Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/6jxUh2TirRAg73mVt2T3yqH1pR8.roa
File: 6jxUh2TirRAg73mVt2T3yqH1pR8.roa (raw, json)
Hash identifier: PvN5idQSy4kp5PkSAnLeU/XbeXf9caZAJtkF0ZPIff0=
Subject key identifier: EA:3C:54:87:64:E2:AD:10:20:EF:79:95:B7:64:F7:CA:A1:F5:A5:1F
Certificate issuer: /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial: 17682F70
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/6jxUh2TirRAg73mVt2T3yqH1pR8.roa
Signing time: Wed 18 May 2022 15:36:16 +0000
ROA not before: Wed 18 May 2022 15:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12566
IP address blocks: 185.39.216.0/22 maxlen: 22
95.181.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392703856 (0x17682f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Validity
Not Before: May 18 15:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea3c548764e2ad1020ef7995b764f7caa1f5a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:c9:dc:f1:4c:54:b3:f2:b5:4b:8b:eb:07:
4d:46:16:9c:70:cd:b7:65:42:cd:ca:f2:f0:d0:c2:
e7:46:48:cb:e7:a2:ca:78:63:db:fa:14:ef:03:5e:
2a:f5:53:d0:a9:94:60:f3:7c:f2:21:eb:96:2d:e6:
d0:4d:18:1c:49:37:7b:0a:00:0e:c3:01:e1:41:b3:
f0:19:76:b0:c2:ac:85:2b:db:d9:73:ad:62:88:89:
1d:a0:61:c6:f0:6c:77:f6:6d:53:09:fd:1b:d6:ef:
94:11:0c:e7:e1:7b:81:ea:48:c5:6d:d5:ae:0c:f2:
13:32:c6:f3:4d:98:5a:b6:20:fe:cf:ca:b6:ae:4d:
7f:79:a3:0c:c3:4c:db:37:52:71:4b:70:10:24:43:
16:28:e4:dc:84:31:c7:c4:54:0b:66:56:ad:29:aa:
19:c5:d7:87:04:ef:92:9c:2e:0d:b0:55:9e:70:e9:
dc:a8:dc:b5:5b:20:bd:6f:06:51:0a:58:ee:de:dc:
30:1e:9c:e4:70:ca:00:63:16:bb:a9:72:fc:98:63:
08:5f:0f:7f:e6:67:31:1e:e0:12:16:af:26:10:a1:
c2:49:1d:31:b2:43:b8:4b:f0:1e:94:0f:df:a3:20:
7b:de:4d:da:d2:71:6a:07:b5:21:ff:85:2d:e8:65:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:54:87:64:E2:AD:10:20:EF:79:95:B7:64:F7:CA:A1:F5:A5:1F
X509v3 Authority Key Identifier:
keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/6jxUh2TirRAg73mVt2T3yqH1pR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.220.0/22
185.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:05:44:88:29:50:51:7b:e6:25:71:65:0b:b7:b7:ca:f5:78:
60:da:f7:51:26:ea:e4:77:b6:87:43:33:d9:57:b0:6c:03:a1:
3c:5a:db:13:22:db:ad:ba:fd:40:6e:2c:91:0e:fd:c8:38:b1:
88:1b:93:b5:6c:d2:2c:4b:a4:b9:3d:c9:6b:1a:d0:8f:b7:59:
9c:89:3d:58:a3:04:c3:19:da:79:77:c4:bd:72:d2:bc:91:bd:
43:7a:1f:53:6d:5b:ab:93:c9:4f:a8:f4:3c:94:a0:66:7b:e1:
07:d2:01:03:11:7f:b5:84:11:04:2a:80:a7:66:aa:5d:f1:db:
e8:cb:69:58:f3:42:27:de:26:55:f7:d8:dc:ca:f5:9d:e3:24:
7d:cf:7e:e3:cd:3c:30:22:60:9b:36:b0:3b:dd:8b:80:9e:4c:
af:a4:17:7a:2c:cf:39:a0:68:d2:08:94:15:69:97:b5:ac:9f:
4f:c5:81:df:4c:8c:4f:9c:d3:1f:84:bd:01:d4:c3:09:a5:67:
12:a5:56:04:bc:68:00:9d:c0:a8:f2:95:de:ec:1e:b6:08:a3:
f1:a9:eb:43:b7:57:e1:99:39:3c:11:23:c5:9c:88:e1:71:d8:
ba:75:c5:80:5f:fd:6b:7e:54:cc:ef:46:6b:1a:8a:da:89:99:
15:14:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:53:27 2025 by rpki-client