Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/6eOqvZGDKFDuA6yXPPPze8WOsrA.roa
File: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (raw, json)
Hash identifier: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=
Subject key identifier: E9:E3:AA:BD:91:83:28:50:EE:03:AC:97:3C:F3:F3:7B:C5:8E:B2:B0
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 0194266C377C4B175AB62217D5A542A0BABF
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/6eOqvZGDKFDuA6yXPPPze8WOsrA.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 195.160.162.0/24 maxlen: 32
195.160.163.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:37:7c:4b:17:5a:b6:22:17:d5:a5:42:a0:ba:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e3aabd91832850ee03ac973cf3f37bc58eb2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:d6:91:4b:37:b1:e2:ea:69:53:21:d1:77:
15:a8:d8:65:9a:ee:4b:e3:31:e9:60:e9:b9:f0:8d:
c8:23:24:7e:d9:9e:28:24:f7:56:c8:b1:e2:aa:9a:
1f:f2:71:20:f1:15:72:f3:45:ad:cb:fc:85:d8:69:
14:0e:be:2f:e6:68:ca:6f:0d:51:83:b7:2a:89:72:
47:09:60:39:e4:f2:a5:fc:fc:b5:50:ed:27:34:6f:
64:7f:74:42:af:a2:b2:95:09:53:11:1c:43:a5:2d:
30:9b:5e:f1:d6:02:bb:a8:8a:b5:34:5e:3a:03:2d:
d8:4a:2b:00:44:2d:95:fa:4f:ac:75:e4:78:3f:04:
0b:f1:47:c9:89:c8:07:04:aa:ee:aa:24:f9:94:21:
66:4b:11:e3:3c:40:f4:e1:65:47:bb:7e:5f:d2:1f:
bc:af:6c:b3:42:33:c3:2b:a5:78:cb:31:0d:0c:47:
f5:bc:01:48:50:58:6b:68:c6:95:fa:8e:f8:2b:1c:
e8:a6:b3:23:1e:f5:d5:0a:7b:f3:9e:74:c2:2d:c0:
4f:f4:b4:44:a9:60:d4:1b:3e:eb:81:4b:97:65:10:
b0:62:24:64:47:15:87:a6:ce:45:b4:a9:75:5a:11:
e4:b5:80:53:77:1f:76:1c:5b:03:0b:62:da:ac:4b:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E3:AA:BD:91:83:28:50:EE:03:AC:97:3C:F3:F3:7B:C5:8E:B2:B0
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/6eOqvZGDKFDuA6yXPPPze8WOsrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:99:99:d6:be:e5:6f:d0:4a:3f:06:73:7a:9b:3c:12:80:d8:
fb:54:9c:c5:23:46:49:32:1d:0a:a4:c9:43:11:9f:ef:08:fd:
83:32:3b:45:d1:f9:99:37:54:2c:5b:f2:95:ce:7a:2e:24:e9:
35:e4:5b:44:5f:6c:be:80:ab:05:12:84:b7:d0:ed:e2:d8:6d:
38:b0:c9:03:1f:40:a5:75:df:d0:ed:70:33:c6:9e:86:ce:7f:
d3:b9:72:1c:9f:5d:c9:13:0c:ab:c5:38:21:cd:29:7f:25:ee:
52:24:5d:8c:c5:bc:f3:ed:9c:42:ee:10:2e:86:90:9d:8e:e4:
d5:71:fe:e9:bf:48:24:4e:1c:fa:a6:de:38:1f:47:23:12:44:
fc:77:72:bf:2f:2e:2a:6e:8d:1a:3e:ef:1e:c2:b7:a8:80:6d:
9d:92:b3:3e:ef:f3:52:ef:ab:33:d2:17:fa:e3:f4:22:1f:c8:
c5:58:ec:b9:c3:26:09:5e:d5:c6:20:fa:06:da:c5:01:b5:89:
f8:f0:2e:e2:c3:6e:5d:b7:f9:49:a5:4e:c0:46:aa:94:59:0a:
f7:a9:23:dd:95:fe:68:ff:e8:3b:8e:df:7b:6b:4e:9e:f6:b8:
8d:50:e9:f1:85:b8:b7:da:d6:bb:cf:db:b1:6e:8e:45:03:76:
6b:5c:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:05 2025 by rpki-client