Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6N6VjIdhmcp_BvL5JiAohsoC11k.roa
File: 6N6VjIdhmcp_BvL5JiAohsoC11k.roa (raw, json)
Hash identifier: Sw1Y1VrC8zI/udGVrtq2/Q3r+6nwdkSA+IAk/5ABQMA=
Subject key identifier: E8:DE:95:8C:87:61:99:CA:7F:06:F2:F9:26:20:28:86:CA:02:D7:59
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01936D73426A3C885166D981B374999ECF86
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6N6VjIdhmcp_BvL5JiAohsoC11k.roa
Signing time: Wed 27 Nov 2024 11:48:10 +0000
ROA not before: Wed 27 Nov 2024 11:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:73:42:6a:3c:88:51:66:d9:81:b3:74:99:9e:cf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 27 11:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8de958c876199ca7f06f2f926202886ca02d759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:90:db:82:15:b0:a9:47:87:81:df:e8:39:bf:
23:07:46:ec:98:53:4a:20:77:64:69:11:4d:7e:e0:
e1:9d:c4:7a:cd:8b:16:b3:e1:10:14:18:f5:ab:15:
06:ca:59:a0:5f:96:34:42:15:ab:2d:40:d1:64:b9:
70:f1:ac:f8:e1:d5:65:3d:9b:92:e1:00:75:e6:27:
a1:cc:99:e2:89:14:77:1c:29:ce:eb:25:6a:35:dc:
99:64:d8:21:8e:7a:55:bb:c1:4f:7d:5d:2e:db:ee:
21:6d:85:7c:b0:7e:8b:e0:53:b6:fa:a8:8c:fb:0b:
ac:5f:e5:3c:8e:00:7b:90:1c:0e:40:04:b6:33:12:
fd:20:87:96:57:42:cb:0f:b4:a8:37:c5:b6:c9:12:
58:80:54:bf:a9:00:d5:14:03:d1:76:c9:bc:c9:87:
03:3f:25:3d:09:30:00:fe:8e:8b:a3:71:6f:88:b0:
93:36:a4:b1:c4:84:69:aa:3f:d5:d6:0d:3a:b2:c0:
a2:6f:ce:b5:df:8e:48:f0:6f:d7:ad:c1:68:4e:54:
6d:c7:a0:0e:9f:5f:a7:ed:24:68:b5:e1:ca:48:8d:
24:fa:cf:f7:8b:e0:00:8c:de:cd:8e:a9:41:89:97:
7d:d6:8f:b1:9f:fc:26:ac:e9:c7:bb:59:d1:ec:d8:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DE:95:8C:87:61:99:CA:7F:06:F2:F9:26:20:28:86:CA:02:D7:59
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6N6VjIdhmcp_BvL5JiAohsoC11k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0-85.235.74.255
93.190.8.0/24
193.17.5.0/24
193.111.76.0/24
193.111.78.0/24
217.18.208.0/24
217.18.210.0/23
Signature Algorithm: sha256WithRSAEncryption
69:04:c4:63:d8:ba:12:b2:86:6b:03:65:16:93:16:7a:61:f4:
c9:68:8e:14:ea:25:f5:9d:fe:d8:a8:e4:16:ce:ca:18:11:f8:
67:8a:6f:8d:7c:99:61:5e:17:f1:16:5b:16:2a:da:f6:1d:f0:
0e:31:65:4c:c1:2a:c6:1c:66:4e:a5:d2:81:13:c0:18:ab:06:
ac:50:cf:91:f4:37:8d:fc:81:b3:a9:e7:29:b4:eb:f7:44:90:
bb:45:c3:58:1f:b8:32:73:99:34:74:68:15:d9:8b:ef:75:3c:
1e:2b:86:e2:84:00:26:c9:f7:ae:2f:e9:90:d5:c9:43:8f:f4:
2e:f0:34:22:4a:33:0d:ff:75:95:cc:c4:80:db:84:5d:22:04:
08:04:fe:fa:d0:f2:6a:d7:ea:d5:26:c8:f4:6f:8e:0b:e1:ec:
f7:84:fd:ac:4f:91:86:0b:18:f5:d9:43:f6:d6:db:58:56:0a:
1b:cb:6f:d3:6e:2e:ab:fa:3a:3b:49:ea:bd:de:19:5e:1c:0b:
eb:a3:7d:89:bb:bd:f6:b9:d2:c7:5a:51:77:92:c6:88:1e:9f:
19:ae:37:44:7a:23:64:7c:59:0f:45:ab:1a:e2:c0:91:bb:f0:
e1:69:1a:ed:f4:f0:37:28:ab:31:11:f0:85:2d:19:aa:8c:77:
8a:14:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:44 2025 by rpki-client