Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa
File: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (raw, json)
Hash identifier: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=
Subject key identifier: E9:85:88:72:98:EA:59:75:CF:AF:43:47:32:A7:35:B7:D0:57:15:57
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B674B20432D37238577A167E68B39F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7303
IP address blocks: 2.18.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:74:b2:04:32:d3:72:38:57:7a:16:7e:68:b3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e985887298ea5975cfaf434732a735b7d0571557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8c:17:c1:7f:b7:1f:e1:53:dd:3c:a5:bb:ff:
ac:bc:f5:7a:e4:aa:31:ab:05:41:4a:7f:5d:0a:00:
e3:37:df:36:2c:d3:e9:a8:78:38:5a:09:05:d7:ef:
b6:10:0d:8b:ec:51:5a:a1:07:f3:5b:fb:82:ea:73:
2f:fd:74:28:1b:a6:eb:8e:17:5e:ba:16:47:36:b0:
1a:d3:22:ae:4f:1c:cd:01:5b:30:0c:b6:af:6e:77:
c5:f9:c6:1f:57:07:8e:fd:a5:14:23:eb:96:fb:c7:
52:06:35:c1:50:98:bc:5b:a6:99:22:d2:c2:19:9a:
45:f5:ba:c8:2f:e6:c8:37:53:33:76:19:15:28:7e:
34:af:6d:93:82:2b:dc:5e:e9:4c:73:35:af:1b:ef:
32:18:6e:db:c2:ef:c2:ed:04:4a:e9:80:04:1b:3f:
3c:69:0c:55:bb:79:5a:18:4b:96:76:f1:25:e7:af:
d4:c0:4b:75:e6:67:b5:85:72:92:99:9e:6f:b8:a5:
12:63:ab:5f:85:be:63:f6:36:6d:ee:e9:0a:cf:28:
c3:21:8e:2b:b8:f5:c2:af:f4:e5:09:dc:bc:a6:1a:
76:ca:fb:52:8d:6c:ef:7c:d0:66:59:06:75:7c:65:
d2:27:8b:e6:19:fd:d2:41:3e:35:df:4f:fe:c6:14:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:85:88:72:98:EA:59:75:CF:AF:43:47:32:A7:35:B7:D0:57:15:57
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.18.56.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7b:f8:21:28:e6:1f:3a:08:6e:17:e3:60:cd:9b:2a:40:21:
0b:8a:1e:88:d9:8b:9f:31:20:66:16:65:0a:53:65:c2:15:ac:
fb:a2:9e:32:cf:7d:25:ba:f9:66:5c:08:44:bb:3c:ed:8b:61:
9a:3b:40:33:0e:60:39:e0:1f:36:ac:0b:fa:0c:39:6a:86:31:
1d:f8:21:e9:1c:c8:b9:87:e3:1a:c2:ef:16:e3:3e:f8:34:99:
39:2a:11:4a:51:35:99:64:c8:c8:72:c7:55:42:20:f0:3d:7d:
c3:c2:f6:5d:6b:43:a6:a4:54:46:31:a2:67:db:bd:df:cf:18:
76:b5:33:e0:81:e1:7f:b7:0d:fa:2b:e8:d4:89:1e:26:93:13:
6d:84:2a:00:d4:a6:7f:c2:5e:31:bb:f9:05:0c:92:5a:92:9b:
19:c3:f6:7c:7d:23:8f:17:41:32:23:f7:f7:21:af:a0:bd:61:
7b:cd:78:b7:24:47:45:32:c1:cc:68:53:70:e5:13:f5:bc:46:
79:e9:fa:03:26:9c:60:e9:a3:e4:64:3d:87:d1:70:f1:a7:df:
30:ed:a6:97:37:b0:cf:60:da:a3:63:af:ae:c6:ed:16:5e:39:
85:85:c1:d2:14:36:96:fd:d2:e1:f9:ca:c5:57:0f:c3:aa:bf:
27:f7:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:25 2025 by rpki-client