Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/6b_z1nYhros0lFsJJ-v5kZEUQbE.roa
File: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (raw, json)
Hash identifier: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=
Subject key identifier: E9:BF:F3:D6:76:21:AE:8B:34:94:5B:09:27:EB:F9:91:91:14:41:B1
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 019425FBFD9798F07E41233E091A77D84D61
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/6b_z1nYhros0lFsJJ-v5kZEUQbE.roa
Signing time: Thu 02 Jan 2025 07:47:38 +0000
ROA not before: Thu 02 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207753
IP address blocks: 195.246.254.0/23 maxlen: 23
195.248.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:fd:97:98:f0:7e:41:23:3e:09:1a:77:d8:4d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Jan 2 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9bff3d67621ae8b34945b0927ebf991911441b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:24:61:60:0d:05:bf:73:a2:29:fc:8f:10:
7f:43:80:be:5e:4e:e7:4e:29:d7:63:c7:19:8f:b1:
40:34:f8:8c:32:b4:99:8f:7a:1d:d9:27:75:20:43:
5f:8f:dd:0b:07:15:60:ca:63:60:1a:28:36:2d:44:
81:32:ba:22:f0:2e:0d:32:8c:01:32:d7:b7:d0:b5:
34:28:36:11:62:90:7f:20:b1:12:d8:d8:aa:7a:19:
c2:3c:b6:a7:61:5a:15:81:67:26:ca:01:26:d8:63:
eb:01:38:d1:e0:4d:34:ff:03:b8:e8:6f:49:b6:67:
51:da:44:3b:28:f0:a4:8d:4f:86:1c:a4:f8:da:fe:
b8:83:ae:3d:0b:d6:00:1c:08:7a:8a:df:7a:69:60:
73:f6:43:2b:f6:01:e5:11:ca:40:23:d8:9c:6b:cf:
a3:c4:f4:0d:76:4f:02:38:3f:3a:3a:aa:14:ad:da:
db:dd:cf:73:c9:1a:be:34:e6:3b:44:28:36:50:db:
dc:cf:de:94:f7:09:93:93:56:f0:78:79:e0:c5:80:
c4:f5:16:55:10:c7:eb:cb:fc:6c:66:d6:28:46:c5:
0d:fc:70:e3:51:1f:28:86:76:e3:96:f1:fd:02:c7:
f0:05:48:bb:5c:0e:7c:bc:0b:5f:aa:ac:e5:ef:27:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:F3:D6:76:21:AE:8B:34:94:5B:09:27:EB:F9:91:91:14:41:B1
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/6b_z1nYhros0lFsJJ-v5kZEUQbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.254.0/23
195.248.244.0/23
Signature Algorithm: sha256WithRSAEncryption
53:43:e0:23:11:71:5a:5e:14:e6:ae:32:ae:18:24:1a:e7:8a:
e2:5f:52:18:b4:5f:70:d0:66:b8:8b:69:f9:ac:01:c5:05:82:
ca:e4:1d:2c:03:8e:25:d5:50:30:4e:88:01:47:77:8c:a3:ac:
51:a2:1a:6c:5f:57:64:2a:e9:2e:72:77:61:65:17:84:4b:42:
0c:7d:0d:d8:4e:2b:5e:0d:c6:35:ac:47:00:d1:4e:ba:25:c4:
51:52:f0:32:e6:bd:3a:e2:4e:9e:0c:05:69:13:fe:9d:3c:b7:
10:42:52:b9:35:f2:9a:0d:2a:6f:f3:e8:7b:03:c1:a5:26:d0:
7f:98:a9:de:c4:a7:f0:13:f4:75:80:a7:89:82:b6:95:e1:ff:
9a:26:86:8e:72:8e:63:60:e1:6f:61:cd:40:56:24:2c:47:a4:
62:5d:ef:60:a6:cb:bf:20:97:76:a9:87:ef:a0:3a:c8:a2:2f:
77:c8:d8:34:c8:24:bc:a7:13:69:ac:b7:f7:ba:59:f1:2e:46:
8e:a2:c8:47:f2:54:52:bb:3f:b9:d6:5a:df:00:7c:c2:87:74:
d1:a9:c0:2e:21:d0:55:2b:ca:48:4c:8d:f9:e2:88:0b:2a:ab:
1c:60:d7:3a:29:6f:d8:97:fa:87:cf:ce:ed:4a:70:30:a1:56:
58:dd:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:05 2025 by rpki-client