Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/6xQaOng6ybJiigzf2XvWmzrMXU4.roa
File: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (raw, json)
Hash identifier: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=
Subject key identifier: EB:14:1A:3A:78:3A:C9:B2:62:8A:0C:DF:D9:7B:D6:9B:3A:CC:5D:4E
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 01942143DEA97C51D6ADD42229629F2506C3
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/6xQaOng6ybJiigzf2XvWmzrMXU4.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 188.239.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:de:a9:7c:51:d6:ad:d4:22:29:62:9f:25:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb141a3a783ac9b2628a0cdfd97bd69b3acc5d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:8d:e5:e4:44:46:87:b8:a1:7c:4a:18:54:
d7:58:c3:63:b8:3f:ab:8f:07:78:d5:6b:a7:55:b0:
77:37:5b:ea:d9:59:1e:09:ae:cc:9a:3a:8a:2d:01:
e4:31:82:80:81:50:0c:de:8b:3c:5d:35:c9:c6:6a:
d6:20:db:21:84:54:06:76:fb:9d:5c:66:6d:85:60:
a7:2e:28:46:ae:2c:f3:67:7c:92:83:c8:e4:d3:3d:
17:20:92:84:01:05:50:08:e0:c1:d3:29:98:36:86:
06:44:dd:ed:df:65:c1:02:f5:13:b0:a6:ba:e3:fa:
0f:32:58:f3:be:68:09:fa:9a:e9:ca:0a:de:25:0b:
27:4a:39:af:88:08:cc:35:b1:41:49:92:9b:b2:62:
48:c3:99:a2:78:92:2c:9d:92:8a:c8:9d:c8:2f:34:
e4:d0:ad:ff:db:58:a9:52:87:70:8b:7d:3e:80:22:
0f:35:9a:bb:bb:0c:25:fe:17:b3:a3:79:83:fc:a6:
4b:94:cc:d8:18:18:fa:1c:6c:0d:d8:fd:fe:49:e7:
ae:83:49:8c:af:c7:05:1e:b6:b4:62:18:5e:2d:03:
03:8e:e9:40:80:cf:4a:80:b8:73:9b:b8:39:c1:ad:
73:01:76:9f:c3:aa:d4:f1:4d:8f:4b:46:4d:3e:c0:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:1A:3A:78:3A:C9:B2:62:8A:0C:DF:D9:7B:D6:9B:3A:CC:5D:4E
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/6xQaOng6ybJiigzf2XvWmzrMXU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c9:a3:b5:28:43:90:c2:fa:62:d1:e1:61:27:6f:6f:59:9d:
65:8b:9e:68:0f:5c:b3:8b:c3:95:66:b0:78:9d:4d:a4:e5:49:
91:0a:4f:63:84:39:cb:a6:cd:a1:62:25:43:f0:6d:bb:29:b2:
b4:fe:8c:97:08:76:cb:b3:6e:5a:bb:8c:ba:52:9f:89:97:9b:
ff:04:2c:67:84:75:45:10:2a:64:83:6c:46:94:96:46:c8:38:
24:dd:9c:4b:a4:b6:02:ef:e3:a5:b8:3b:dc:b0:b8:7f:89:69:
3c:16:cc:a0:2c:2d:c4:a0:fc:34:e9:f3:76:48:f2:0c:6b:ad:
9f:92:43:f7:c9:f3:69:6e:7e:33:2f:5c:08:8c:63:d0:9a:f0:
59:9a:ed:13:bf:be:38:92:1c:45:b2:20:04:b0:8a:e0:db:9e:
ad:6a:3a:c3:b1:80:1a:11:cf:ef:54:31:ac:64:0a:45:64:b2:
4e:03:a1:f6:4f:a6:42:14:a3:a1:fe:e2:ea:ff:01:c3:e3:56:
37:11:cc:4d:63:2f:f1:67:44:f5:68:0d:4c:58:74:1d:e8:46:
87:57:54:30:71:93:69:24:39:ae:cc:88:16:27:ae:4f:8b:df:
13:45:05:9e:10:90:1d:7d:e6:ad:1f:58:2b:76:97:4e:59:66:
48:a4:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:52:59 2025 by rpki-client