Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rjJH--3rEcPxnxhREhOeQFSp3c.roa
File: 6rjJH--3rEcPxnxhREhOeQFSp3c.roa (raw, json)
Hash identifier: 8IzLzV46TsneA30N3UABQjTk1HWUYnPiChBOngApE68=
Subject key identifier: EA:B8:C9:1F:EF:B7:AC:47:0F:C6:7C:61:44:48:4E:79:01:52:A7:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195807A67337F7878987FAFACDA7D49AEF4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rjJH--3rEcPxnxhREhOeQFSp3c.roa
Signing time: Mon 10 Mar 2025 14:34:20 +0000
ROA not before: Mon 10 Mar 2025 14:34:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 89.144.14.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:7a:67:33:7f:78:78:98:7f:af:ac:da:7d:49:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 10 14:34:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab8c91fefb7ac470fc67c6144484e790152a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:f3:2e:c8:9c:b2:05:2a:d1:25:9c:ff:ee:
bb:00:9c:01:fe:95:fd:ed:43:d1:81:9f:d3:08:f2:
58:7d:f1:75:4f:e0:36:e3:e1:6c:4b:5b:c5:f2:dd:
64:3f:50:78:67:2c:e4:93:46:73:16:a3:a0:c4:96:
1c:47:f0:6a:cc:f5:d4:7f:9f:aa:6a:1b:5d:19:e8:
82:75:2d:78:91:52:88:94:f7:08:ca:77:11:83:cc:
e3:09:fc:0c:c4:b3:04:8b:9f:4e:5c:91:91:f7:e5:
e1:8b:37:54:8c:a2:74:0b:92:e3:1e:a3:0f:f4:22:
5d:c6:da:a4:f8:fb:e4:64:b3:fb:87:96:2e:d3:96:
4f:38:7f:6a:d0:1a:b5:c8:6b:33:2b:9a:4d:54:48:
8a:f8:59:28:98:40:45:c8:40:c2:d3:d6:f0:14:17:
64:ff:7d:e3:e7:08:c1:99:40:c1:3d:56:e5:a8:3b:
d7:f1:ea:1e:0a:cd:f2:8c:aa:06:25:e7:e4:a1:e2:
71:c2:ee:d6:8a:fe:4e:7c:ef:74:06:43:ea:db:7c:
55:06:ae:68:82:4c:41:cf:c9:72:a3:a3:39:0b:5a:
bd:3a:d7:11:47:69:85:f1:08:9d:97:d4:a6:4d:64:
f0:3a:a6:15:b9:f3:36:cc:d0:36:a6:0d:37:3a:22:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:C9:1F:EF:B7:AC:47:0F:C6:7C:61:44:48:4E:79:01:52:A7:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rjJH--3rEcPxnxhREhOeQFSp3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.14.0/24
89.144.17.0-89.144.18.255
89.144.39.0/24
94.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:84:59:c9:50:37:dc:9a:4d:f4:f5:1d:63:0c:a8:29:86:55:
98:2d:45:56:8d:bb:32:3c:59:56:e4:66:2b:de:f1:35:4d:bb:
c1:a0:27:23:2e:b8:95:e6:2c:45:6e:11:f4:10:94:3c:39:b8:
4d:20:21:00:e5:8f:d2:88:10:80:52:16:4c:c8:00:0f:cb:f9:
24:09:0d:9c:43:0c:47:ca:2d:ca:30:bb:2e:58:42:f0:3c:a5:
2b:32:6c:f7:9e:ae:f3:fc:31:8c:14:9b:1a:07:07:40:2a:5a:
13:65:88:a7:4c:5f:1c:d3:32:3d:15:57:12:01:e7:d8:3d:0e:
f8:df:30:b5:9d:2d:27:d3:ae:0c:1c:8c:36:3d:37:63:ad:10:
84:1d:9d:b5:5c:2d:6b:1b:44:4a:67:ec:2a:a6:e8:bc:90:50:
28:bd:ec:77:53:ec:d3:fc:6e:64:96:cf:9f:48:9a:11:4a:b6:
57:89:3a:40:b2:cf:0b:51:3f:6b:c8:a3:71:66:c6:e6:6b:24:
fc:ad:d7:da:f5:a3:23:4f:ec:db:20:57:fe:b1:74:2c:21:42:
3c:af:73:32:9f:a3:ae:e9:83:fc:29:a5:26:1c:a6:e2:42:8e:
dd:ef:da:ad:e8:49:c2:bb:50:4e:c5:2f:2d:77:2b:53:1c:59:
45:f8:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:47 2025 by rpki-client