Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Emm6nRm_ICEiezFVE6yUTG4tNAA.roa
File: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (raw, json)
Hash identifier: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=
Subject key identifier: 12:69:BA:9D:19:BF:20:21:22:7B:31:55:13:AC:94:4C:6E:2D:34:00
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0195DBE6B4FB11748B4ECFEBB7A0F3DA85CF
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Emm6nRm_ICEiezFVE6yUTG4tNAA.roa
Signing time: Fri 28 Mar 2025 08:38:04 +0000
ROA not before: Fri 28 Mar 2025 08:38:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 217.179.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:e6:b4:fb:11:74:8b:4e:cf:eb:b7:a0:f3:da:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 28 08:38:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1269ba9d19bf2021227b315513ac944c6e2d3400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:56:36:5b:01:0f:60:27:8e:1c:14:7e:a8:
1f:16:7b:10:c0:77:fc:f0:73:fb:28:9a:e8:9d:80:
af:db:f5:b8:b9:25:a4:0e:f0:21:1f:90:bf:f0:b0:
81:f8:c8:a7:c4:4f:a4:85:5b:f1:89:25:26:57:b2:
c6:e8:22:85:25:37:df:fa:8c:7b:44:38:d3:e6:9a:
c9:35:42:97:65:82:e4:09:4d:ea:95:e8:d3:74:a4:
41:dd:d6:55:ff:b0:3f:f0:0c:9d:ba:b2:75:4f:2d:
91:a7:34:ab:23:52:bb:a3:47:17:45:92:5e:f0:b7:
4e:97:ae:93:03:be:e6:e7:cd:7c:1e:76:6e:62:b1:
53:c8:f2:33:93:d6:c5:ff:ef:a0:f4:51:7a:bd:76:
ea:22:94:55:8c:54:4d:d5:bd:3d:d8:6e:75:66:50:
b1:45:67:db:5b:f4:bc:16:11:90:14:73:d3:13:bb:
3a:b4:56:c1:12:36:80:66:b8:17:11:e2:c7:dd:44:
20:be:74:39:e5:56:ec:b0:1b:5c:0f:91:be:e9:1a:
0a:b3:75:cb:7e:1d:9c:d5:c7:cb:f9:99:e6:f7:d8:
d7:5e:ff:63:5c:cf:e9:15:ad:2e:d3:02:ec:66:6f:
e6:4e:e5:a5:2d:9e:c9:10:e5:ae:ca:0f:16:98:f5:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:69:BA:9D:19:BF:20:21:22:7B:31:55:13:AC:94:4C:6E:2D:34:00
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/Emm6nRm_ICEiezFVE6yUTG4tNAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:25:3d:98:f4:3f:d8:32:54:95:41:57:b4:18:e0:33:50:f2:
84:91:67:36:bd:b9:f5:bb:3d:bf:da:86:db:ef:72:18:6c:24:
38:33:b3:d0:c8:45:d0:6e:ea:6f:b9:d0:c5:3f:b7:e4:60:3b:
61:c0:0f:c4:5c:30:80:80:31:e2:e3:a2:d0:8c:40:c2:52:70:
ca:91:7f:8c:94:b9:b7:08:24:4d:38:8b:bb:c3:06:82:fe:45:
73:d6:f9:cf:fc:fb:d3:36:41:b6:76:21:91:3e:fe:0b:2e:a1:
8e:f4:d7:e7:ce:33:14:85:07:33:42:e3:cc:dd:a9:15:b1:ff:
c3:b8:bf:40:01:d5:39:83:c7:de:ee:3b:80:fe:2b:a1:fb:a1:
87:fc:1c:29:1f:24:83:24:7a:6c:12:da:60:24:da:fd:08:2f:
80:02:7f:75:b3:bf:6e:89:cd:d2:98:fc:df:22:60:06:f0:2e:
c0:2e:6e:1a:32:61:06:9c:f4:2d:04:bb:d9:fa:bd:30:4b:90:
ca:24:0c:e2:22:36:4b:75:7b:91:ee:22:71:4a:df:fb:e1:5e:
15:6b:61:54:db:6e:43:67:96:b1:12:b2:16:2a:76:d9:1f:07:
41:bb:04:47:7f:32:32:dc:28:2c:00:6b:fe:df:84:11:ad:7b:
2a:04:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:38 2025 by rpki-client