2LWE1OTUtZTgyYzQ5MTBiZjYz
LzEvMVhJUHpxM3JpdWJacDlHaDBZMjQ3T1JnYjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQAgMA8E
AgACMAkDBwAgAQf4AUswDQYJKoZIhvcNAQELBQADggEBALwb5L5vxqpOgR5cUZOY
N8YKjDlRX4TrJ1pFnTuF3Gy7Xk9qH5eVoO73BQci6TkQUcJHZu0Mtdu1qIZiuDyG
HzAeRh977f8mdGOwxU2WLeRr5VIJRpH2D+KWHFotAdntrTq/2G16Lef+L09HiXep
Y8+TrYBV1pIdhO/Uuhl0baEPs4r77tVMxFVmCpzlFrXsAmUhF7E9oZG6RzSkOkwZ
i2upR//Ew7GUoB9DjdUB5SqefFE3KUi8oAcE0C/E3yqksQAjIdrRYbuoLYxbMgsu
nWfRSFxu5W3fJoMQt21bFs7SUDH+DZYAA/2ZO1Fm6pUfIbrC6h8mvD4b22F1RREn
G4g=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:00 2025 by rpki-client