Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/n6iNExLRV4JlfgKklDyCIcu9_CQ.roa
File: n6iNExLRV4JlfgKklDyCIcu9_CQ.roa (raw, json)
Hash identifier: MwlljBe/M9yTkGXySuhvVxVg1ajdkx3noUX20t/fPtk=
Subject key identifier: 9F:A8:8D:13:12:D1:57:82:65:7E:02:A4:94:3C:82:21:CB:BD:FC:24
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B23A4342D095F09587C667610FEA6A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/n6iNExLRV4JlfgKklDyCIcu9_CQ.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212479
IP address blocks: 81.15.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:43:42:d0:95:f0:95:87:c6:67:61:0f:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fa88d1312d15782657e02a4943c8221cbbdfc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:b3:36:5d:76:c6:c1:ec:65:1e:1d:dd:4b:
07:78:53:29:d9:6d:19:8c:b1:79:80:59:f8:c4:d7:
81:8c:43:61:f8:9d:62:44:93:03:9f:90:e3:2d:18:
de:5e:ab:b9:3a:2d:7c:71:a3:40:06:17:9d:ee:f8:
23:90:4c:a0:da:83:b1:88:c2:4e:4c:22:66:b8:e9:
b4:33:99:f2:ee:ac:90:a1:12:0a:db:a7:09:99:98:
5c:ca:86:44:be:25:82:f3:85:74:77:38:5b:53:0f:
1e:0e:ba:1f:ef:1f:fe:7e:b6:39:0c:bf:87:1f:59:
8f:60:4c:03:2d:83:da:af:76:8f:6a:1a:b3:15:fd:
4b:be:e8:c5:fc:24:ae:4d:30:f1:ab:4d:28:c4:ec:
b9:1e:93:2c:04:51:f0:13:c0:33:09:6b:3a:52:3d:
3d:ca:f5:d2:65:35:0a:10:c3:ff:05:0a:ff:aa:e8:
2a:df:1d:b5:d5:b4:cd:12:da:b4:fb:43:1e:8e:76:
d3:9b:7b:43:9b:a6:c1:b2:aa:5a:08:3f:8c:7d:87:
e5:ef:e9:91:fe:d6:31:49:45:73:67:2d:53:03:e4:
1d:23:2b:3c:ff:00:e1:d3:65:fe:3d:58:e0:80:29:
ce:2a:45:fc:2c:a1:2d:82:b3:26:fb:f8:32:e1:c2:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:8D:13:12:D1:57:82:65:7E:02:A4:94:3C:82:21:CB:BD:FC:24
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/n6iNExLRV4JlfgKklDyCIcu9_CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.138.0/23
Signature Algorithm: sha256WithRSAEncryption
57:02:03:0e:36:e7:1c:b7:1c:ec:62:e7:cf:7c:f8:30:f1:8c:
6b:84:34:66:8c:a5:06:73:04:b7:7a:17:61:6c:ee:b3:9b:d4:
cf:d1:a0:ee:bc:f4:cf:4e:9f:51:35:79:cb:e9:6b:d4:59:df:
c9:3c:c5:24:ca:28:74:a3:99:83:eb:7b:0f:28:49:9c:03:05:
07:42:99:e2:fd:3f:1a:cd:b0:dc:04:40:1c:82:cf:1d:c2:a1:
ed:6d:de:9e:f8:e3:d6:f7:b5:f3:26:94:86:87:32:6f:37:1a:
f5:6f:4b:e1:d3:ba:03:b9:ae:12:b8:f4:f5:d3:89:cf:3f:08:
dd:4c:3d:a0:39:fa:2c:40:67:bf:cf:88:b7:54:2c:ac:d1:63:
2a:65:7b:bf:61:4a:d2:14:19:0b:89:b5:4a:90:6c:a6:e6:06:
4c:6e:96:7d:79:d0:de:f4:ba:d2:ba:0c:c1:fc:c3:0f:06:55:
c7:eb:07:19:4c:46:a5:cc:35:08:9e:74:37:d7:14:e9:1b:70:
c4:27:00:f1:07:b0:ad:7b:16:43:df:6d:69:e8:95:b5:0d:07:
e9:71:1e:ba:73:2f:b3:b4:bc:a7:2c:59:e1:2c:37:10:b1:52:
f8:bc:1c:fc:c0:ed:67:62:21:46:03:b0:5b:49:ac:c4:c3:50:
c0:67:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:26 2025 by rpki-client