Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6CgmZ5dNxmnqr2Tj9huPS2b0FwM.roa
File: 6CgmZ5dNxmnqr2Tj9huPS2b0FwM.roa (raw, json)
Hash identifier: FGA9I8GtWdSnnKV5vqchztduBTE3yLWIdA9ir0ExPhY=
Subject key identifier: E8:28:26:67:97:4D:C6:69:EA:AF:64:E3:F6:1B:8F:4B:66:F4:17:03
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684EF5BE10CBD1C63DE8977CD06240
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6CgmZ5dNxmnqr2Tj9huPS2b0FwM.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203163
IP address blocks: 193.233.155.0/24 maxlen: 24
193.233.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4e:f5:be:10:cb:d1:c6:3d:e8:97:7c:d0:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8282667974dc669eaaf64e3f61b8f4b66f41703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:b3:79:7e:72:20:7f:ce:8a:ef:a0:a9:85:
03:f8:18:b6:6a:2b:93:d7:96:dc:0e:33:1f:06:f2:
ab:68:44:6c:00:4d:fa:c5:8e:cb:f4:00:33:c7:07:
cb:c2:d6:75:8e:58:19:68:18:16:56:1c:f9:7a:0e:
de:5c:fb:89:48:cc:ad:9a:4e:90:50:5e:8f:50:4a:
e3:80:d0:c9:84:1f:06:e8:50:5d:e1:a5:d7:8c:56:
09:b4:d8:8b:57:f1:09:26:24:80:9f:c6:6b:c6:b5:
d3:cd:12:4a:2c:a7:43:ca:7f:11:cc:85:e8:89:70:
02:37:d8:0d:45:5c:ed:bf:54:3d:8c:b7:00:5d:67:
25:6a:03:f0:42:36:1d:5d:ca:05:91:56:df:20:ea:
cf:54:90:5e:ce:92:67:f9:88:b5:4f:4b:e8:8d:69:
e7:06:fe:9e:96:d9:2d:ab:73:7b:62:67:6a:d4:49:
c4:68:b2:c2:db:b2:dd:46:f9:b9:54:de:61:4d:b5:
d7:d7:6e:ee:fe:da:48:2e:92:91:db:da:7e:3a:1a:
e5:51:aa:48:45:06:3a:b7:18:7d:a9:32:1f:c2:c5:
81:7e:51:cb:26:3f:97:ba:0b:36:6e:7f:53:8e:19:
a1:91:86:42:67:0a:88:d3:13:fb:90:c7:f1:58:9b:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:26:67:97:4D:C6:69:EA:AF:64:E3:F6:1B:8F:4B:66:F4:17:03
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6CgmZ5dNxmnqr2Tj9huPS2b0FwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.155.0-193.233.156.255
Signature Algorithm: sha256WithRSAEncryption
30:c9:d2:2c:17:79:a5:80:7f:9d:1e:eb:23:b5:4c:01:26:79:
e5:3f:f0:84:6d:f8:ac:b9:f2:7b:1c:26:a7:8a:ea:6c:99:80:
30:8c:78:91:56:d7:9b:6c:8d:d7:5f:db:21:7a:08:a5:7b:a9:
55:0d:73:c6:cf:c7:ad:ea:44:24:15:89:63:6b:05:d0:5d:51:
bf:9a:ef:99:d2:8f:4f:98:e2:1e:b0:e6:c9:7d:09:58:7b:80:
20:12:8f:ec:14:99:2b:e1:a0:53:14:39:ca:81:b9:62:41:5d:
1e:0f:ce:f3:b3:81:ed:02:18:6c:7a:d5:27:09:ea:a2:fd:32:
d3:63:0d:fe:44:50:6e:a3:5a:c4:96:a7:7d:df:df:98:92:11:
e4:a8:c6:94:02:3f:ea:5c:51:51:e6:c2:18:59:6c:ae:87:fc:
93:94:bd:64:15:74:83:b6:8d:86:14:e4:c6:12:0a:ad:66:62:
bb:16:bc:ce:0c:2c:3c:fa:d5:41:af:27:d5:05:42:5b:c0:3b:
94:da:36:b8:c1:ac:ee:3c:bf:5a:c8:d3:d6:54:9c:e3:49:fd:
f5:64:bc:87:f2:69:81:35:c0:9c:f3:6b:33:d0:c6:58:3d:31:
05:ca:a3:c5:c4:b6:af:ae:21:97:de:9e:4f:be:6f:91:31:59:
dd:63:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:46 2025 by rpki-client