Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/I-6tmC-Wffhyp-OZSexRKWU8Uoo.roa
File: I-6tmC-Wffhyp-OZSexRKWU8Uoo.roa (raw, json)
Hash identifier: Oa04E5wwi6A8XJrCoaB7iSIjDh14A4NYx+ljpcsYaBU=
Subject key identifier: 23:EE:AD:98:2F:96:7D:F8:72:A7:E3:99:49:EC:51:29:65:3C:52:8A
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019441D7A4BB866E9592106472DFFA1C080C
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/I-6tmC-Wffhyp-OZSexRKWU8Uoo.roa
Signing time: Tue 07 Jan 2025 17:37:19 +0000
ROA not before: Tue 07 Jan 2025 17:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214729
IP address blocks: 85.198.127.0/24 maxlen: 32
193.104.198.0/24 maxlen: 32
213.108.20.0/24 maxlen: 32
2a00:8740:f002::/48 maxlen: 128
2a00:8740:ff10::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:d7:a4:bb:86:6e:95:92:10:64:72:df:fa:1c:08:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 7 17:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23eead982f967df872a7e39949ec5129653c528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:31:16:8f:89:0e:b1:6f:30:53:a4:f4:82:
5d:fe:d5:3c:c4:68:78:ad:a1:5b:23:a6:dc:ed:7a:
6c:90:96:e4:77:93:fe:d4:02:90:9e:bd:b1:0c:6f:
6b:a2:66:11:49:3b:63:b0:04:75:05:e8:7a:0e:bf:
dc:b0:4c:ed:c5:3e:6c:79:48:7f:45:43:ee:d1:85:
72:84:10:89:de:b9:66:91:7d:6c:5e:35:2a:99:77:
58:0b:f6:d3:18:b5:81:83:cf:64:36:2e:2e:f1:8f:
6a:ef:51:2a:f5:b6:ff:bb:63:d7:e7:94:2a:c6:26:
93:04:e1:59:e1:45:dc:b7:3c:8d:31:4d:d8:6b:34:
e8:d7:2d:d1:50:51:84:01:50:7c:90:68:db:c1:4f:
01:74:21:8d:4b:0a:65:ba:97:cc:e7:2f:72:5e:76:
c5:73:6c:bc:7c:47:05:47:5e:f8:98:60:1d:31:2b:
78:5f:c2:65:f6:1f:9c:ea:09:fa:15:68:92:a6:f0:
ba:87:15:72:f3:39:de:83:e7:b5:12:0d:a1:32:12:
f9:0b:64:63:68:92:0c:03:94:b9:f9:f5:29:55:ba:
cd:dc:87:ab:eb:f6:54:85:f4:9b:3d:fa:de:97:c5:
05:89:85:b6:d0:48:40:1b:8c:4f:c3:30:1a:5f:77:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EE:AD:98:2F:96:7D:F8:72:A7:E3:99:49:EC:51:29:65:3C:52:8A
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/I-6tmC-Wffhyp-OZSexRKWU8Uoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.127.0/24
193.104.198.0/24
213.108.20.0/24
IPv6:
2a00:8740:f002::/48
2a00:8740:ff10::/48
Signature Algorithm: sha256WithRSAEncryption
a8:51:56:9a:94:1d:ee:9e:c6:d5:04:0d:fa:b3:e4:6e:9f:f5:
ae:fe:4b:41:e4:e0:c1:02:5f:3f:9b:37:82:4c:87:55:41:6c:
f8:e1:0b:65:71:4f:b1:08:26:b6:dd:a7:2f:1e:be:2d:8a:c8:
a7:f6:50:37:e4:82:e8:f6:51:e8:64:5b:31:78:cf:54:d7:68:
ae:ee:ae:a9:88:77:e3:07:37:65:a7:1a:c7:ef:7f:5c:c1:26:
2c:d1:60:9c:d9:6c:99:bd:d3:ec:8f:4c:5f:dc:92:1b:16:69:
46:7b:cf:9e:eb:e5:11:a0:19:66:84:53:cb:89:2c:58:e5:a2:
e9:ee:a4:65:8d:2b:fa:c0:46:fd:2f:e8:85:dd:4f:37:91:d6:
18:3f:41:6b:45:1f:1b:2d:db:6a:b7:7b:3f:99:7c:f5:f8:b7:
9f:4d:73:14:e0:b8:1f:57:91:28:a4:f1:7f:f8:1e:2b:1a:ed:
3a:81:ac:7d:80:b8:b6:ff:2d:27:f4:0c:d7:22:f0:ca:89:2e:
c8:32:53:d8:fa:40:06:1e:c5:dc:5f:8d:7e:1b:7a:44:3c:af:
5c:36:6d:b7:3d:64:e2:40:a3:a4:02:04:18:14:87:9f:47:cb:
bb:41:0f:1d:51:6d:c6:78:59:4f:af:9d:1d:75:15:d0:cd:37:
f6:26:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:47 2025 by rpki-client