Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/av6NdcYa_8jP2zPJGYkplUlgAhs.roa
File: av6NdcYa_8jP2zPJGYkplUlgAhs.roa (raw, json)
Hash identifier: T9r78ljQ1lQbmbu3SjlZPoKQQHxvdbxb4CFWVF/jiic=
Subject key identifier: 6A:FE:8D:75:C6:1A:FF:C8:CF:DB:33:C9:19:89:29:95:49:60:02:1B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E98081
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/av6NdcYa_8jP2zPJGYkplUlgAhs.roa
Signing time: Sat 01 Jan 2022 16:02:00 +0000
ROA not before: Sat 01 Jan 2022 16:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206466
IP address blocks: 194.209.31.0/24 maxlen: 24
195.65.142.0/24 maxlen: 24
194.6.170.0/24 maxlen: 24
194.6.173.0/24 maxlen: 24
194.209.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357480065 (0x50e98081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6afe8d75c61affc8cfdb33c9198929954960021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:2a:ba:de:03:d7:9c:4d:d0:23:c1:ac:e2:
40:67:8d:e1:8a:ac:a4:e1:e4:e6:38:84:ad:59:c8:
2f:bb:24:c8:75:99:14:26:12:7f:48:ab:9e:d6:5c:
51:42:1a:71:c9:72:36:5c:58:b3:bf:8d:18:bd:39:
34:78:60:66:2d:f8:b8:a0:18:b7:02:f5:90:16:71:
4e:5a:9f:ae:37:2a:19:53:3c:85:2b:35:c6:c8:28:
e7:46:14:85:3e:5d:32:82:ea:33:2f:b2:01:48:fb:
49:45:24:db:6d:1a:13:87:eb:a9:6f:c6:96:45:d9:
66:32:ac:de:04:b8:98:ae:45:f1:01:8c:de:4d:87:
da:23:6a:a7:bc:b1:3b:16:2d:a8:33:00:2d:d7:e8:
4b:20:dd:33:59:1f:a5:94:01:7d:a2:cd:41:81:cd:
75:cf:3e:1a:cf:aa:0b:d3:09:92:ba:f5:83:a3:00:
49:22:81:08:95:33:74:47:47:21:4f:1b:2f:a1:e3:
6f:87:27:b6:80:ed:7a:8f:ca:b3:88:99:4e:2a:72:
36:39:95:63:47:e8:e0:af:7c:cc:ea:7d:a1:61:13:
fa:78:62:fa:67:f9:d8:74:9d:ca:a5:f0:f4:4f:f9:
43:29:ea:98:a9:30:27:d4:30:80:4d:bb:3f:57:e6:
c9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:8D:75:C6:1A:FF:C8:CF:DB:33:C9:19:89:29:95:49:60:02:1B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/av6NdcYa_8jP2zPJGYkplUlgAhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.170.0/24
194.6.173.0/24
194.209.31.0/24
194.209.199.0/24
195.65.142.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f0:fa:bf:96:8f:13:bd:ad:81:15:ca:fb:3c:5c:a5:2b:e6:
19:d7:50:74:5f:f3:b8:ec:57:52:c8:87:17:58:4b:b6:e7:43:
97:b0:f1:46:80:07:8a:aa:a0:91:d0:0d:e1:24:f0:3f:64:14:
39:f1:93:5a:bf:62:5c:62:ac:1f:4d:a2:ba:f8:f1:4a:b3:da:
5a:db:c9:8b:78:42:62:c0:15:3a:2a:84:8c:75:a8:ec:85:68:
f2:1c:ef:47:76:f9:12:b4:e3:f0:32:51:23:51:19:ca:9a:ee:
f3:00:e4:b1:a0:9b:12:1a:8f:5a:53:00:43:9a:9d:11:3d:1d:
bb:a2:ac:f9:ec:89:7f:84:30:75:1f:7a:3d:ec:1b:ad:d9:23:
9a:3e:6a:cf:6b:c8:0f:79:92:8c:86:f9:c1:22:65:8e:17:ea:
52:10:90:7c:90:9c:3d:34:5f:ff:99:bd:a9:73:71:10:49:65:
ae:cb:04:16:15:a9:bc:c2:66:80:5b:27:c6:05:e8:3f:f5:cd:
18:d8:5f:2d:6a:9f:5c:b4:58:6a:fb:b4:85:26:48:4b:f6:0c:
bd:17:14:a2:79:fc:42:66:5b:52:9c:10:b2:26:a2:1b:9c:e6:
f4:59:23:37:ff:00:6b:00:7e:d1:25:6b:e0:bd:99:66:75:e6:
80:1f:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:31:52 2025 by rpki-client