Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6RvOw1LtUdhAaKO_Ckr5MwfM4lQ.roa
File: 6RvOw1LtUdhAaKO_Ckr5MwfM4lQ.roa (raw, json)
Hash identifier: OBPlhQRupA8sD5YpdqwsZljUrR5zPr51kR6gf5hTiGI=
Subject key identifier: E9:1B:CE:C3:52:ED:51:D8:40:68:A3:BF:0A:4A:F9:33:07:CC:E2:54
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBCEA121B86DD766D726AC3F2E2451
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6RvOw1LtUdhAaKO_Ckr5MwfM4lQ.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 139.28.48.0/23 maxlen: 23
139.28.50.0/23 maxlen: 23
193.32.204.0/23 maxlen: 23
193.32.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ce:a1:21:b8:6d:d7:66:d7:26:ac:3f:2e:24:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e91bcec352ed51d84068a3bf0a4af93307cce254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:ec:09:4b:27:0a:26:0c:0f:01:02:a4:6e:
80:e8:29:5b:51:77:9e:aa:9b:f3:95:b5:4e:3d:8d:
f9:2e:9b:d4:21:c8:4d:29:00:df:47:53:27:e3:ad:
f1:d2:1e:d6:ed:1f:12:af:0f:12:4c:b4:db:a8:e1:
24:09:c0:1a:25:bf:0a:bc:17:15:bf:18:6b:17:28:
8b:62:d3:09:18:8d:8a:40:ec:9b:c5:da:e8:f4:80:
f5:6c:b9:56:e8:8d:8e:f7:bc:67:43:83:90:2f:4a:
25:00:93:2a:e0:98:41:21:d0:fd:f6:12:ce:db:f6:
d6:a4:99:0c:2a:6a:dd:1c:a3:5b:b7:e1:39:87:f8:
fe:f5:a2:ed:57:40:5f:18:85:e7:52:ef:43:6b:33:
d4:95:d6:da:1b:09:23:1c:90:4c:88:71:98:48:e8:
3e:a2:03:35:a5:c3:2d:4f:09:d2:17:c3:4a:a5:48:
07:9a:fe:b9:05:11:c1:f1:7b:73:2d:2b:c9:0e:42:
e1:41:51:0e:72:9d:82:09:b7:d9:51:f4:57:f9:f9:
5f:98:5a:e6:af:fb:c0:ed:49:a4:fb:25:8d:fa:ea:
57:22:e1:ae:de:53:64:8b:81:71:19:77:9d:f7:a9:
22:5f:e0:15:f3:35:2d:82:97:34:a5:11:b9:64:08:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:CE:C3:52:ED:51:D8:40:68:A3:BF:0A:4A:F9:33:07:CC:E2:54
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/6RvOw1LtUdhAaKO_Ckr5MwfM4lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/22
193.32.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:91:31:a9:26:8c:58:fc:0b:78:6a:d4:b1:5b:53:22:03:33:
18:57:13:34:ef:31:e6:96:2a:49:64:f4:3a:7e:04:7b:39:a1:
30:27:45:2f:03:ac:57:90:de:09:25:5b:6f:ac:35:d8:23:c9:
bc:36:33:bb:3d:6b:d5:1e:24:bf:e1:cc:02:5e:96:89:84:49:
fc:b3:50:48:02:e8:35:38:a7:e2:4f:64:c7:45:ab:f5:c2:cb:
33:6c:f7:ee:5b:70:be:fd:86:a2:88:bf:1d:1f:8b:48:00:f2:
03:4c:8a:68:26:8d:ab:88:a7:c8:ee:22:b1:0b:4c:d1:dd:ad:
c0:82:0d:92:e6:aa:02:78:5c:e4:eb:e9:20:47:d5:a6:b7:66:
26:25:5d:d7:2d:40:0a:38:ca:6a:f0:fd:2a:70:3f:28:dc:be:
98:64:20:de:8d:60:29:e6:24:01:3e:06:7b:3c:33:db:3a:63:
83:0f:10:d7:73:b3:59:dd:d9:18:cd:83:c1:2d:22:cc:a4:2c:
d1:78:27:2b:ec:26:71:08:a8:76:f4:12:be:0b:4e:f8:18:d5:
36:e3:ba:89:cf:f8:a3:69:5e:1b:51:ab:20:f2:bd:7f:20:15:
71:8e:b9:78:b8:f3:ef:45:18:c5:2b:d6:ca:d2:20:5e:86:b1:
4e:f8:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:01 2025 by rpki-client