Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E6dBEonSFi714uRnE6BwAnc_fAk.roa
File: E6dBEonSFi714uRnE6BwAnc_fAk.roa (raw, json)
Hash identifier: pu4hHIdPYw0+owjFKUbm/+HP6YqmNQxJYmN78hW01us=
Subject key identifier: 13:A7:41:12:89:D2:16:2E:F5:E2:E4:67:13:A0:70:02:77:3F:7C:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193EBC2EBAB19CE9160683D2B7F012C970D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E6dBEonSFi714uRnE6BwAnc_fAk.roa
Signing time: Sun 22 Dec 2024 00:27:20 +0000
ROA not before: Sun 22 Dec 2024 00:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:eb:c2:eb:ab:19:ce:91:60:68:3d:2b:7f:01:2c:97:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 22 00:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a7411289d2162ef5e2e46713a07002773f7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:70:9a:ea:72:e5:12:c8:65:56:cf:ce:3e:
55:42:f1:c0:c6:04:e3:a1:37:87:87:1f:ff:4d:1b:
ec:3a:77:c4:ea:31:02:d4:42:83:af:31:8a:0f:ac:
e7:c5:f8:82:64:1e:60:f7:8e:9d:61:61:f0:3a:09:
c7:d3:32:17:af:60:5b:fb:81:cc:11:81:ed:4f:71:
2c:24:85:ab:21:fa:4b:8e:17:ac:f8:4d:71:75:de:
d6:2d:68:6d:93:44:94:6d:fb:4f:b6:a3:e3:c3:29:
62:6f:e0:a0:7e:c9:05:d8:f5:55:d3:67:6c:ff:b6:
5e:ef:b9:1a:1a:8b:b3:14:9b:0d:0e:e8:a2:a0:a1:
c8:f6:ae:ac:e2:46:24:8e:af:9f:21:3a:71:dc:93:
1e:9d:12:dd:e0:0f:78:81:f3:b2:fb:f2:ed:0f:36:
2e:66:5f:d3:9b:06:4a:90:90:5b:c5:4a:d4:9d:aa:
14:73:21:6e:7d:fc:d2:ae:57:7b:9a:d5:8c:65:77:
df:81:40:a6:a6:55:f3:9f:20:a3:df:43:fe:76:e6:
1e:ca:29:68:1c:51:c3:b9:9a:f0:26:c9:b6:67:3b:
b4:c2:09:e4:02:6b:ee:65:72:8d:15:be:0b:55:d2:
9a:81:6a:da:85:b9:b7:b5:3c:6c:13:79:89:fc:9a:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:41:12:89:D2:16:2E:F5:E2:E4:67:13:A0:70:02:77:3F:7C:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E6dBEonSFi714uRnE6BwAnc_fAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
77.90.57.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:13:cb:54:1c:a4:e0:29:af:54:40:5d:06:54:4b:17:b2:49:
c2:84:38:2d:37:0f:c4:d6:af:a3:06:6a:aa:cd:65:e4:14:d6:
1d:88:0d:cf:ae:1e:ac:b3:b5:86:33:86:89:51:53:5a:33:93:
af:d6:73:27:c9:ce:10:f0:bd:9c:42:fb:d6:94:2e:0e:77:38:
22:ff:c0:d7:6c:41:6a:f7:3a:c9:09:59:b3:6a:e8:98:96:70:
22:d3:d9:57:de:59:17:11:51:e4:2c:fa:06:e8:55:09:f6:1d:
64:67:0a:38:d4:a5:ab:fe:23:b4:01:dc:e9:de:c4:55:1c:a1:
42:ab:78:d4:95:1a:12:41:09:f7:d4:d8:6f:7c:c8:d5:82:7c:
31:ec:7e:c3:10:e9:5c:19:f0:3d:79:2c:87:17:39:4e:93:13:
01:95:24:4c:a5:04:17:f6:86:a0:37:ae:1f:06:c5:19:6e:2b:
57:77:d5:9d:44:3b:49:aa:22:c2:a3:53:d8:11:b0:84:7a:c4:
45:ae:e2:97:b4:dc:13:75:6f:0d:36:cd:72:be:57:da:64:78:
0b:db:fe:68:82:96:68:f9:dc:2b:8f:82:1d:c2:78:9f:31:9d:
ba:df:a8:fc:01:58:48:a6:3a:e3:1e:8f:33:f8:4f:f2:16:9c:
b7:1b:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:17 2025 by rpki-client