Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa
File: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (raw, json)
Hash identifier: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=
Subject key identifier: 98:EE:89:07:66:A3:ED:D5:C5:79:E2:78:CE:5B:F2:C9:63:18:19:D7
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95B66E0FBC821D63994D7E1238E98
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 185.204.17.0/24 maxlen: 24
185.204.18.0/24 maxlen: 24
185.204.19.0/24 maxlen: 24
193.9.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5b:66:e0:fb:c8:21:d6:39:94:d7:e1:23:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ee890766a3edd5c579e278ce5bf2c9631819d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:69:e5:c1:76:62:6d:6a:e5:30:0a:31:52:
a1:67:74:c2:3f:34:71:1f:26:ba:25:da:f0:93:8c:
fc:ae:88:e5:c1:01:c8:de:30:73:bb:d3:cb:d5:a5:
00:30:35:ed:d8:16:0f:5a:5e:7e:1e:ee:74:53:19:
25:11:21:26:a6:53:f8:93:d5:6a:b3:63:48:ad:32:
5e:d3:a8:5f:00:3c:07:6d:b1:e1:ae:f3:a7:f4:d8:
a6:0a:47:7c:1a:f3:36:6a:a7:55:86:8b:01:0c:1d:
9c:81:a8:79:0a:04:8b:13:52:3c:a6:9d:9d:55:3a:
f6:47:f3:3c:19:e5:fb:07:99:d6:70:bf:fb:08:12:
0a:bc:90:89:01:c9:81:4a:0e:52:62:c2:13:3a:61:
57:ac:71:f7:64:4f:b7:97:4b:cd:c3:1c:81:30:c2:
df:23:48:1d:a5:fe:56:03:5a:bd:65:e0:63:f0:62:
97:42:3e:5d:c1:dd:53:af:29:14:c9:67:30:41:ac:
97:c4:04:09:e5:80:93:94:93:e9:8e:e5:1b:af:4f:
d1:7d:22:fb:06:8c:32:80:8c:e7:77:77:a5:54:7a:
c2:74:93:1a:79:19:2e:b6:cd:04:c0:43:6b:71:2a:
9c:8c:0f:dc:66:51:f2:ec:ae:98:f2:0e:61:6b:4e:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:89:07:66:A3:ED:D5:C5:79:E2:78:CE:5B:F2:C9:63:18:19:D7
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.17.0-185.204.19.255
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
01:c7:4a:2a:24:6a:f7:32:e9:68:02:53:d7:96:1b:be:53:95:
e5:d9:0d:94:91:57:97:3f:04:92:4b:3e:b6:2f:a5:6d:83:40:
8e:73:68:14:fc:76:90:98:cb:e4:6d:cd:8e:b9:60:9a:69:7b:
3f:e8:ac:1f:27:13:38:c3:70:3c:d8:09:f0:ed:6c:67:35:ff:
c4:36:b0:51:f4:5c:c3:46:1d:ec:d1:1f:67:8b:61:e2:31:c5:
a2:b7:4c:89:38:e9:92:1d:d6:b2:86:07:4b:74:cb:f1:6d:7b:
12:c7:d8:ed:29:80:7b:e5:7d:f7:8e:18:38:78:62:c4:bf:67:
7f:ab:1d:fb:7b:f6:18:fb:60:3a:6e:14:6f:39:5e:a7:96:8d:
01:7a:ea:ce:43:da:1f:c2:54:6f:0d:bf:1f:69:1c:86:59:75:
b2:36:8b:f3:4a:19:45:17:10:53:2b:c7:60:fa:d0:c7:e0:c7:
2c:1b:0b:ec:fb:98:8d:55:de:72:8d:7e:0e:b3:fd:c1:7b:23:
d2:ef:a5:7b:5e:04:08:d0:e9:3d:67:31:c6:00:6b:25:29:f5:
38:5c:2e:28:24:10:e1:51:c4:bb:a3:14:15:af:ff:20:4b:55:
0f:f4:6c:38:4f:31:b0:cd:ac:a5:ca:2e:dc:c5:ca:cd:d5:80:
32:c6:09:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:54 2025 by rpki-client