Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/6MSYGKF8IeOAnuWHzZZC0qhgq04.roa
File: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (raw, json)
Hash identifier: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=
Subject key identifier: E8:C4:98:18:A1:7C:21:E3:80:9E:E5:87:CD:96:42:D2:A8:60:AB:4E
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 01942747847DAA9C9AD82238521FCCC3600D
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/6MSYGKF8IeOAnuWHzZZC0qhgq04.roa
Signing time: Thu 02 Jan 2025 13:49:45 +0000
ROA not before: Thu 02 Jan 2025 13:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33911
IP address blocks: 195.254.134.0/24 maxlen: 24
195.254.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:84:7d:aa:9c:9a:d8:22:38:52:1f:cc:c3:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Jan 2 13:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c49818a17c21e3809ee587cd9642d2a860ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:8d:81:07:5d:77:bb:51:93:9a:16:a9:c3:
2d:e4:1a:aa:5f:6a:23:51:f4:8b:1a:ea:1d:be:49:
dd:18:a0:84:55:aa:83:00:f9:74:ce:1f:1b:c1:11:
16:46:83:ce:03:ce:ca:eb:75:46:2b:a9:39:9f:a3:
77:d4:3e:d1:c1:c0:bb:41:92:d3:d9:da:a5:4b:ac:
48:b1:f2:0c:b4:42:0a:82:ff:aa:38:af:34:75:ee:
2d:82:f9:00:b6:38:52:85:37:bd:47:a8:fe:85:33:
f8:23:ed:c1:b7:d5:55:aa:58:30:5c:17:76:d6:2a:
4a:cf:68:db:99:84:6c:db:c1:e5:72:29:cc:53:ac:
43:75:f7:14:4c:82:7c:73:90:e6:45:a4:2a:51:60:
29:17:32:3a:f0:7d:26:02:9f:42:65:cf:96:af:21:
cd:70:55:f7:6a:50:de:ea:40:ba:1c:a9:e1:eb:00:
19:71:74:eb:c7:4d:3f:5a:84:4a:c6:1d:e3:10:39:
7c:57:2e:1d:65:31:a9:8e:6a:0d:7c:92:98:13:1d:
fa:8a:a6:b2:5c:5b:e7:70:64:c9:85:f9:c2:9f:af:
fa:e0:52:1c:00:0d:b0:54:33:ce:75:af:97:fc:b1:
e4:c3:20:d6:ec:5e:e0:0b:5a:38:bd:4b:a6:b3:90:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:98:18:A1:7C:21:E3:80:9E:E5:87:CD:96:42:D2:A8:60:AB:4E
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/6MSYGKF8IeOAnuWHzZZC0qhgq04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.134.0/23
Signature Algorithm: sha256WithRSAEncryption
32:9f:ed:3c:2b:cb:0d:42:d9:e8:fa:c8:51:44:2d:41:db:82:
99:d2:bf:ef:10:a6:94:13:71:09:2e:89:67:56:73:ea:29:fc:
c7:01:08:21:0c:77:3e:df:d5:c8:b6:3c:6a:77:71:25:73:eb:
80:8e:17:8e:11:73:67:8e:50:27:d2:fd:fe:24:9a:c8:c3:3b:
cb:8f:46:8a:1f:0f:c8:a7:35:26:f2:8f:d2:f8:d9:39:d9:65:
b3:5a:49:cb:b3:5b:5c:c3:ce:21:f3:86:3c:c0:4c:57:31:f6:
b3:0f:6d:1d:03:e4:e1:0d:70:be:a5:48:44:8d:4a:a3:00:90:
a6:49:7d:95:93:8f:ae:24:be:bc:86:ea:23:d6:c0:54:29:64:
17:41:39:1c:6b:e9:d3:2b:4a:6f:a3:a0:d3:06:7e:7a:08:9a:
6f:80:91:c5:8c:a4:2d:43:7c:88:af:3c:35:61:43:a6:7c:bd:
a5:ba:2e:de:97:df:45:18:bd:1e:5f:03:9b:34:76:63:b3:c3:
d7:d9:68:b6:19:c7:92:9e:92:1c:ae:e8:0c:ca:3f:48:0a:96:
ca:64:75:24:bf:c2:b8:1f:9e:d0:1e:08:5e:6c:0d:e6:c7:12:
80:53:f3:2b:6c:dc:eb:8e:fc:0e:db:65:69:7b:4f:c5:93:76:
22:90:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:12 2025 by rpki-client