Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6KiaJkQQDjA9HgwOnkycQNbERP0.roa
File: 6KiaJkQQDjA9HgwOnkycQNbERP0.roa (raw, json)
Hash identifier: GFWpRdvXemODImjCgRgG/O85KFkjqQcdXbtEQJxymK8=
Subject key identifier: E8:A8:9A:26:44:10:0E:30:3D:1E:0C:0E:9E:4C:9C:40:D6:C4:44:FD
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7943E202A8FF65FC296DFC335805920
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6KiaJkQQDjA9HgwOnkycQNbERP0.roa
Signing time: Tue 02 Jan 2024 00:30:30 +0000
ROA not before: Tue 02 Jan 2024 00:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5580
IP address blocks: 185.162.112.0/22 maxlen: 22
195.143.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3e:20:2a:8f:f6:5f:c2:96:df:c3:35:80:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8a89a2644100e303d1e0c0e9e4c9c40d6c444fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:19:61:01:ea:8e:d0:a6:1c:76:7e:4e:e7:
ee:52:e1:78:d1:1c:07:b2:f2:8f:a5:03:ae:db:c8:
89:07:6a:c0:a1:fb:ac:c9:61:e4:40:8f:74:06:09:
9b:aa:3b:07:94:45:c3:12:14:65:06:a5:26:d7:a3:
36:cb:f4:89:05:f8:3f:96:98:83:62:e6:b0:bd:92:
e7:1d:ed:9b:e7:72:c9:67:ef:50:e3:f8:27:14:d0:
1a:6c:3c:41:f5:38:5a:d1:69:01:23:c5:d9:54:69:
52:5b:04:93:d3:54:0a:77:b6:f9:b0:cb:19:5d:78:
a5:70:93:22:20:eb:ef:52:ab:6f:61:ac:19:27:5d:
12:8b:af:41:12:ce:8f:bb:7f:d3:ac:51:4c:86:67:
cf:62:76:3e:c9:a2:fc:44:db:68:bc:3a:46:65:5e:
0b:48:34:53:9d:4f:13:8d:76:fe:f4:d4:53:4e:c7:
04:fc:33:71:2b:a8:02:ac:57:b1:cb:8c:a0:9a:02:
e2:95:32:0d:65:0e:03:27:90:e7:fb:f0:54:9e:05:
a4:6e:4c:fa:e7:13:90:23:43:45:0a:95:d8:33:77:
6a:81:96:a8:dd:b3:3e:62:7a:8b:3e:35:b0:c7:3d:
03:db:44:23:9e:e4:88:e6:fa:3a:31:a4:b4:c3:f3:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:9A:26:44:10:0E:30:3D:1E:0C:0E:9E:4C:9C:40:D6:C4:44:FD
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6KiaJkQQDjA9HgwOnkycQNbERP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.112.0/22
195.143.68.0/22
Signature Algorithm: sha256WithRSAEncryption
30:5c:0e:c1:02:24:3f:38:64:fb:84:0d:04:3a:8a:76:30:50:
1f:64:46:0f:eb:cd:e7:9a:83:de:9a:68:54:26:44:6c:f9:99:
e9:cd:23:c7:f7:fa:4e:68:ca:bd:e4:fb:5c:17:f6:5c:05:64:
10:2f:22:d0:92:fb:d7:e5:a6:41:36:af:26:75:5b:23:f7:d0:
b6:34:7b:09:83:d8:f8:e9:43:b5:67:de:5a:9f:fe:d1:94:76:
c7:65:04:91:d0:76:5a:9b:b9:4e:f0:24:e6:de:68:ca:e9:10:
13:e1:eb:3d:b3:d5:f0:83:98:84:9b:a3:87:7f:0e:95:a9:64:
b0:9b:48:a7:46:68:c5:74:16:38:94:e4:c3:b7:02:77:1d:4e:
d2:01:bc:88:f7:68:7c:fc:2c:01:0b:f3:54:4c:bf:83:a3:3a:
69:e1:0d:d2:9a:b2:0b:6d:71:1c:80:27:79:e0:b5:51:49:d5:
70:f2:68:30:43:d5:e2:9c:81:7a:ff:0d:64:6e:8c:01:d0:6c:
d0:26:6c:4a:32:bb:5d:ed:7b:cc:3c:87:79:77:b8:f7:a6:78:
4f:e3:dd:97:c2:61:e6:53:76:bf:09:e6:60:d7:36:9e:fe:f9:
b8:d5:8f:b5:b6:90:75:a9:17:ce:31:f8:ee:80:5b:47:0a:bd:
cd:f5:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:48 2025 by rpki-client