Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/6sSkl7UX1wQmJbbfGMATKxJXY54.roa
File: 6sSkl7UX1wQmJbbfGMATKxJXY54.roa (raw, json)
Hash identifier: IeSF56cYT3VKQor9+nTqChrxam+t4/ky7I5rJ/pHZBg=
Subject key identifier: EA:C4:A4:97:B5:17:D7:04:26:25:B6:DF:18:C0:13:2B:12:57:63:9E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019424452BE381612B3993E96BF6B6078F50
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/6sSkl7UX1wQmJbbfGMATKxJXY54.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 80.66.87.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
87.251.87.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2b:e3:81:61:2b:39:93:e9:6b:f6:b6:07:8f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eac4a497b517d7042625b6df18c0132b1257639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:2f:a5:f4:5d:88:ee:3a:16:28:b2:6e:9d:
32:81:04:bc:58:73:2b:ee:29:f7:76:35:de:3c:42:
94:a9:66:f0:27:30:23:1c:9a:3d:c0:35:13:84:67:
c4:c8:14:3a:ca:c9:10:a5:a1:56:89:8e:05:d7:46:
2a:41:31:af:de:e4:76:d7:98:83:cf:e6:8a:9a:38:
5b:16:26:03:85:98:23:4c:32:86:6c:ea:53:41:67:
a6:78:2d:0d:48:f9:0e:c4:3f:19:04:da:08:63:52:
24:d9:6b:5d:aa:bf:9a:9a:3f:31:e9:aa:b0:38:d8:
93:37:18:dc:ba:1c:ce:81:d5:d9:ae:93:ce:45:93:
23:32:37:88:2f:18:fe:2f:e3:f3:54:a2:55:9c:a7:
e9:6c:25:1b:a2:be:fc:4d:28:35:90:99:19:d5:1c:
db:ef:76:09:46:fc:78:62:af:83:52:54:5d:98:15:
b5:ab:43:9c:29:ed:5d:68:01:15:ea:01:29:f6:15:
dc:cb:6f:67:c6:13:c6:be:57:2d:7c:59:7e:ca:9e:
10:7a:1e:ed:48:1c:8d:1b:47:69:37:4e:ec:49:7d:
21:a6:8b:2c:37:34:66:04:b1:38:a4:9b:7e:90:33:
d1:45:c6:66:a9:27:be:83:cb:46:86:7d:dd:cd:18:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C4:A4:97:B5:17:D7:04:26:25:B6:DF:18:C0:13:2B:12:57:63:9E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/6sSkl7UX1wQmJbbfGMATKxJXY54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
87.251.86.0/23
193.37.71.0/24
Signature Algorithm: sha256WithRSAEncryption
01:79:67:a8:09:0d:c3:cd:e8:7f:89:8e:7e:96:d5:4d:14:38:
73:a2:1f:82:c1:a6:b4:02:33:fc:ac:b1:65:ad:96:1b:d1:43:
b0:70:57:7a:de:28:51:86:8f:7b:69:56:1b:23:59:15:a4:b1:
3a:14:18:06:3c:6a:ba:f8:24:eb:0c:f9:b8:ac:8f:a3:2d:e8:
5e:2f:57:e1:03:a1:0b:2c:53:9f:f7:12:12:e6:50:1a:5d:25:
17:09:08:94:0c:3f:72:60:fe:66:fe:76:7a:97:55:54:e5:a7:
fc:df:5b:78:1a:2d:cd:33:ea:8a:62:4f:64:49:f1:dc:ed:0d:
78:24:c0:4d:b4:b1:c1:14:00:12:88:ce:24:7a:b9:ba:85:ff:
8d:ad:41:32:92:a9:16:93:7d:cc:f3:40:6d:0e:3a:1c:e3:f6:
88:54:f7:ae:6e:9c:5d:0a:7b:0a:3a:8b:50:21:82:51:d5:74:
91:e5:d8:d9:68:fd:02:cf:ad:20:d8:1c:c2:5a:cf:3a:71:65:
f5:8e:bc:5a:35:16:cd:3e:e9:77:cd:ca:09:99:f0:e4:7e:5f:
32:d1:5a:90:2e:10:45:e0:29:f3:b7:dc:34:be:96:9c:0a:fd:
9d:26:99:ac:37:11:b0:5a:60:91:2a:ac:4b:da:5a:48:30:e6:
fe:43:50:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:44 2025 by rpki-client