Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/6GzUIZBsdyNU2gZ7jXh41SlunaA.roa
File: 6GzUIZBsdyNU2gZ7jXh41SlunaA.roa (raw, json)
Hash identifier: 3em8LVHZhotSDs+DJ2UU8HBg5zGlR59Jl0JrCL0lX1I=
Subject key identifier: E8:6C:D4:21:90:6C:77:23:54:DA:06:7B:8D:78:78:D5:29:6E:9D:A0
Certificate issuer: /CN=a1b6c7e761d902e3bb9d400cde25e6370a3f0e5b
Certificate serial: 0183117D1B8073C90086500AEAC7FDC1CF45
Authority key identifier: A1:B6:C7:E7:61:D9:02:E3:BB:9D:40:0C:DE:25:E6:37:0A:3F:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obbH52HZAuO7nUAM3iXmNwo_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/6GzUIZBsdyNU2gZ7jXh41SlunaA.roa
Signing time: Tue 06 Sep 2022 06:29:15 +0000
ROA not before: Tue 06 Sep 2022 06:29:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35184
IP address blocks: 87.240.64.0/18 maxlen: 24
46.21.128.0/20 maxlen: 24
2a03:6c00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:7d:1b:80:73:c9:00:86:50:0a:ea:c7:fd:c1:cf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b6c7e761d902e3bb9d400cde25e6370a3f0e5b
Validity
Not Before: Sep 6 06:29:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e86cd421906c772354da067b8d7878d5296e9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:c5:c8:fc:9a:4d:cd:1e:6f:c1:82:81:16:
37:6c:b9:6d:88:1b:9d:6d:8e:b9:5c:c5:9c:23:49:
0b:62:c9:31:b7:e5:38:e8:21:79:9c:2d:65:e7:89:
47:f3:76:af:35:a9:90:f1:7f:c3:d6:6a:d4:b0:06:
4d:ba:30:5d:0b:4e:05:27:83:60:5d:0f:8e:4f:47:
0e:f8:e6:29:90:1b:a7:72:f1:84:37:fe:d6:ed:62:
68:a5:66:8f:26:d0:fa:9b:8a:0b:f6:e7:80:0e:ec:
52:a7:bd:64:f6:53:6b:c1:01:26:9b:c4:c5:b6:d3:
40:17:db:7c:cd:e0:24:be:ac:46:09:80:a4:37:87:
c0:07:0b:44:b0:3d:28:ba:ba:dc:14:ce:a7:c2:6b:
b0:01:f5:40:22:e7:1c:6e:9b:cc:f0:bd:1f:98:ca:
5d:ac:ad:92:1f:d3:a9:f4:ca:d1:95:78:cd:a8:72:
b8:72:51:a2:a5:8f:6a:88:4d:ba:a7:c2:bc:c7:83:
20:a2:1c:fc:b0:35:94:29:b1:1e:90:fd:d2:b8:7c:
b8:af:f9:7c:2c:0f:0c:92:43:20:ff:58:ce:78:47:
33:10:2e:fd:33:54:cf:f3:52:8c:b8:9b:b8:31:fc:
ac:73:ba:d2:23:12:ef:bb:24:ff:68:c4:8b:2f:8e:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:D4:21:90:6C:77:23:54:DA:06:7B:8D:78:78:D5:29:6E:9D:A0
X509v3 Authority Key Identifier:
keyid:A1:B6:C7:E7:61:D9:02:E3:BB:9D:40:0C:DE:25:E6:37:0A:3F:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obbH52HZAuO7nUAM3iXmNwo_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/6GzUIZBsdyNU2gZ7jXh41SlunaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/obbH52HZAuO7nUAM3iXmNwo_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.128.0/20
87.240.64.0/18
IPv6:
2a03:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:51:b6:7b:1a:97:d2:2e:cf:c0:09:71:2c:9e:56:04:7f:3d:
eb:7c:7b:eb:8a:5f:55:df:4a:ae:17:64:e9:54:09:ac:ff:f4:
34:40:05:2c:1e:72:8b:1d:03:fe:bd:31:3d:b0:3a:04:3d:1c:
0e:8c:81:ae:a1:63:44:26:03:d3:cb:e4:0d:7b:b0:c7:3d:f7:
32:29:67:4a:5e:be:3f:b6:45:d3:38:5d:1f:dd:55:fb:58:9a:
69:89:a3:98:e5:f9:72:1b:eb:99:0f:f1:ad:1d:98:82:6d:68:
95:0a:36:19:66:d1:48:1e:17:b0:77:f7:f4:35:2f:75:c7:5e:
9f:89:b6:a2:15:47:f9:3c:35:d2:3c:e6:bd:37:ab:28:e7:54:
02:c9:33:37:60:dd:f1:e6:35:e7:9c:1f:a7:98:a2:b9:d6:d5:
e6:c1:51:3d:4a:2f:4c:39:20:ae:f9:04:19:d6:64:17:58:da:
b9:9e:dc:fc:5a:94:87:57:68:90:75:3b:91:fc:9f:f9:df:ec:
67:18:8c:fe:a9:77:f2:57:29:18:39:e3:f4:0e:9c:06:e4:3c:
b6:b6:80:c3:80:a7:1d:af:95:e2:52:d7:66:6c:b4:5f:06:6c:
33:e1:7d:9a:9e:ea:35:eb:8e:6a:90:08:c3:c2:c8:ae:b4:94:
6f:c6:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:43 2025 by rpki-client