Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6O06RmLssFbQbBiURJCzSGRK2mQ.roa
File: 6O06RmLssFbQbBiURJCzSGRK2mQ.roa (raw, json)
Hash identifier: yenAF/5R9mlezbgxva4BUN1WmjgP5Xa1quV+LbkRTms=
Subject key identifier: E8:ED:3A:46:62:EC:B0:56:D0:6C:18:94:44:90:B3:48:64:4A:DA:64
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425901566B737975C849A2AB185831505
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6O06RmLssFbQbBiURJCzSGRK2mQ.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215032
IP address blocks: 93.171.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:15:66:b7:37:97:5c:84:9a:2a:b1:85:83:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ed3a4662ecb056d06c18944490b348644ada64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:55:4a:0a:f0:7d:d2:43:49:e4:26:d7:a7:
90:22:8a:6e:07:c8:a3:f4:5a:29:39:c0:d7:3d:79:
19:7b:dc:23:98:0d:2e:4b:2a:ae:49:e9:f3:43:a8:
ed:4e:4b:76:3d:67:f8:ed:69:69:c8:da:58:45:3b:
3c:b1:32:fd:07:4d:7a:d4:00:87:d9:06:bf:0c:15:
25:cb:73:e3:7d:a5:a6:af:81:c5:ec:9d:d8:c4:77:
4b:e5:7e:67:65:e8:70:27:c6:f8:1f:27:f5:2f:62:
f8:d0:b1:d1:16:da:59:56:5c:1b:83:49:21:3b:35:
35:05:a4:36:7e:bc:0c:63:6f:62:4c:65:16:62:48:
e2:8b:2c:64:45:43:83:fe:8e:79:bf:0e:6a:e4:86:
c8:c2:89:19:f8:9d:7f:7f:3d:86:8a:5a:88:a9:34:
4d:96:b7:02:53:45:fe:a0:0b:15:20:e9:3a:00:6d:
c8:4e:5d:cf:2a:d9:d5:59:46:8f:e4:71:e5:0c:37:
02:6e:80:fc:fc:fa:73:0a:57:af:50:6c:80:ca:a5:
3b:3c:c0:8b:71:40:2a:c2:1e:ad:ec:2f:1d:49:ba:
e6:ed:7f:f5:84:7a:e0:32:58:a9:72:79:48:22:ec:
ab:d6:f0:e8:1e:63:9e:b4:63:94:26:35:59:d8:cd:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:3A:46:62:EC:B0:56:D0:6C:18:94:44:90:B3:48:64:4A:DA:64
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6O06RmLssFbQbBiURJCzSGRK2mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:12:e2:36:26:1a:4e:d5:dc:ee:95:e3:74:5b:e3:94:5c:79:
a0:a5:18:54:97:ae:20:1b:36:74:40:9f:59:e7:65:a3:f4:15:
da:57:13:ad:31:a8:3e:dd:44:1f:a0:19:6c:95:7c:1d:63:a1:
f4:ed:8d:ea:2f:ae:87:22:5a:31:5b:8d:1f:d9:6d:b0:3b:3a:
5e:26:08:ce:f7:b1:ee:46:aa:43:3e:7a:6a:0a:f6:56:b8:02:
01:41:32:26:cd:b2:70:20:e2:25:bb:9e:25:cd:c2:c8:55:fa:
a8:ec:f4:cc:a3:93:54:76:c1:a0:c0:e4:28:2d:46:25:eb:fd:
78:d0:de:d9:33:dc:bb:87:34:8a:d6:b2:5d:1b:2c:fa:9a:42:
ad:56:3b:a5:f8:49:16:18:92:8f:80:c2:59:d8:dd:a1:1c:91:
51:5c:ec:42:60:27:4c:06:16:88:ae:78:5e:9e:14:94:c8:05:
4d:e8:a5:59:a0:68:d4:fc:31:e4:eb:f6:d6:be:74:f6:33:b9:
c9:85:87:02:46:40:31:5e:00:3a:ee:b5:03:be:50:c6:55:19:
6e:a2:c9:5d:ab:1d:17:27:05:e4:38:5f:c9:a0:8b:8f:5f:f7:
5f:66:62:22:1d:b4:75:27:8d:3e:54:10:97:9a:cd:e9:b3:0d:
09:d1:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:41 2025 by rpki-client