Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa
File: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (raw, json)
Hash identifier: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=
Subject key identifier: E8:EF:AB:74:03:DF:24:BE:63:6B:47:EC:02:AD:1C:0E:BC:69:06:FE
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01941FFA81ED955BFDDFA4F3817B3B991761
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 185.84.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:81:ed:95:5b:fd:df:a4:f3:81:7b:3b:99:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8efab7403df24be636b47ec02ad1c0ebc6906fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:ce:a7:db:99:ff:dc:1c:ba:b1:99:78:b7:
79:90:b4:9f:63:74:47:6f:12:76:a9:16:03:98:6b:
8f:42:d9:43:24:b4:b9:c3:a3:2e:27:cf:2a:de:8d:
76:1d:dc:6e:3f:2d:1a:37:98:35:0b:1f:0d:d0:45:
e9:3c:52:67:74:96:91:e0:86:e5:9d:8e:c8:7b:f6:
34:6e:d0:9b:be:ac:31:9d:08:41:06:46:31:1a:2e:
7b:f1:d9:e5:23:5b:6c:29:6c:19:8b:a7:a3:9d:82:
73:63:15:34:4c:ba:b5:09:28:c9:fb:fe:eb:3c:86:
e9:03:ed:94:e2:a1:1d:c5:6f:c6:b4:57:13:83:97:
b0:e0:25:03:44:95:38:ed:0e:17:8b:f2:24:03:2f:
a1:1d:38:52:77:39:d3:7c:56:c8:63:8e:06:d0:37:
e2:fd:12:00:13:d1:0c:48:65:d6:b7:27:08:f3:a0:
cb:fc:2c:a2:93:42:f7:51:db:a1:78:3f:e1:1a:a7:
b7:1a:be:30:f9:61:88:ae:15:13:95:c4:08:9f:33:
de:ba:4f:1f:88:33:8f:01:12:99:6c:47:5e:27:06:
ff:ec:d2:50:e8:d6:aa:eb:ac:3f:0b:07:10:03:79:
2c:a4:bf:5b:a4:46:2c:c3:ef:b6:89:ed:99:0b:a8:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:AB:74:03:DF:24:BE:63:6B:47:EC:02:AD:1C:0E:BC:69:06:FE
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:99:35:8d:40:d3:14:6c:d7:a2:c9:7c:1c:14:b4:fe:7c:b0:
39:86:fe:d0:2c:37:51:d3:76:48:be:fa:e8:68:58:50:de:46:
e5:fd:cc:b2:c1:7d:4f:33:0f:f6:fb:96:e9:4b:76:b1:df:3f:
42:f0:12:08:1a:20:f3:61:19:6e:3d:ab:6c:bb:cb:78:ce:2b:
65:cb:2b:59:51:b7:5d:6b:d0:e4:b9:74:b8:8a:9f:b5:9d:b5:
89:5e:4d:a7:bc:98:76:dc:08:b0:42:ee:20:b6:9e:b1:d0:22:
bf:bc:4d:d1:a7:12:93:e0:07:8c:b4:5f:94:77:8b:a5:2d:e3:
24:49:de:c9:9b:bd:8f:c9:42:db:5e:00:84:fe:ca:5f:f2:bb:
f0:ed:4a:9a:40:e6:c5:5d:2c:ca:10:6a:62:9b:94:4c:1f:12:
84:6a:ad:0c:f7:a2:9c:35:4f:73:68:87:ca:ce:9e:ce:a0:e4:
ba:51:52:49:ce:e8:10:20:e8:d2:bc:0c:e5:58:b6:e1:b6:2f:
16:01:b1:46:02:59:c5:4a:a4:48:34:3d:0b:e6:83:66:19:5d:
95:1b:b6:43:3a:27:92:81:76:e6:03:fb:a0:74:80:b8:16:10:
bf:9e:ed:b9:54:6e:63:ea:88:98:1e:3e:82:65:99:80:91:43:
42:90:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:58:25 2025 by rpki-client