Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/6xWWlesi3eVgIrkvp2TkLGNCDNs.roa
File: 6xWWlesi3eVgIrkvp2TkLGNCDNs.roa (raw, json)
Hash identifier: vhyvo+XjQOYm6FcB2q7aUOgl+Z+BR/yBclEiZyR+qRw=
Subject key identifier: EB:15:96:95:EB:22:DD:E5:60:22:B9:2F:A7:64:E4:2C:63:42:0C:DB
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 0548F5E4
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/6xWWlesi3eVgIrkvp2TkLGNCDNs.roa
Signing time: Sat 01 Jan 2022 06:04:07 +0000
ROA not before: Sat 01 Jan 2022 06:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196782
IP address blocks: 95.143.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88667620 (0x548f5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Jan 1 06:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb159695eb22dde56022b92fa764e42c63420cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:e6:0c:5d:c6:73:12:b3:20:cf:d9:b3:88:
8c:2c:7d:2d:ed:5c:02:f3:dc:ec:ef:52:be:8a:09:
67:84:05:34:27:ce:e5:63:89:e3:10:30:89:ef:55:
8c:74:f7:63:c6:68:50:62:00:d7:51:f6:0f:46:08:
f3:85:46:aa:b4:19:04:aa:3d:79:e9:8e:67:96:92:
91:51:57:c5:e2:df:d6:82:16:25:7e:af:69:2e:bb:
be:3c:06:37:13:16:20:16:43:d9:9d:fb:b9:cc:81:
85:61:bf:8c:0e:09:87:63:6e:74:db:19:65:06:93:
9c:27:8d:fc:ae:3e:6a:36:14:68:46:40:89:a4:e0:
b7:19:9b:3d:fc:50:6f:2d:b5:78:33:89:0d:44:3e:
70:4f:bd:ea:7e:5c:0a:98:9d:d6:82:e2:2f:a2:7f:
1b:ea:8c:f4:e5:ee:4a:0c:77:6f:b9:f3:5b:8a:9d:
de:27:ea:02:a4:c4:fa:72:1f:e9:63:a9:e5:87:d0:
b8:8a:74:85:dc:78:9d:7b:55:3a:d6:91:6e:ec:cc:
ac:57:0c:0e:54:24:be:ea:3e:eb:ae:1a:55:df:ff:
57:a8:81:29:fd:71:ed:94:45:1f:20:b4:9d:84:fe:
e1:82:ad:0d:31:94:76:59:ce:3e:17:ac:d8:43:57:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:96:95:EB:22:DD:E5:60:22:B9:2F:A7:64:E4:2C:63:42:0C:DB
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/6xWWlesi3eVgIrkvp2TkLGNCDNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.143.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:cb:4c:37:48:60:fd:c9:e3:89:a6:16:bd:fe:7f:6c:42:ee:
01:c7:47:a5:03:82:56:8e:74:14:be:b0:75:57:88:b4:1a:49:
ea:27:b1:a4:74:df:aa:a2:11:6c:5a:e9:38:5b:fb:f3:51:2c:
0d:a0:c5:80:39:2d:f5:0e:a1:d7:d6:d5:07:ed:98:57:92:3a:
79:1d:1e:8a:52:d1:72:59:fa:4d:85:11:88:f8:30:42:f5:b8:
5d:ec:8d:b9:23:8f:1c:a9:d4:0c:9d:ea:8b:bb:90:8a:50:9c:
66:db:07:3e:14:9e:ce:01:7d:3e:d8:ff:84:44:09:da:5f:64:
b4:73:bf:14:54:b4:c7:aa:52:6f:e5:30:24:e1:08:39:3a:45:
db:18:75:2f:65:d7:15:4b:cd:14:09:71:71:7f:b1:0d:5e:53:
59:a6:89:ef:0a:2d:17:f3:82:42:05:8b:d4:40:44:fd:e5:e8:
16:97:a8:ab:9c:0e:f7:28:4c:51:60:0e:44:76:e0:8c:0f:42:
a8:20:53:95:01:4f:ec:ea:de:07:83:27:b3:d8:1b:00:c6:48:
8e:eb:31:88:32:5d:f7:8b:88:ff:07:e9:43:b7:9d:4f:08:39:
64:81:8e:d6:d4:b8:79:b2:a7:88:a8:10:22:20:36:e1:d5:be:
53:bb:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:06 2025 by rpki-client