Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/6DKi1aTVZYbb8suxKu59F9EY-V0.roa
File: 6DKi1aTVZYbb8suxKu59F9EY-V0.roa (raw, json)
Hash identifier: aCEQ0N9pOw/d7rhPoYOBVnnGq8tGgxK7XfNkeEv0AW8=
Subject key identifier: E8:32:A2:D5:A4:D5:65:86:DB:F2:CB:B1:2A:EE:7D:17:D1:18:F9:5D
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 04D0F2F5
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/6DKi1aTVZYbb8suxKu59F9EY-V0.roa
Signing time: Thu 23 Jun 2022 21:18:16 +0000
ROA not before: Thu 23 Jun 2022 21:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 82.118.25.0/24 maxlen: 24
92.114.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80802549 (0x4d0f2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jun 23 21:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e832a2d5a4d56586dbf2cbb12aee7d17d118f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:27:d8:9a:9c:d5:ec:34:53:66:5f:16:83:
9e:2c:8c:d7:58:68:f2:95:da:b0:56:f1:71:92:34:
ec:45:36:18:af:e4:00:06:0a:28:06:b0:6e:10:a7:
67:22:40:25:c0:6e:d3:69:02:ff:0e:9a:81:61:03:
66:a7:2b:01:c0:f1:97:3b:b2:75:62:ce:77:03:fa:
dd:34:9d:57:06:eb:2f:76:20:f9:56:50:8e:ea:d8:
33:12:a6:c4:e4:c3:98:62:a6:39:fb:62:8e:47:ee:
4d:7b:98:f1:51:0b:43:89:54:a4:ed:87:12:0b:66:
e8:17:64:53:ca:99:ed:73:98:b8:16:86:ee:c3:9b:
0d:56:6d:b7:de:84:f2:0c:53:64:3b:bd:30:6c:0f:
63:be:d1:05:67:e6:0c:a5:7b:4e:06:cf:89:44:07:
3f:2f:96:77:14:59:d3:a4:46:d4:86:4c:e6:45:2c:
24:7d:2d:f2:8a:4b:53:72:56:1a:b4:dc:8b:df:73:
8e:15:76:f2:a6:5d:25:00:02:ff:e5:30:ca:d6:7c:
50:ee:1c:ff:93:45:33:86:b7:48:11:81:e1:10:f6:
3d:b8:1d:79:c3:dd:34:85:1e:d2:b6:ba:10:47:fd:
11:2e:b7:85:2a:59:24:33:3d:42:de:96:5a:5c:59:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:A2:D5:A4:D5:65:86:DB:F2:CB:B1:2A:EE:7D:17:D1:18:F9:5D
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/6DKi1aTVZYbb8suxKu59F9EY-V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:46:3c:af:b7:f8:66:f2:30:b5:b9:0a:48:9d:69:83:f9:f0:
78:61:67:1d:5e:3f:b6:5c:a8:c2:19:e4:68:77:17:75:9b:e3:
f4:52:ca:35:ac:f5:1b:64:6c:98:6a:3c:a4:5f:80:5f:94:d3:
22:e0:50:18:3b:da:fe:4d:6b:3f:7d:40:a3:f0:7d:42:b3:b8:
7b:b7:c5:0d:b6:b2:32:64:7c:bd:4f:2d:20:fa:fd:ea:5c:f3:
95:ad:be:3c:25:06:4c:6c:8d:e8:36:fc:f9:24:54:63:11:d4:
90:9c:c5:3f:0e:7a:b9:70:0f:d2:1f:1e:d6:11:6f:22:41:11:
94:d2:94:68:5e:a0:16:a4:c1:1b:35:02:50:f8:25:32:aa:8f:
e9:fa:98:eb:d6:ad:53:35:7e:e8:eb:45:3e:56:17:b4:ac:c8:
23:8b:ae:35:2d:99:78:4c:17:b7:4b:a2:91:7d:7c:19:45:1a:
d2:5b:f9:6e:9a:b8:8a:67:b2:f3:35:15:bb:00:cb:b5:10:e5:
e2:57:1a:b6:e2:13:d9:ef:a8:8e:4f:eb:9c:94:28:df:05:6a:
9e:b0:b2:30:3b:db:96:67:17:ca:75:42:09:23:a8:35:26:cd:
c8:11:fb:6d:96:4e:b8:fb:78:3b:bb:6f:c3:ef:69:4d:50:3a:
97:dd:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:53:18 2025 by rpki-client