Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/6QhOsCJ9h6HeSXKy_M7Ok4EmHTg.roa
File: 6QhOsCJ9h6HeSXKy_M7Ok4EmHTg.roa (raw, json)
Hash identifier: xRJq8TlFtqjHXFvDS46olNKe9KrmjF4yplWKPRJSIMg=
Subject key identifier: E9:08:4E:B0:22:7D:87:A1:DE:49:72:B2:FC:CE:CE:93:81:26:1D:38
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0194236A24EED239D2022FFB370FBBA23789
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/6QhOsCJ9h6HeSXKy_M7Ok4EmHTg.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.179.128.0/17 maxlen: 17
2001:67c:794::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:24:ee:d2:39:d2:02:2f:fb:37:0f:bb:a2:37:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9084eb0227d87a1de4972b2fccece9381261d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:ed:b1:d5:1f:21:87:5d:61:90:d4:23:62:
cc:25:32:88:09:9b:16:a4:36:2b:39:2d:96:60:d3:
c7:b7:50:8f:46:28:dc:23:90:a6:6b:4c:54:8c:a1:
24:b5:6b:53:a0:31:59:cf:f7:ed:48:16:64:c8:6b:
ed:fa:0d:4b:e6:6e:47:84:e8:79:42:81:b7:e2:7b:
7f:23:92:c5:38:05:62:8d:22:69:39:65:f0:c7:88:
3f:7f:e7:bc:d3:37:cb:79:93:92:d6:75:4d:77:c0:
a4:67:20:85:f6:4e:8e:1a:19:83:3b:e9:09:97:8e:
b2:11:50:4a:88:c8:51:0c:89:d7:9f:a3:9c:f8:de:
59:80:b6:32:c6:35:cd:96:b2:6e:fb:5c:af:b4:62:
10:00:3e:38:c9:7e:b7:13:b6:36:20:24:14:3d:cc:
66:76:c3:43:56:d1:71:0b:e8:68:17:0b:b2:24:f4:
dc:db:a5:0f:98:5a:3d:12:33:b8:42:72:86:b8:d6:
e5:90:34:ba:95:be:1d:c8:0d:b9:9b:27:18:2c:46:
b2:ac:51:3a:ee:c9:9f:bd:1e:bb:4d:0f:aa:d6:d6:
86:03:e0:4c:b3:b1:55:c2:05:02:70:56:da:79:9b:
cd:7f:6e:87:82:bb:6c:15:31:e1:46:cc:98:7b:e4:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:4E:B0:22:7D:87:A1:DE:49:72:B2:FC:CE:CE:93:81:26:1D:38
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/6QhOsCJ9h6HeSXKy_M7Ok4EmHTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.128.0/17
IPv6:
2001:67c:794::/48
Signature Algorithm: sha256WithRSAEncryption
7b:7d:f4:fa:4f:a0:de:0f:95:7a:f3:a5:e2:c2:75:27:09:21:
bc:4d:db:f1:61:ef:47:00:d2:4d:3c:a3:b9:cc:8c:c3:ae:5b:
48:61:9a:22:9d:b5:8f:a1:db:d2:4c:7b:66:ea:d0:40:d6:d0:
7b:18:fd:3a:06:8f:9b:fe:e7:b8:3b:b1:ac:8f:88:b9:0b:bb:
9f:8d:b6:ff:3c:04:b5:de:ed:37:9d:32:44:64:e5:63:81:39:
74:32:68:87:dd:9c:79:f2:79:96:48:38:7b:f2:82:6c:be:8c:
97:89:55:bd:f4:75:2e:b6:01:f5:f7:e7:76:dd:0b:54:45:c9:
d6:61:12:db:4b:70:71:ad:a6:4a:06:a2:3e:94:4e:8f:1d:fc:
82:6f:e3:ef:58:fb:5d:a6:e8:2e:81:69:18:f6:9b:80:aa:0c:
8a:3a:9a:84:29:17:03:f5:5b:57:c9:d5:81:b5:c1:f6:eb:13:
7d:19:69:b6:f9:0e:23:9a:fd:d4:20:2b:0e:8b:08:cd:de:0b:
b6:4d:4f:df:e4:46:05:7b:51:b0:8a:56:27:b7:46:2b:90:3e:
e8:1e:97:a4:fd:cd:8b:d7:77:3e:59:16:9d:6e:e9:df:dd:04:
c0:2b:b0:c2:cf:9b:de:97:1e:93:f0:aa:f3:16:f9:66:f6:b0:
18:fa:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:11 2025 by rpki-client