Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/k_Rgw1us8YMQNGfmtJzwQSs4ORA.roa
File: k_Rgw1us8YMQNGfmtJzwQSs4ORA.roa (raw, json)
Hash identifier: JyZxcDTlaiDucknA9O5DJnrmn33uTTRwd56iEAAYc/Q=
Subject key identifier: 93:F4:60:C3:5B:AC:F1:83:10:34:67:E6:B4:9C:F0:41:2B:38:39:10
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 01941FFAA2284EEC4220F90121F3F9F43DDE
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/k_Rgw1us8YMQNGfmtJzwQSs4ORA.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 79.171.96.0/21 maxlen: 24
185.62.60.0/22 maxlen: 24
185.67.180.0/22 maxlen: 24
185.130.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:28:4e:ec:42:20:f9:01:21:f3:f9:f4:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93f460c35bacf183103467e6b49cf0412b383910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:ee:c8:38:65:42:65:b1:fa:fc:41:16:1d:
24:47:5e:b2:33:12:19:37:f3:f3:ae:a8:98:25:92:
f2:b6:d0:13:a2:b6:29:13:44:19:89:fc:b4:e1:10:
f1:c6:19:b5:9c:01:0f:a2:3c:27:3c:8f:a1:00:04:
44:68:06:49:41:2b:29:66:6a:39:30:31:10:93:84:
30:f9:62:95:86:2b:f4:09:68:97:58:38:1c:3c:f8:
5f:cd:19:92:b8:e7:8d:51:7c:94:d0:db:4d:0e:fb:
11:e9:dd:7f:bc:47:1d:20:5f:15:d2:63:8d:61:a2:
81:ed:ac:6b:70:23:67:d5:26:e3:82:4d:b6:f6:48:
9d:57:e4:ce:28:e1:5c:db:e8:6e:6d:00:53:27:1b:
b0:11:ad:68:24:4f:98:8a:81:83:ed:c0:62:b2:fd:
19:3d:1d:f8:98:97:9e:0a:c0:8c:99:15:62:d3:51:
da:73:df:bd:0a:53:21:18:af:89:10:19:1e:09:8c:
97:a3:61:ac:4e:a6:63:b7:bf:3c:67:b2:db:39:c4:
b3:06:03:a4:8e:23:45:f5:6b:ce:7b:05:54:10:2d:
8e:25:45:77:1e:5b:1e:0f:c4:2a:05:3e:a7:b6:06:
57:81:13:50:b3:93:44:86:a5:0b:c1:94:d2:8f:3d:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:60:C3:5B:AC:F1:83:10:34:67:E6:B4:9C:F0:41:2B:38:39:10
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/k_Rgw1us8YMQNGfmtJzwQSs4ORA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.96.0/21
185.62.60.0/22
185.67.180.0/22
185.130.12.0/22
Signature Algorithm: sha256WithRSAEncryption
37:3c:d4:cb:37:fa:9d:2c:35:86:af:72:87:30:3c:47:24:a9:
d0:32:1c:ab:8c:6b:ef:a6:49:ea:57:65:77:8c:01:f6:0c:dc:
89:e1:af:5e:21:70:2a:a6:0b:1f:dc:6d:9f:14:1d:02:b3:02:
cd:4a:a8:d8:af:39:dc:7d:9f:5d:5b:87:71:5f:83:cf:9a:3e:
8a:a0:1f:7d:31:63:f0:2a:99:6e:c3:e0:d3:57:71:64:a5:23:
2f:33:d3:3e:e7:84:ca:bc:ca:eb:62:91:ea:2e:e2:e9:ff:77:
0a:a0:4d:8e:dc:60:00:38:bd:a0:ab:c7:f9:83:1d:31:13:21:
29:de:77:1b:10:30:1d:d3:ad:dd:6f:5c:e8:0b:de:eb:21:08:
44:f4:f5:69:f2:f2:49:1d:81:d4:99:bd:07:21:72:76:cf:62:
fd:81:ee:93:ed:30:f9:e4:9c:65:3a:53:ca:2f:b2:aa:5b:07:
9a:db:3c:13:f1:c8:35:e3:6c:e7:50:92:c1:31:62:bc:5e:56:
82:c7:83:0d:39:63:39:e0:9f:c8:ab:a8:0b:2e:74:11:8b:c4:
ce:b5:40:12:e5:0a:8f:2d:72:9c:91:4c:32:76:ee:5f:a0:1d:
2d:fd:80:c1:f4:9b:9d:4a:7a:16:e8:e6:3e:ba:b1:01:df:bc:
41:56:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:59:18 2025 by rpki-client