Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa
File: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (raw, json)
Hash identifier: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=
Subject key identifier: 6B:A6:38:68:AD:DD:70:C9:15:3A:1C:5A:3C:29:23:E2:DB:FF:AF:DA
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019560D7A3B437C31EFD224642E4FB13D99C
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa
Signing time: Tue 04 Mar 2025 11:08:19 +0000
ROA not before: Tue 04 Mar 2025 11:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213607
IP address blocks: 194.15.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:d7:a3:b4:37:c3:1e:fd:22:46:42:e4:fb:13:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 4 11:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ba63868addd70c9153a1c5a3c2923e2dbffafda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:c9:ff:f4:c8:25:8f:0a:25:8d:ec:77:b2:
2e:4a:4d:30:cc:3d:43:d4:3a:52:fd:cb:a8:18:68:
22:24:48:3d:fc:78:3f:d9:73:87:92:c8:2f:3e:36:
66:71:db:6c:34:97:90:ed:eb:f5:df:b8:8f:36:b6:
7d:62:cb:6a:03:ec:96:55:c4:45:01:9b:43:6a:f5:
6d:03:41:1b:56:ea:6c:3d:51:e0:46:8c:3d:96:bc:
ca:ec:9a:3a:8d:98:2d:7d:16:b5:9d:34:f9:11:bc:
3d:43:9b:0d:73:b6:96:a3:a7:2f:1b:44:5d:9b:f4:
1d:c6:29:89:65:b2:f2:9d:7a:aa:d8:96:2c:c9:23:
ee:28:95:33:83:12:ee:27:87:5c:df:30:0c:b1:fa:
35:42:27:bc:7c:86:14:be:e9:62:18:f2:80:8f:79:
7a:a0:50:c3:40:14:4f:c7:01:1c:28:d0:a2:fb:50:
e6:02:89:e8:7a:6c:58:42:e4:c0:4b:54:0b:49:4e:
91:5b:3b:b2:24:2c:1b:ea:af:d5:e2:65:b5:e3:9b:
6d:1e:b5:0e:fb:38:d3:58:7c:fb:7d:cb:7f:8d:55:
b1:dc:53:27:33:ab:c8:5f:b0:c1:80:c2:10:78:6d:
b4:69:52:54:a5:c7:35:8a:a4:30:00:e4:e0:a8:75:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:38:68:AD:DD:70:C9:15:3A:1C:5A:3C:29:23:E2:DB:FF:AF:DA
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:48:70:ae:f1:79:43:aa:3c:92:2b:74:1e:7b:1e:fd:d0:98:
cf:42:0a:83:30:64:23:0d:83:07:5a:f8:02:f7:c8:71:3e:dc:
30:dd:37:04:b2:87:f6:c3:40:69:43:38:cc:b3:89:ac:e2:f7:
7e:dd:01:98:43:dd:6a:b5:a3:19:db:8a:87:94:f4:dd:50:a6:
0e:63:9d:ed:90:0d:f2:42:a4:b9:1a:f6:91:96:4c:50:0a:db:
b2:d6:e5:7d:0f:83:cf:79:96:76:56:01:fd:ef:44:f8:e4:55:
1c:f0:41:25:03:22:72:a4:44:bc:82:d5:bc:ec:6e:55:0d:2b:
f1:a1:b8:ff:d2:ce:a7:23:7c:98:56:27:80:6f:e6:81:ed:58:
49:a1:cd:93:62:ff:1d:4c:bc:6d:13:d4:b2:3a:ca:51:af:f3:
41:f1:76:6f:80:d2:f6:03:35:0b:33:21:a3:62:57:5a:a7:5e:
c0:d9:2e:c6:ce:86:80:8d:84:3d:a4:1b:c5:46:99:d8:01:fe:
f6:c7:63:44:51:f1:b4:4e:1b:60:a8:33:02:10:a9:f6:ea:a8:
7b:55:41:b2:eb:ae:57:76:3b:3d:d6:6b:c1:a0:3c:4f:4c:9d:
b3:ce:61:f9:e2:37:2e:4e:46:4e:fb:c2:c8:e6:28:39:24:6f:
5d:b8:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:21 2025 by rpki-client