Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/6qNNF_GJ74PiDCXn5Htur1qqqnU.roa
File: 6qNNF_GJ74PiDCXn5Htur1qqqnU.roa (raw, json)
Hash identifier: 8bVgFo7ueEFju992gPoTCmb3ZY9d84EURx8U3CoRRr4=
Subject key identifier: EA:A3:4D:17:F1:89:EF:83:E2:0C:25:E7:E4:7B:6E:AF:5A:AA:AA:75
Certificate issuer: /CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Certificate serial: 018CC26CFEDFFCB39AFC348AE5727A90E898
Authority key identifier: FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/6qNNF_GJ74PiDCXn5Htur1qqqnU.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206502
IP address blocks: 2a0b:2180::/32 maxlen: 32
2a0b:2180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fe:df:fc:b3:9a:fc:34:8a:e5:72:7a:90:e8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaa34d17f189ef83e20c25e7e47b6eaf5aaaaa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:df:1d:6e:bd:10:68:6a:34:48:05:ae:40:f8:
6a:a3:44:62:d5:f0:bd:2c:61:40:0d:72:25:93:62:
01:4f:7a:b2:b5:1a:44:e9:71:63:1b:c6:54:00:32:
31:68:dc:20:ee:e1:70:7e:ad:fc:79:99:2d:74:2e:
67:da:0f:60:64:55:fe:e7:d9:34:0f:e5:ae:d4:4d:
c7:ca:c0:d6:07:a1:f0:e5:23:8c:39:1d:1f:b1:41:
19:c8:dc:85:09:39:2f:07:2c:31:47:2d:18:70:64:
1c:14:ee:11:66:3e:3b:e0:64:4f:aa:90:8f:65:16:
eb:b1:b8:4e:36:eb:e1:1d:cd:ad:90:25:62:b1:18:
32:dd:2c:8d:81:d5:8f:a0:fe:bb:6f:e1:0b:13:60:
fb:ad:53:fa:3d:2c:15:58:f3:57:44:c3:af:11:f4:
05:6a:3f:8c:6a:3a:62:83:46:ef:38:3d:44:00:8b:
e7:94:0d:9d:fc:bd:5d:b0:3c:1b:3d:27:ab:f6:91:
17:ef:7b:bf:d9:1e:9e:16:3f:34:da:77:c6:3d:6d:
28:f1:a0:09:33:49:6c:ab:23:82:4e:33:8c:f9:b2:
c3:89:49:30:d7:27:38:20:ca:8b:d5:8a:02:2b:51:
17:15:7d:93:2b:7d:3f:4d:1f:28:00:07:c0:15:f8:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:4D:17:F1:89:EF:83:E2:0C:25:E7:E4:7B:6E:AF:5A:AA:AA:75
X509v3 Authority Key Identifier:
keyid:FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/6qNNF_GJ74PiDCXn5Htur1qqqnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2180::/32
Signature Algorithm: sha256WithRSAEncryption
12:c5:51:bc:b7:07:26:75:94:a6:03:58:43:c4:df:5b:44:04:
94:b0:52:04:a7:c4:53:ef:6e:c1:5f:0b:66:47:4e:b4:a2:fd:
1b:cc:cd:24:0a:9d:90:3f:de:1d:91:19:61:4e:68:39:dc:c8:
8f:5a:fb:7c:0f:19:6e:a2:44:bd:82:5e:40:b1:b7:f7:0f:c6:
60:05:ea:6d:6f:7a:b2:92:81:f0:8d:08:6d:fc:aa:1f:04:fb:
a6:77:37:69:ed:73:4d:68:f2:1a:6d:c2:32:4e:b6:61:57:c6:
f1:f7:21:04:38:a6:4d:3b:24:b4:8d:e8:9b:8a:89:cf:2f:10:
ff:1d:1d:e2:e8:76:41:28:e4:26:59:9a:1e:25:65:d3:0c:34:
03:72:9a:14:d3:16:26:cb:ac:84:08:e5:a9:28:02:4f:71:b1:
cd:d5:07:4f:16:a4:d6:b6:52:d6:9b:87:9a:b0:84:16:b5:48:
eb:27:cf:f0:89:da:d8:13:a0:a5:c8:4f:dd:d2:f5:ac:11:ca:
66:d5:50:7b:1a:f1:5a:1b:64:5a:14:c4:b2:50:99:c9:1f:7a:
43:a4:05:c7:ac:cc:a2:76:0f:1a:5d:28:75:6e:f4:64:df:5d:
15:c2:26:cf:8d:56:62:2c:0b:89:54:ef:07:9d:9d:38:0c:a4:
cf:47:32:48
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzCbP7f/LOa/DSK5XJ6kOiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODM2ZWQ4Y2QyOWI4MWI4NDIxYTFkYWI5MjA5MDVlMmVk
NzYxODQwHhcNMjQwMTAxMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWEzNGQxN2YxODllZjgzZTIwYzI1ZTdlNDdiNmVhZjVhYWFhYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg98dbr0QaGo0SAWuQPhqo0Ri1fC9
LGFADXIlk2IBT3qytRpE6XFjG8ZUADIxaNwg7uFwfq38eZktdC5n2g9gZFX+59k0
D+Wu1E3HysDWB6Hw5SOMOR0fsUEZyNyFCTkvBywxRy0YcGQcFO4RZj474GRPqpCP
ZRbrsbhONuvhHc2tkCVisRgy3SyNgdWPoP67b+ELE2D7rVP6PSwVWPNXRMOvEfQF
aj+Majpig0bvOD1EAIvnlA2d/L1dsDwbPSer9pEX73u/2R6eFj802nfGPW0o8aAJ
M0lsqyOCTjOM+bLDiUkw1yc4IMqL1YoCK1EXFX2TK30/TR8oAAfAFfiwvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOqjTRfxie+D4gwl5+R7bq9aqqp1MB8GA1UdIwQY
MBaAFP+DbtjNKbgbhCGh2rkgkF4u12GEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzROdTJNMHB1QnVFSWFIYXVTQ1FYaTdYWVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81N2Q1ODEtMzk5NC00ZDgzLWExYjAt
OTY4NDcwYjY1MGY0LzEvNnFOTkZfR0o3NFBpRENYbjVIdHVyMXFxcW5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81N2Q1ODEtMzk5NC00ZDgzLWExYjAtOTY4NDcwYjY1MGY0
LzEvXzROdTJNMHB1QnVFSWFIYXVTQ1FYaTdYWVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgshgDAN
BgkqhkiG9w0BAQsFAAOCAQEAEsVRvLcHJnWUpgNYQ8TfW0QElLBSBKfEU+9uwV8L
ZkdOtKL9G8zNJAqdkD/eHZEZYU5oOdzIj1r7fA8ZbqJEvYJeQLG39w/GYAXqbW96
spKB8I0IbfyqHwT7pnc3ae1zTWjyGm3CMk62YVfG8fchBDimTTsktI3om4qJzy8Q
/x0d4uh2QSjkJlmaHiVl0ww0A3KaFNMWJsushAjlqSgCT3GxzdUHTxak1rZS1puH
mrCEFrVI6yfP8Ina2BOgpchP3dL1rBHKZtVQexrxWhtkWhTEslCZyR96Q6QFx6zM
onYPGl0odW70ZN9dFcImz41WYiwLiVTvB52dOAykz0cySA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:13 2025 by rpki-client