Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa
File: C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa (raw, json)
Hash identifier: dVnxKmSOxpULCnBph8ARAXzts2lzvI7njmrNqMweylU=
Subject key identifier: 0B:AB:F7:CF:C9:06:6E:91:AD:01:88:44:1A:F6:C8:03:D3:CE:78:9E
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 0194274863269167166E9D468CE47A48921A
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.135.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:63:26:91:67:16:6e:9d:46:8c:e4:7a:48:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0babf7cfc9066e91ad0188441af6c803d3ce789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:50:9a:40:0a:a0:52:c6:79:da:28:90:6e:
02:6f:17:5e:fd:51:63:b9:7d:02:82:d9:83:e7:62:
fa:51:07:ef:42:8c:4b:8e:a1:6a:88:a0:08:a0:bd:
d4:1a:f8:f5:cf:f6:2b:0c:c3:f1:6d:65:8d:7d:8b:
f6:d9:73:28:32:76:47:d4:66:bf:4e:38:bc:c4:95:
9a:60:d5:8f:a9:a0:db:1e:13:10:5b:af:62:f8:33:
70:1e:86:bc:51:31:aa:3f:f7:e3:44:7b:73:b5:c1:
18:bf:4a:4d:65:cc:bd:d4:be:53:e1:97:f8:4d:90:
38:eb:32:ff:6a:02:63:09:a9:61:5f:f1:e4:18:d6:
7f:1d:0f:df:f9:e9:68:27:98:8a:58:cd:f2:4b:de:
f1:ed:a1:d0:e3:65:a9:ec:a2:73:46:a1:c0:39:fc:
80:e3:15:b4:dd:96:fd:ff:7f:96:d5:0d:cc:2f:86:
d0:12:bb:d2:f8:00:dd:86:04:dd:7c:6f:45:0b:40:
ce:e3:06:1a:fc:49:85:1f:0b:01:cf:bd:55:b7:4e:
6f:0b:88:97:3b:ee:ed:bd:39:bf:21:49:98:4d:23:
71:36:bd:b5:e7:7a:ba:41:94:0d:f7:29:dd:78:1d:
f1:c6:39:81:c7:76:34:64:aa:d0:4e:9f:ed:e5:3f:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:F7:CF:C9:06:6E:91:AD:01:88:44:1A:F6:C8:03:D3:CE:78:9E
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:03:26:2f:b4:7d:fd:6e:78:f1:25:96:bb:05:f2:d9:10:e8:
1c:07:fc:31:29:9f:8e:fe:a6:b7:a8:00:76:e9:53:0f:5d:bf:
04:8c:a1:c4:68:8e:7a:66:c7:e1:8f:e8:7d:23:96:5c:9c:40:
49:64:1d:d3:8f:69:53:3c:fd:e0:e9:e3:3c:5e:b0:8c:ea:e5:
24:bd:df:82:86:f8:02:f1:e6:73:94:62:36:49:15:ef:76:76:
b4:03:79:57:b8:e6:f5:ca:43:25:70:0a:6d:27:df:57:71:2e:
9a:ec:a9:4e:21:69:64:cf:b6:1d:32:f3:d3:b8:08:bb:d6:10:
5d:37:1f:84:da:06:2d:53:cd:58:62:44:03:67:83:f3:1b:01:
4e:dc:8c:0c:13:99:93:f1:b5:de:3c:e9:5c:7c:15:b2:2e:7c:
8d:fe:80:7e:d6:03:7f:6e:da:35:00:3d:08:9e:ec:a5:3c:04:
34:f5:56:96:22:b5:e1:9e:80:c2:b1:06:a9:05:eb:b8:ce:35:
39:fe:8a:51:b3:49:cd:62:0d:a3:2e:18:1d:4d:15:d7:18:5c:
52:db:b0:27:ca:fc:82:45:14:b1:4c:27:17:29:a9:4f:3f:8c:
16:3f:72:88:53:24:6a:d1:4f:19:68:cd:fa:52:9b:6d:e6:68:
b7:43:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:11 2025 by rpki-client