Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa
File: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (raw, json)
Hash identifier: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=
Subject key identifier: EB:FE:07:C1:CE:AD:CC:17:66:E2:5F:91:F2:69:46:58:45:78:37:DB
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E04492E1440AFF3128D6E352E7D9A
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24891
IP address blocks: 82.222.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:04:49:2e:14:40:af:f3:12:8d:6e:35:2e:7d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebfe07c1ceadcc1766e25f91f2694658457837db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:2e:05:17:4e:4e:7b:1c:30:c8:88:25:15:
a5:95:b3:e3:bd:18:c8:1e:14:95:1f:58:7f:9e:3c:
8c:de:b5:a3:62:c8:0c:61:70:ba:cc:35:33:f2:ec:
e6:2d:a8:98:f4:92:04:bf:20:2f:fe:68:b4:53:e1:
aa:ec:4a:ac:36:f4:5c:0a:4c:87:fe:8a:d4:22:39:
16:2a:13:4e:3d:de:33:07:32:91:57:4c:88:c0:9f:
7e:e2:2b:1e:13:c2:04:33:2b:35:f6:bf:a7:7b:fb:
b5:2a:e2:f7:a2:ff:6d:ff:03:e4:21:30:1e:01:89:
91:d6:89:37:41:60:57:91:5b:48:28:80:8f:db:10:
68:20:87:0c:67:1e:19:bb:8a:20:7b:8d:e4:a0:1e:
42:0f:92:b8:27:2b:f2:49:3d:81:09:51:aa:21:97:
ce:b7:76:e4:32:74:4b:b4:9c:c1:b9:2f:ee:5f:a6:
a1:69:f7:cd:c9:98:77:2b:61:77:a3:19:c8:6b:75:
e5:74:b9:07:a1:20:6f:67:ea:79:6a:4c:0c:1c:01:
0b:4f:c1:1b:e9:ea:04:6c:e6:91:df:59:94:cd:d0:
47:f4:c1:f1:1f:78:74:c5:69:dd:b1:59:84:fa:f7:
14:51:91:99:59:d7:2e:b5:d7:26:ce:37:5b:08:46:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:07:C1:CE:AD:CC:17:66:E2:5F:91:F2:69:46:58:45:78:37:DB
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.169.0/24
Signature Algorithm: sha256WithRSAEncryption
23:15:8e:2c:0e:9c:74:d9:0f:b7:9a:70:c4:91:9d:2c:4a:74:
b7:05:72:32:29:2f:88:8f:02:2b:5a:d6:2e:c8:24:64:01:8f:
62:d1:be:ba:a8:f4:27:18:71:82:06:c2:ed:f4:74:f4:1a:b6:
08:3e:2c:ec:52:d9:dc:0b:08:d7:2e:b3:d6:a5:e0:85:4e:8c:
5f:3d:c4:79:f1:56:92:95:46:a7:f2:30:bf:b1:45:d2:44:67:
8f:2b:90:2b:3d:72:45:66:46:26:73:fb:2f:a2:6e:13:10:c8:
4f:b4:18:36:7f:4f:06:84:86:ea:31:3e:07:b5:ad:4d:99:d0:
65:94:7e:11:c2:88:02:fc:55:f1:b7:ba:cd:c0:06:6e:43:68:
e0:aa:7d:14:8f:bf:de:63:89:4b:d1:e7:f4:cd:0b:66:62:12:
67:bd:40:d9:ac:2c:22:36:a9:0d:1f:0e:68:e5:83:d9:e8:e0:
de:44:53:19:9e:5e:4c:da:5f:cd:69:0a:45:a7:8d:9e:c6:63:
c9:7d:d3:43:49:1f:bd:fd:72:67:c5:93:05:1f:8c:4b:ad:ae:
19:83:3d:c6:13:48:78:df:5c:d6:98:b6:c7:5c:aa:9f:69:3d:
1a:65:3f:fc:b0:eb:9d:24:9f:d8:e9:d5:b0:4d:c3:b5:e1:36:
ee:19:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:25 2025 by rpki-client