Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/6ZqvxOIku_49tBv2G-O9_p-5hVM.roa
File: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (raw, json)
Hash identifier: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=
Subject key identifier: E9:9A:AF:C4:E2:24:BB:FE:3D:B4:1B:F6:1B:E3:BD:FE:9F:B9:85:53
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019427B55962C09DCAA8D543D85699C129A7
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/6ZqvxOIku_49tBv2G-O9_p-5hVM.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203136
IP address blocks: 185.143.176.0/22 maxlen: 22
185.143.176.0/24 maxlen: 24
185.143.177.0/24 maxlen: 24
185.143.178.0/24 maxlen: 24
185.143.179.0/24 maxlen: 24
2a0e:2700::/29 maxlen: 29
2a0e:2700::/32 maxlen: 32
2a0e:2701::/32 maxlen: 32
2a0e:2702::/32 maxlen: 32
2a0e:2703::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:59:62:c0:9d:ca:a8:d5:43:d8:56:99:c1:29:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99aafc4e224bbfe3db41bf61be3bdfe9fb98553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:9c:8a:65:bd:0d:58:33:d6:29:dd:1b:4a:
4d:80:d3:f6:6b:49:fb:86:17:5b:96:36:0c:7f:22:
95:44:f0:c4:97:85:8f:27:b9:04:d9:eb:bc:08:41:
48:b6:99:53:a3:05:cb:4e:cc:0d:c5:b1:5c:e5:fc:
2a:9c:d7:9c:12:bd:af:8f:23:84:10:da:dd:de:37:
52:c2:3d:1a:fd:8f:47:21:12:6a:43:30:8b:d9:3c:
b9:ab:42:82:01:d6:ac:3b:7c:8e:7a:12:c3:24:27:
af:77:5c:dc:91:3a:75:32:67:02:47:8f:54:6d:ca:
9b:9e:e6:2c:81:4d:fa:3a:cc:34:83:ff:9d:1b:2f:
9a:59:8e:d9:b2:7d:94:4e:b1:7b:e5:31:f0:08:f8:
e6:1a:32:2f:56:b4:cc:90:b7:ef:c0:d7:6a:19:78:
6f:e5:ee:36:a7:e6:c7:d3:9c:6d:79:1d:6a:52:55:
ca:80:18:40:27:3f:68:40:19:87:90:fe:1c:04:35:
e2:46:78:15:d7:41:70:09:b8:2c:cc:13:d7:60:d4:
f2:39:0e:82:76:76:6d:1f:35:84:58:1c:55:98:27:
96:68:a6:10:ff:58:6b:ef:7d:ea:eb:18:46:e6:b9:
70:36:4e:c6:71:60:09:ab:53:a8:a4:ec:0a:4d:3e:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:AF:C4:E2:24:BB:FE:3D:B4:1B:F6:1B:E3:BD:FE:9F:B9:85:53
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/6ZqvxOIku_49tBv2G-O9_p-5hVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.176.0/22
IPv6:
2a0e:2700::/29
Signature Algorithm: sha256WithRSAEncryption
05:cc:58:70:9d:b5:b2:3e:cc:7d:bc:e0:f7:fa:75:1b:c0:a4:
c9:85:11:41:68:66:a7:87:23:d3:29:c3:4b:a2:de:0b:65:08:
01:4b:68:c6:a2:78:d6:7f:b8:2c:6a:0c:ee:77:99:e1:b6:c2:
ab:5e:8e:6f:60:db:a5:ec:5d:28:a8:20:bd:31:14:0c:da:16:
89:6e:7e:63:d2:ea:c6:86:8d:9f:a7:f3:98:16:59:b6:25:62:
2e:ef:82:8b:9e:28:d4:6c:41:1e:7b:b7:fe:93:a5:cc:e3:5a:
76:7d:7a:39:5f:0d:4d:d1:30:2a:04:49:69:81:a5:ee:9c:48:
18:38:b8:5a:ca:fa:4d:a1:de:83:51:b7:61:29:19:ac:0b:9e:
7f:ad:74:2b:eb:fb:f7:93:3e:06:c8:36:4a:34:63:ae:74:4a:
32:f1:d5:69:36:03:74:14:b8:a1:c3:a7:cd:26:c2:da:ed:23:
89:00:76:16:c5:9c:2d:be:ac:6a:af:91:41:2a:62:84:5a:bd:
38:e1:5e:33:70:17:b1:6d:3d:ed:36:98:60:66:40:82:b3:2a:
8b:fe:d3:5f:4c:be:e3:3b:5d:9f:d0:e1:35:90:6e:49:45:57:
19:59:ed:e9:73:a1:7c:1b:8a:85:f6:4d:68:db:ce:ac:73:59:
9f:99:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:43 2025 by rpki-client