Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/eN6QvWUr7qeVDtLcmkEJOjXaAVw.roa
File: eN6QvWUr7qeVDtLcmkEJOjXaAVw.roa (raw, json)
Hash identifier: ozsjIuLli4Vo7mQ55a+zE2U9/QA8QyauI1qn5+7fOmQ=
Subject key identifier: 78:DE:90:BD:65:2B:EE:A7:95:0E:D2:DC:9A:41:09:3A:35:DA:01:5C
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019473390E6A62F9300F4D995FD542A9112A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/eN6QvWUr7qeVDtLcmkEJOjXaAVw.roa
Signing time: Fri 17 Jan 2025 07:45:06 +0000
ROA not before: Fri 17 Jan 2025 07:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 145.19.0.0/24 maxlen: 24
145.97.16.0/23 maxlen: 23
145.97.18.0/23 maxlen: 23
2001:610:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:39:0e:6a:62:f9:30:0f:4d:99:5f:d5:42:a9:11:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 17 07:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78de90bd652beea7950ed2dc9a41093a35da015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:88:b1:29:51:a5:86:de:92:74:d5:45:d6:7e:
c2:1d:09:b0:5c:25:9f:46:a6:7a:6d:7b:a4:72:7d:
35:9a:7f:01:bd:85:f3:d7:96:da:bf:1f:20:3f:24:
95:f3:95:53:f6:b0:0b:3f:b0:2b:73:fe:d1:40:5d:
72:c1:f2:70:f4:d6:8f:d2:76:51:6b:5a:90:88:81:
ec:94:f4:85:bb:21:45:84:c1:28:89:92:f5:56:46:
cd:99:79:c2:6c:71:47:05:cc:dd:36:17:a2:d2:a2:
61:78:c6:7e:ba:32:ab:bb:c4:c0:39:9e:71:23:0b:
a7:03:bc:6d:e8:d9:53:63:30:2e:1c:85:5f:e7:39:
a7:03:c5:64:4d:c3:7f:4c:0e:61:e7:9e:c3:63:a4:
ef:8a:7e:c9:52:02:d3:7f:1c:e4:ed:cf:94:ad:ff:
13:0e:1d:b2:cb:35:94:68:72:3e:c1:fc:9f:02:11:
2d:65:fa:57:be:c5:8d:ba:ae:3b:74:b6:fa:aa:ac:
ee:08:90:3a:1f:8f:28:c0:0d:0f:a3:12:b9:11:fa:
ae:07:fc:ef:f0:d8:2b:b7:7d:2d:15:98:a6:0b:2f:
23:c1:2d:ca:0a:a1:50:fb:f0:96:71:38:7d:df:f0:
f9:11:7b:a7:77:b3:11:80:2f:96:7e:4d:44:ba:0e:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:90:BD:65:2B:EE:A7:95:0E:D2:DC:9A:41:09:3A:35:DA:01:5C
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/eN6QvWUr7qeVDtLcmkEJOjXaAVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.19.0.0/24
145.97.16.0/22
IPv6:
2001:610:2000::/48
Signature Algorithm: sha256WithRSAEncryption
8b:26:0f:68:55:34:95:bb:87:50:12:19:98:b5:5c:61:82:d2:
d4:8d:d9:5a:a0:96:28:84:5b:8a:74:8d:64:cd:fb:b5:c5:0a:
52:eb:fb:68:8b:b1:83:28:85:80:29:04:38:07:9f:7e:4c:56:
81:4a:7c:62:9f:b0:63:cb:24:19:5e:40:36:03:71:61:f0:13:
9c:17:9c:14:2e:00:e5:4c:52:c9:9e:99:1a:56:59:4a:63:24:
9c:4d:6e:2f:cb:c9:41:77:a2:14:9b:67:01:64:4b:f6:d7:25:
0b:19:88:ce:07:b3:01:33:c8:2c:69:a4:bd:de:5c:d7:61:30:
f7:89:73:23:91:11:c6:45:d7:e8:4c:b2:a1:f7:b8:35:4c:62:
51:2d:70:a1:20:d7:34:2e:27:bc:9c:4a:2d:8c:5f:c4:73:c8:
7a:61:b4:4b:f1:80:4b:6f:c2:76:c5:e9:82:62:0b:bc:bd:7d:
67:e5:a7:58:2a:23:5d:5f:79:9d:2d:77:65:88:d8:82:db:3e:
f0:bb:84:85:38:be:56:c0:b6:52:8d:28:47:5d:a6:7d:e5:81:
3f:11:4c:b8:3d:f8:d3:71:ba:65:5e:f4:78:81:50:a3:d8:60:
46:e2:1c:e8:db:f7:91:2e:c4:f7:f6:d3:32:d9:8f:b7:18:4c:
ba:43:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:01 2025 by rpki-client