Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6uWFj4DgGELf-FbQqlpVi5WI9QI.roa
File: 6uWFj4DgGELf-FbQqlpVi5WI9QI.roa (raw, json)
Hash identifier: qlyTs1bfOh/yM7dO3M9sT1wwzJyeonxhKJdELYFQ1xg=
Subject key identifier: EA:E5:85:8F:80:E0:18:42:DF:F8:56:D0:AA:5A:55:8B:95:88:F5:02
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194244490C0B02DCBF05CE9ACF2212946B4
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6uWFj4DgGELf-FbQqlpVi5WI9QI.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51087
IP address blocks: 193.32.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:90:c0:b0:2d:cb:f0:5c:e9:ac:f2:21:29:46:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae5858f80e01842dff856d0aa5a558b9588f502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:88:78:47:ae:e9:af:ca:11:92:60:65:67:
21:98:37:e0:7a:92:0b:27:45:ca:e7:32:5e:d1:82:
84:3b:e7:5c:c6:b9:9d:0b:b6:94:15:bb:0a:91:4c:
34:39:e9:5a:c0:4d:00:e0:3f:61:33:bb:54:ca:5e:
9a:27:34:9b:95:37:a2:93:6b:d3:3e:64:86:cb:99:
ed:dd:61:5c:1b:b7:ad:7f:6f:24:20:b4:9b:d1:43:
34:1d:c5:49:89:72:18:1e:75:09:12:fe:b9:9c:c3:
53:5b:28:6f:8e:4a:4a:15:74:4f:1e:9d:03:0b:a3:
a5:54:a0:01:38:a4:6c:03:ec:10:2f:33:d9:58:f5:
52:86:ea:f4:2b:f5:81:1a:b7:8d:67:cf:a7:24:7f:
7a:e8:ac:c9:b6:5d:8e:b5:f8:60:68:60:88:92:c9:
f4:f1:e0:44:55:83:d8:5c:9f:88:a7:c5:ab:df:99:
f7:d4:3f:16:ff:31:13:32:69:3d:c3:95:5f:87:2e:
37:34:61:ea:7d:43:c3:c4:f5:24:1a:42:3a:03:d0:
d9:2d:ba:30:3c:25:48:73:97:22:ec:40:bc:26:c8:
a3:f7:c5:96:46:63:00:4e:1d:d1:41:21:ff:f9:b0:
bb:d2:f6:b4:b9:b3:86:09:7a:ef:11:e5:f4:8c:4f:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:85:8F:80:E0:18:42:DF:F8:56:D0:AA:5A:55:8B:95:88:F5:02
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6uWFj4DgGELf-FbQqlpVi5WI9QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a5:56:47:e0:88:b0:45:a9:84:9e:d6:9d:8d:51:56:69:aa:
89:d0:be:72:cd:02:17:e6:37:fb:f9:b8:0d:37:bf:3d:27:e2:
3f:20:d2:6c:4e:df:76:c4:79:4e:87:f7:90:17:8d:71:49:5c:
fe:da:a5:51:6e:6b:71:a1:43:17:99:7e:38:6c:11:e0:c9:d4:
ea:c5:d6:89:24:5b:7d:47:e9:8e:b5:ec:9f:24:f1:d6:e7:23:
86:73:1a:ad:22:1f:cb:bc:ce:05:fa:12:39:a3:7d:9b:d3:ee:
96:4d:5c:5f:55:bc:3d:3f:51:65:8b:ab:d9:47:c1:34:13:37:
17:57:32:02:84:06:35:3c:88:9b:b2:b1:6d:09:10:08:0a:81:
fa:1b:80:49:ca:3a:ca:33:5c:f0:2e:a1:b9:3d:1d:cc:18:93:
2b:a5:bf:bf:a1:ae:42:59:53:71:72:11:91:06:c2:9f:4c:1f:
6b:9e:aa:89:aa:d6:bc:9d:09:45:c8:23:a6:0d:50:f5:62:9d:
32:43:04:cc:65:2c:1c:33:82:e5:6c:bc:a3:dd:20:15:33:27:
b5:66:d6:df:39:07:de:09:ee:15:ee:6e:fb:4e:00:f5:3b:2f:
7b:50:d2:50:d6:b3:bf:ce:00:60:23:ba:a4:bb:45:fa:85:7f:
b0:4b:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:11 2025 by rpki-client