Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/g6Gtvj2royzigmBxRFBZdeG2Bgo.roa
File: g6Gtvj2royzigmBxRFBZdeG2Bgo.roa (raw, json)
Hash identifier: H0Z2GKJDkZssktqIBSEEAIDvjbTZ8hgDwKI+IbpyGiQ=
Subject key identifier: 83:A1:AD:BE:3D:AB:A3:2C:E2:82:60:71:44:50:59:75:E1:B6:06:0A
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 018F28F6529258326997F5D5AB1D3AC370CD
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/g6Gtvj2royzigmBxRFBZdeG2Bgo.roa
Signing time: Mon 29 Apr 2024 08:26:22 +0000
ROA not before: Mon 29 Apr 2024 08:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 195.2.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:f6:52:92:58:32:69:97:f5:d5:ab:1d:3a:c3:70:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Apr 29 08:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83a1adbe3daba32ce282607144505975e1b6060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:ef:2d:cd:19:85:6f:03:2f:16:40:70:79:
df:91:be:9c:77:35:b0:a5:35:1c:d4:35:ea:ce:f7:
8a:92:1f:33:72:b8:08:47:35:76:36:a6:a8:a9:7b:
fc:9c:7b:3a:0f:c3:63:e2:0b:cf:26:8c:d3:81:97:
c3:1f:b4:27:6f:21:cc:5d:f1:66:9b:51:84:71:e6:
0c:d4:da:93:c2:5f:28:1f:4e:d5:40:9b:3e:b9:26:
a5:f0:4b:0d:f6:e1:24:70:83:56:77:0e:04:18:f5:
aa:9f:f8:b8:f9:b8:26:6d:60:16:9d:2e:ce:ff:2f:
3e:24:b1:31:fe:0f:18:8c:db:40:c4:3e:8c:2b:5d:
6c:6b:3d:5c:da:a5:ad:89:35:a7:64:cd:7b:1c:26:
e0:db:65:68:47:4c:40:30:5e:df:a0:6f:38:52:f1:
29:16:60:eb:b9:bf:bd:2e:19:35:6c:c7:6d:7f:24:
18:44:cf:6a:75:35:f0:f4:0c:cd:52:20:21:ed:ec:
c7:f5:9e:ff:fa:58:87:56:8e:30:e5:3f:b3:1d:b6:
bb:7f:8e:8a:0f:fe:4c:67:3a:9a:10:6c:9d:c9:3e:
34:ba:69:9a:4f:7e:d3:8b:30:21:e4:20:d0:6a:9e:
6b:07:32:34:d9:39:6c:15:8d:d8:f3:3f:9d:6d:7c:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:AD:BE:3D:AB:A3:2C:E2:82:60:71:44:50:59:75:E1:B6:06:0A
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/g6Gtvj2royzigmBxRFBZdeG2Bgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c7:3b:00:01:69:17:37:4a:1d:75:b4:ed:8e:5f:5a:02:72:
9c:41:b4:d1:72:ed:af:79:35:41:f7:6c:9f:eb:bd:88:b4:4c:
5d:17:ee:35:66:94:8e:41:f8:3f:23:c3:56:89:5a:e8:9a:5a:
03:95:0d:98:a7:11:94:88:c0:15:49:9e:f1:84:1a:d9:39:8e:
d8:69:00:98:1c:2f:8d:3c:57:de:7c:a4:10:61:c4:4b:0b:18:
04:44:68:cf:7c:9b:1e:e7:d4:3d:28:68:d5:32:fa:80:46:bc:
f2:9d:57:0f:d1:4c:cb:25:0b:04:d3:04:b6:35:fd:60:ed:41:
a1:d1:fc:43:6e:ca:c5:e2:bd:1b:68:5c:9d:80:93:d0:bc:46:
7f:d8:cc:3d:63:17:a9:1f:1c:fd:06:76:b0:79:8f:ff:78:1c:
5b:5b:70:00:7c:f5:64:72:e3:a8:d4:15:21:c0:86:e7:df:c9:
24:96:e0:e5:1c:49:3b:4e:5a:e2:6e:a8:3e:fd:77:24:6c:ff:
d4:c5:0c:17:f3:4a:d8:20:fc:dc:8d:7e:ab:45:9a:84:59:e2:
ee:54:b4:59:96:4c:94:0b:39:90:ea:ce:2a:98:f2:8f:76:ce:
67:c9:5d:01:b6:48:e9:0c:76:0e:b9:dc:6d:18:fe:e5:1f:d0:
ee:5b:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:58 2025 by rpki-client