Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/C2iFq_ySRsb3fRaYx6dVWPdFVCE.roa
File: C2iFq_ySRsb3fRaYx6dVWPdFVCE.roa (raw, json)
Hash identifier: 69ta2As22TIrCTspNzceHyv/c7WD7w1C0Gk/ed8F4TI=
Subject key identifier: 0B:68:85:AB:FC:92:46:C6:F7:7D:16:98:C7:A7:55:58:F7:45:54:21
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 019427B623A6479B16C965BB1FC09BB10508
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/C2iFq_ySRsb3fRaYx6dVWPdFVCE.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.164.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:23:a6:47:9b:16:c9:65:bb:1f:c0:9b:b1:05:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6885abfc9246c6f77d1698c7a75558f7455421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:d7:72:2c:4b:d1:69:f0:7a:40:f1:b4:28:
c5:11:97:0c:9f:71:9c:40:19:12:68:19:65:dc:ec:
d2:7b:2d:90:91:80:4b:d1:d7:8a:77:e4:3d:0e:1d:
25:7a:c7:eb:71:50:8f:b6:10:43:63:30:9b:77:31:
73:3a:11:56:e7:f4:3a:64:0d:a7:fd:68:94:a5:e4:
0b:f5:06:0d:45:84:fa:28:15:c9:62:e4:a5:22:c0:
05:77:6b:38:e0:4c:10:1e:22:37:da:d5:2d:82:44:
3b:af:09:02:db:c8:e6:43:67:d4:03:6a:57:4e:97:
23:d1:cc:d0:9d:ee:87:21:27:5d:71:42:2e:26:4a:
58:6b:3c:fb:5a:d8:e6:50:e2:be:b8:72:94:71:30:
80:9a:67:6f:f7:ee:be:17:2c:93:e4:b4:a1:34:de:
89:69:ab:1e:ac:b9:fc:82:3e:8f:9d:f7:2f:53:aa:
b3:b7:0e:06:e5:01:ec:e0:af:f2:d1:9a:07:6e:94:
34:52:d4:21:75:66:87:cd:be:14:d6:fc:30:19:eb:
be:d2:07:97:14:e1:cb:1c:f9:07:b8:7a:d8:4a:5e:
65:ac:1c:00:b9:41:67:39:63:3a:23:d1:bc:c5:b5:
fe:78:14:6d:1a:34:14:11:07:9a:16:36:81:13:a3:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:85:AB:FC:92:46:C6:F7:7D:16:98:C7:A7:55:58:F7:45:54:21
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/C2iFq_ySRsb3fRaYx6dVWPdFVCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.246.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:61:25:0c:5a:e9:4d:67:a7:6f:2b:1c:32:cf:78:87:da:
ae:3b:34:42:93:80:5d:94:01:33:04:99:7d:4a:51:97:93:9c:
f5:32:e1:4b:29:8c:f8:07:a4:1a:71:d8:e7:9f:0f:c7:c7:58:
60:5b:01:98:96:60:48:a9:40:23:64:82:23:e9:33:73:4f:5a:
c0:67:ad:94:2b:0d:45:56:f1:2c:d6:fb:33:bb:d1:4c:7d:bf:
eb:ff:04:df:53:9e:35:c5:6c:2c:19:00:07:df:ef:07:35:9e:
bf:46:12:9e:eb:50:b6:2c:8d:77:cb:1c:80:2c:36:62:41:0d:
d5:95:29:83:51:b0:df:c8:a1:8f:84:72:37:5c:f2:55:9c:29:
f9:77:12:a1:49:c7:13:cd:e2:64:9a:25:dd:b4:9b:22:91:e2:
68:74:dc:59:34:4f:0d:4d:fc:ea:30:9e:d2:e5:fa:00:b1:32:
00:9a:ee:31:bf:c1:0a:c9:59:e3:5b:6d:e4:b0:20:b5:da:75:
69:23:b0:b5:ce:97:33:7c:28:16:3d:fd:c2:da:d7:a1:05:e8:
19:84:e9:87:09:74:fa:37:96:4d:f8:23:ca:e1:ea:86:2b:f8:
e7:0b:6d:44:9f:be:08:82:26:82:a3:1e:89:4b:99:38:27:f3:
90:85:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:24:48 2025 by rpki-client