Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/6dChuohTDCDCdX4xGrGFs8noFQU.roa
File: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (raw, json)
Hash identifier: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=
Subject key identifier: E9:D0:A1:BA:88:53:0C:20:C2:75:7E:31:1A:B1:85:B3:C9:E8:15:05
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6BB2373EED9B5DF497962D890DA1
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/6dChuohTDCDCdX4xGrGFs8noFQU.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 185.179.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6b:b2:37:3e:ed:9b:5d:f4:97:96:2d:89:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9d0a1ba88530c20c2757e311ab185b3c9e81505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9f:7d:69:1b:8b:a4:55:54:86:dc:6f:27:e0:
7d:8a:6a:a7:ae:76:70:ac:0b:6b:09:1b:6f:f9:ce:
25:16:00:dc:b7:1c:86:3d:75:c8:cf:ae:2d:1c:bb:
1c:ac:ac:64:13:2c:13:b8:45:21:31:27:5b:57:bd:
18:cb:cb:f5:7b:3d:a2:ec:37:99:28:ba:bb:ab:48:
22:bf:df:e6:02:74:d8:4e:1c:79:52:b8:4c:41:a5:
b4:e2:3a:76:b7:6a:2c:6d:7f:d0:b3:4f:12:b6:18:
20:7d:a5:a3:78:c0:a9:65:22:66:f0:22:49:c8:f2:
65:5c:66:d4:18:8e:0a:99:6d:eb:6c:8c:ae:17:90:
d4:de:a8:1d:06:4c:da:5e:46:d4:9b:31:dd:97:ec:
66:53:1d:c2:b3:3c:1d:1d:14:b9:db:d2:20:2a:51:
8e:54:7f:96:43:40:c9:d7:fa:2b:ad:16:eb:ac:72:
ed:be:d9:95:ae:89:9c:ce:0b:21:81:a3:89:f9:c0:
fa:96:e5:9d:b7:90:eb:69:cf:38:ea:78:2d:cb:a4:
96:70:c7:82:06:87:56:4c:b2:d8:d1:eb:b1:81:ce:
89:7b:f9:53:e6:b2:a1:af:43:08:38:cc:8e:2c:d3:
ba:2a:45:07:2c:98:77:ba:8c:12:54:d7:71:67:8a:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:A1:BA:88:53:0C:20:C2:75:7E:31:1A:B1:85:B3:C9:E8:15:05
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/6dChuohTDCDCdX4xGrGFs8noFQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.216.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f4:4e:b8:ed:f6:81:9d:ba:dc:5a:4e:0d:47:73:9c:a7:2e:
3d:6e:a4:5a:c2:8c:01:70:f1:bf:95:39:4d:3e:62:fe:ec:00:
22:8d:93:32:80:2c:d5:d5:6c:51:30:21:5f:09:50:45:fa:0a:
b2:80:b7:ed:b3:51:92:85:ba:92:d6:57:60:0c:3e:b6:3b:7f:
f5:f9:cc:a7:4b:22:4d:91:a7:a4:6c:f9:44:73:7a:24:5f:f4:
71:67:82:1b:2e:b4:57:4c:e7:81:28:a1:85:30:98:1f:61:af:
ad:7f:fd:54:1b:93:f5:6c:44:61:30:22:e3:41:78:8f:8c:2f:
b2:7b:ea:01:a1:b2:8c:c6:54:36:78:9b:44:72:6b:2b:0e:95:
28:40:ea:21:62:b6:b7:87:08:68:71:27:06:2d:8d:22:d1:87:
27:ac:24:30:f3:13:99:45:d3:25:04:a7:a0:40:49:58:06:23:
f9:cd:79:1b:11:7b:04:2c:33:7a:56:4d:fe:04:9d:6e:6d:dd:
e0:a6:cd:0c:13:e4:6c:39:a4:87:b0:0f:62:e2:54:00:62:18:
f2:07:07:8a:e2:49:ec:45:3b:d2:67:ae:60:f5:99:22:be:f6:
3c:14:75:15:34:2e:96:0c:ef:a2:00:12:9e:29:1e:74:4c:b0:
cd:ae:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:25:12 2025 by rpki-client