Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6iIJBBxnDymba3R2tMnsfZvexTg.roa
File: 6iIJBBxnDymba3R2tMnsfZvexTg.roa (raw, json)
Hash identifier: 4TZA7nelv34D37fdZobJaYYF83jUWydLXJQsKuPAYXU=
Subject key identifier: EA:22:09:04:1C:67:0F:29:9B:6B:74:76:B4:C9:EC:7D:9B:DE:C5:38
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC801C19C9CE29C2C420CCDE0C1B29A21
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6iIJBBxnDymba3R2tMnsfZvexTg.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 701
IP address blocks: 176.46.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c1:9c:9c:e2:9c:2c:42:0c:cd:e0:c1:b2:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea2209041c670f299b6b7476b4c9ec7d9bdec538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:ad:1d:4f:6e:1b:ba:e8:be:e7:ba:a5:b8:
d9:15:90:a9:84:c9:fd:1c:b6:b1:80:03:8b:7c:f9:
0f:7a:af:23:69:41:33:6c:06:fe:67:33:7a:7e:e3:
ac:3e:aa:a2:cc:83:27:e7:ca:43:6a:93:e2:b3:4a:
fb:fb:d2:db:79:82:ab:4f:f8:d5:db:2b:21:2a:0f:
2b:01:6c:8d:8b:a6:61:a1:7f:7d:6f:c5:83:8c:32:
68:95:72:7d:14:cb:1e:62:7e:58:ca:9e:6b:64:dc:
25:1b:fa:29:53:05:cf:b4:38:c5:a5:1a:98:d1:1f:
42:fd:5e:b7:c0:9c:8a:13:ad:9c:70:5d:3c:28:91:
43:e2:4d:57:82:5e:65:73:23:73:5f:90:69:5b:fc:
62:27:c9:c8:fb:d7:7d:60:37:aa:85:ed:f8:4c:ff:
c7:ed:0e:10:84:e1:53:72:d9:b4:ea:3a:6e:e4:79:
21:a9:f3:cd:ed:54:41:37:e5:1d:15:60:5a:54:83:
3c:0e:51:0d:3c:97:0f:ab:eb:7b:92:61:23:d0:da:
37:c7:20:aa:cb:13:00:93:81:3c:c2:89:21:1c:8c:
7e:ff:70:74:9a:99:c0:4b:ac:3f:a4:44:0e:c7:be:
e1:29:f4:f7:a2:f1:a0:f5:92:31:ac:01:7d:af:13:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:09:04:1C:67:0F:29:9B:6B:74:76:B4:C9:EC:7D:9B:DE:C5:38
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6iIJBBxnDymba3R2tMnsfZvexTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.146.0/24
Signature Algorithm: sha256WithRSAEncryption
70:aa:6d:6e:a7:de:78:6b:3d:cd:9e:26:a6:99:ae:4e:64:a1:
fa:ef:6c:86:e1:ba:27:ee:a9:43:90:c6:b8:db:77:f5:99:50:
db:c9:cd:bc:61:eb:0a:b9:44:b8:38:9d:70:15:3b:88:4d:6a:
8e:3f:9a:c1:ff:12:36:fe:8a:76:ba:8a:8b:8e:1b:ec:19:9c:
69:0b:12:f1:7c:a7:45:2c:a0:9b:51:d3:ff:ff:bc:6e:f8:b9:
36:37:50:24:63:ef:67:b4:b7:1f:94:37:4a:db:31:67:bb:d2:
4d:68:6b:3f:f4:c7:bc:77:27:a3:eb:54:98:e5:47:9d:fc:20:
a1:93:69:ef:4b:52:44:4b:4a:c4:4e:c5:97:8a:71:96:10:ee:
93:64:79:a7:26:ad:0d:9f:2a:7f:dd:ff:e7:ac:fa:42:d2:e7:
46:76:46:c2:05:53:92:cb:3c:ca:4c:01:b3:c6:07:00:69:0d:
b2:2f:b3:50:0b:bc:cc:77:0d:d8:f5:9b:35:87:8c:c2:4c:f1:
6b:38:11:27:d3:a0:d1:1d:f4:71:08:12:e9:d5:07:fb:95:17:
9c:c2:32:b0:56:5a:15:02:c4:31:bf:57:4d:8f:27:48:91:5d:
5a:b0:22:dc:3e:2f:06:a9:d0:b4:d1:96:c2:6d:d0:89:82:56:
58:cb:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:10 2025 by rpki-client