Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6-w6OJLH_VepB0TnaMyNMIQKY2U.roa
File: 6-w6OJLH_VepB0TnaMyNMIQKY2U.roa (raw, json)
Hash identifier: IhZ9ePIAO2orX/FNa4tvV84lM8eXsukhEzRjlszkSNA=
Subject key identifier: EB:EC:3A:38:92:C7:FD:57:A9:07:44:E7:68:CC:8D:30:84:0A:63:65
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D3708BD1C9BE8D7A3D8A46B279A1
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6-w6OJLH_VepB0TnaMyNMIQKY2U.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202855
IP address blocks: 212.243.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d3:70:8b:d1:c9:be:8d:7a:3d:8a:46:b2:79:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebec3a3892c7fd57a90744e768cc8d30840a6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:44:53:8a:dd:41:e2:9a:ff:ae:51:5b:1c:
e4:35:e2:be:b1:43:62:b8:48:e0:17:e6:fe:84:95:
fb:4e:aa:cb:bc:6e:41:d6:6a:b4:b7:f5:26:c8:5a:
c9:29:60:66:2e:a4:d8:9d:5f:26:8b:e7:95:9e:0e:
e8:75:72:63:53:26:05:22:74:7f:a3:df:15:92:6b:
6c:9a:c0:f7:80:e2:0d:0f:d8:82:e4:86:c3:77:18:
73:1b:a5:d4:c3:20:9b:3d:3c:4b:fe:99:b0:9e:30:
27:2b:b7:74:73:0f:73:1f:05:b1:a5:e3:9e:f1:46:
ef:43:62:ad:21:f4:05:e3:a6:8b:5d:ce:dc:5f:d6:
1f:68:b1:2a:b4:25:a7:cc:6a:e5:be:1c:4f:25:4c:
a5:0c:9e:6b:51:9c:14:aa:2d:b8:00:d6:32:66:cf:
52:7b:a8:2e:bb:82:49:7c:da:25:34:7f:eb:db:c3:
a5:d7:08:3e:13:59:42:3f:0e:6d:08:16:a0:4c:30:
3b:7a:d6:91:ab:09:15:71:eb:bc:b0:b3:50:fb:28:
fc:b6:cb:46:bc:79:9c:d1:61:c7:6f:89:90:db:f1:
1b:ca:ba:e8:ca:3e:ed:80:2a:5f:31:82:96:a8:21:
d6:d6:33:63:4d:c7:e9:30:5a:ca:10:bb:90:e1:1c:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:3A:38:92:C7:FD:57:A9:07:44:E7:68:CC:8D:30:84:0A:63:65
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6-w6OJLH_VepB0TnaMyNMIQKY2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:be:8a:74:3a:18:89:d1:46:1a:b3:3b:2f:3d:bc:13:3e:cb:
4f:e1:93:e5:54:ed:71:d2:dc:bb:f1:84:b8:4e:59:a1:d0:f0:
74:6a:eb:ef:3e:cd:9f:90:e6:52:7c:60:46:61:6f:0c:b0:de:
8c:bf:b0:78:9d:2d:ab:bd:e9:24:de:5c:e2:99:2f:7b:a4:39:
b3:f2:f9:ec:48:48:91:41:3b:6b:47:35:72:99:0e:0a:19:c2:
6b:2f:04:d2:de:d2:b9:14:5a:6a:e0:08:ed:ca:89:d2:5a:29:
05:3a:5f:83:0f:e3:4a:7b:33:5c:dd:20:d4:93:54:b8:bb:4c:
1e:dc:1a:6f:dd:2e:a9:2f:de:6f:6b:bf:80:dc:c6:c0:d8:a2:
15:78:98:3f:46:0c:8e:fa:20:25:3b:b1:c5:08:f1:2a:2a:24:
c3:10:a4:0b:7f:0f:a6:f1:aa:2e:28:aa:48:4f:d0:e0:66:c8:
a1:5b:b4:b0:fe:1e:89:b3:ef:08:03:8c:c3:89:e1:81:bf:85:
27:c9:f8:17:30:04:12:63:e6:75:f1:28:08:07:06:8e:af:7f:
bb:e2:24:0f:6e:d0:75:65:7b:1f:1a:40:88:33:e0:a5:0b:ab:
03:70:ef:34:35:10:83:40:14:b0:c4:c7:26:fd:b1:5d:28:80:
9b:4e:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:03 2025 by rpki-client