Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6nbB7obZMF6Cxkx3tTwExCHm9Ns.roa
File: 6nbB7obZMF6Cxkx3tTwExCHm9Ns.roa (raw, json)
Hash identifier: 2CLruefpzEU24DRS5Kn23NHfvkJEJJt/F0nJXZ4EyXg=
Subject key identifier: EA:76:C1:EE:86:D9:30:5E:82:C6:4C:77:B5:3C:04:C4:21:E6:F4:DB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194F8FB8E8A28EE2C987F0C291811A519EE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6nbB7obZMF6Cxkx3tTwExCHm9Ns.roa
Signing time: Wed 12 Feb 2025 07:07:03 +0000
ROA not before: Wed 12 Feb 2025 07:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:fb:8e:8a:28:ee:2c:98:7f:0c:29:18:11:a5:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 12 07:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea76c1ee86d9305e82c64c77b53c04c421e6f4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:0b:c6:5c:63:2b:f6:b5:fd:0c:40:19:d4:
6c:d8:68:5c:eb:b5:2b:cf:e3:4a:be:95:8e:0e:2a:
c8:03:1f:7e:cc:5e:6f:8d:9b:f4:c4:87:6c:5f:2c:
3e:35:78:fc:fa:a6:78:fd:d2:eb:28:33:0d:a8:19:
1f:17:de:0b:55:34:f5:1b:26:4b:be:86:2e:47:80:
5d:bb:78:e8:84:f0:61:ba:64:3f:d6:ba:5e:6f:3e:
fb:de:15:76:7f:cd:97:6e:2b:98:7e:75:66:2d:8b:
4a:bf:f6:fa:08:20:a8:da:fa:10:d6:99:a2:57:68:
0a:29:29:b5:1a:c2:ae:b7:09:cd:64:e8:c2:ef:1e:
29:6f:e5:97:a9:27:a5:f6:01:49:f3:c2:8d:9a:43:
e4:6e:60:e8:9c:62:34:85:21:1a:ee:48:95:36:eb:
99:f9:64:f6:84:74:d3:b6:1b:01:d3:3c:ec:06:b8:
d2:62:6e:66:ff:33:67:87:fb:28:5e:7a:12:df:f3:
99:7b:b4:6e:a4:1b:60:ba:e3:f2:22:76:fc:af:a5:
bc:92:58:ed:00:d8:01:c7:d9:74:d5:23:1a:7f:34:
b0:e3:b1:e9:78:a9:12:ec:0a:87:a5:84:4b:6e:81:
6a:15:2a:72:d8:69:ce:59:c1:bc:d1:d1:d0:2b:82:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:C1:EE:86:D9:30:5E:82:C6:4C:77:B5:3C:04:C4:21:E6:F4:DB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6nbB7obZMF6Cxkx3tTwExCHm9Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
188.214.107.0/24
193.124.225.0/24
194.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8f:a0:b3:da:c9:63:cf:03:2c:ac:37:d9:5d:a1:d8:81:07:
55:43:f6:1f:14:86:9d:4d:da:ce:de:fd:60:26:60:29:1b:66:
54:86:5c:92:8d:39:6f:3b:fd:91:e4:10:50:35:ab:4c:a5:17:
95:33:6f:14:87:e7:90:75:86:50:57:1a:2b:26:da:d2:d6:a8:
04:52:57:00:4f:9d:04:b7:61:2d:89:95:74:d6:1a:30:6e:73:
31:24:e1:14:77:f8:57:60:4b:79:88:c8:6f:37:cc:94:36:66:
40:84:fb:45:4b:a2:db:c9:69:df:a4:3f:27:87:23:e5:7a:07:
01:24:c7:9c:af:2c:2e:d8:12:73:08:12:61:ed:a6:86:33:02:
8b:d6:45:56:1a:dd:ed:68:07:f8:52:a7:de:c9:bc:61:af:6c:
24:4c:21:85:9d:d5:50:5c:7f:47:f1:ed:98:f9:3b:94:c1:34:
a7:c8:31:26:4f:82:72:1b:57:af:5e:4b:65:90:31:0e:25:88:
0b:e3:bd:16:be:a3:cb:d8:8b:19:e9:1e:c0:e7:e6:e8:ea:be:
94:9e:e1:7c:32:37:03:51:2e:7d:4f:0d:81:3e:ae:bc:29:b2:
46:cb:08:31:03:93:74:b3:53:8a:cc:da:de:1d:9f:15:7d:5d:
fe:3f:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:12 2025 by rpki-client