Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6SPWdX1ZIdcvaLfrvDWz4CRCkKI.roa
File: 6SPWdX1ZIdcvaLfrvDWz4CRCkKI.roa (raw, json)
Hash identifier: UU4joLLptQjIaP/yIepiyQyO8Hhe4jSP2IywUdS3wRQ=
Subject key identifier: E9:23:D6:75:7D:59:21:D7:2F:68:B7:EB:BC:35:B3:E0:24:42:90:A2
Certificate issuer: /CN=e9f5fdabd4eaa622c9389381d22b63ecf5ec4e69
Certificate serial: 01856F1DBD2CEBF2898B0E35BB5086C605F5
Authority key identifier: E9:F5:FD:AB:D4:EA:A6:22:C9:38:93:81:D2:2B:63:EC:F5:EC:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fX9q9TqpiLJOJOB0itj7PXsTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6SPWdX1ZIdcvaLfrvDWz4CRCkKI.roa
Signing time: Sun 01 Jan 2023 20:54:58 +0000
ROA not before: Sun 01 Jan 2023 20:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 94.154.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:bd:2c:eb:f2:89:8b:0e:35:bb:50:86:c6:05:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9f5fdabd4eaa622c9389381d22b63ecf5ec4e69
Validity
Not Before: Jan 1 20:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e923d6757d5921d72f68b7ebbc35b3e0244290a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:c0:c4:be:29:2a:83:3d:f1:93:65:35:af:
12:90:cc:bf:61:16:f7:66:fd:81:13:1e:86:dd:f6:
75:22:13:c4:86:22:4a:ac:51:92:b5:84:b0:fd:41:
ae:fd:4e:14:e2:8d:78:7d:31:f5:61:9f:30:87:5b:
9e:36:16:92:0d:f2:42:23:b6:31:48:7a:99:ec:82:
1c:a9:81:5a:e7:98:2f:80:c9:b5:e5:1f:71:30:85:
41:c5:95:29:12:a0:48:5b:77:87:da:5f:13:6f:43:
b6:c5:75:17:ad:bc:13:72:9f:a3:5a:cd:95:db:c1:
cb:df:89:94:2f:15:66:48:b3:62:ad:20:c8:49:50:
72:cc:ea:fc:5b:31:fe:a6:ec:3e:03:48:76:de:bc:
f6:9b:9b:3f:97:3c:e7:2f:98:9b:06:d1:6a:9a:22:
8a:8b:0d:f5:bb:ae:2c:7d:88:73:f6:09:85:ca:8c:
53:a8:4b:33:44:15:00:19:0d:13:62:e4:23:4f:1f:
18:74:09:19:c3:c5:5b:e3:15:a7:30:4c:74:ff:f1:
73:b1:03:4d:f3:66:bb:f9:88:4b:6e:d7:f7:fa:68:
b7:1c:fb:89:2c:96:70:84:29:32:4b:0e:3f:03:eb:
85:24:9d:82:11:42:80:8d:fb:8e:24:d9:42:69:6d:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:D6:75:7D:59:21:D7:2F:68:B7:EB:BC:35:B3:E0:24:42:90:A2
X509v3 Authority Key Identifier:
keyid:E9:F5:FD:AB:D4:EA:A6:22:C9:38:93:81:D2:2B:63:EC:F5:EC:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fX9q9TqpiLJOJOB0itj7PXsTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6SPWdX1ZIdcvaLfrvDWz4CRCkKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6fX9q9TqpiLJOJOB0itj7PXsTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.116.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a7:52:fb:7e:28:ed:8f:64:0e:b3:8b:d9:18:ad:46:73:85:
af:d3:82:89:ac:d7:1d:e2:47:8c:49:d6:d3:aa:07:bb:15:72:
54:d4:97:d7:60:b3:95:fd:2b:12:82:28:2b:03:b1:31:e0:d8:
de:93:f6:d7:cc:fb:6d:2c:1c:97:57:d6:e0:ab:03:af:3a:70:
ec:5e:32:cd:91:cb:f2:87:43:99:09:ca:bb:58:6b:70:9c:63:
24:e5:61:e9:b7:90:1f:ac:e0:4c:74:e9:ea:1c:1c:dd:8b:39:
03:01:8f:16:1f:55:5a:59:a6:68:1e:aa:2a:a7:14:6e:02:65:
98:4f:01:20:5b:77:f0:95:76:20:5b:66:b8:de:7b:09:56:d3:
0c:b8:3e:81:70:2f:11:5c:bb:3e:22:8d:35:de:7e:10:84:0a:
81:82:db:d1:93:6f:c8:d9:86:c0:68:8d:28:76:89:19:69:5c:
2f:9a:f6:26:a7:b4:e3:2b:42:2c:03:f3:e8:49:29:39:60:26:
74:a0:25:48:45:b5:99:0b:25:20:ce:db:df:a0:73:b3:1e:16:
7c:84:d6:de:d9:91:10:38:f5:a0:1e:7b:09:02:65:18:64:a5:
4b:8f:b3:67:46:90:fd:de:39:2c:42:87:8e:86:bf:7b:20:18:
93:e2:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:48 2025 by rpki-client