Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/6BS-pMV_G3R5J5zA61nX3-qCpto.roa
File: 6BS-pMV_G3R5J5zA61nX3-qCpto.roa (raw, json)
Hash identifier: 2/kv7khAcLVIWM8ZeASORdY5NNtR0/DyrL2RT5dZ3ig=
Subject key identifier: E8:14:BE:A4:C5:7F:1B:74:79:27:9C:C0:EB:59:D7:DF:EA:82:A6:DA
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 018CC9BCD4CE1EF66C6B5E90C49286CE7AAB
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/6BS-pMV_G3R5J5zA61nX3-qCpto.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28820
IP address blocks: 195.225.252.0/22 maxlen: 22
193.29.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d4:ce:1e:f6:6c:6b:5e:90:c4:92:86:ce:7a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e814bea4c57f1b7479279cc0eb59d7dfea82a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:1e:c4:d1:47:ce:65:8a:06:82:72:db:20:
bb:ad:d2:91:99:50:a4:f0:f7:55:3b:31:0a:68:18:
41:89:66:1e:65:6d:c8:b8:88:0e:2e:0d:93:aa:1f:
d0:d1:49:77:23:c4:86:2d:4e:a0:6f:ef:98:b9:b5:
01:ba:67:b1:df:f4:c9:40:6c:9a:78:37:40:c8:33:
d5:17:6a:32:f1:f7:14:48:cb:ee:25:ff:86:66:31:
8e:4b:76:32:22:68:4b:3a:57:bd:80:5b:35:50:f9:
cf:0c:55:f2:13:89:97:21:6a:31:cb:fb:a3:64:b4:
da:79:0e:86:11:60:be:9c:ad:d3:9a:36:d6:d2:0f:
a6:e3:93:25:a5:b3:f1:08:79:3b:58:de:fc:8b:f9:
00:69:97:6a:f3:55:6b:64:e1:6f:e2:4e:c6:83:8f:
57:80:5d:d0:bc:28:81:42:7a:b8:e4:15:47:89:2d:
2b:4a:f6:f0:aa:f4:de:28:7f:88:1b:b6:80:85:6f:
80:df:ec:c1:9a:f7:d0:c5:e9:cb:42:a6:82:6f:44:
06:66:ab:21:0e:f1:4c:80:85:9e:84:a3:b7:fa:89:
06:0e:6b:7c:6e:62:30:b7:f6:73:e2:94:8a:31:16:
19:09:5b:44:72:07:09:df:54:b7:39:c2:43:c0:da:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:BE:A4:C5:7F:1B:74:79:27:9C:C0:EB:59:D7:DF:EA:82:A6:DA
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/6BS-pMV_G3R5J5zA61nX3-qCpto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.55.0/24
195.225.252.0/22
Signature Algorithm: sha256WithRSAEncryption
50:4a:b1:28:ce:d7:99:ee:c0:d3:db:77:42:69:89:8b:bc:8c:
5a:ec:3f:34:8c:a3:bf:96:76:76:43:2d:d9:ba:6a:7d:b6:ba:
4c:f4:49:e4:25:22:aa:a7:ca:10:de:5c:93:fd:3f:4f:a3:e7:
d6:a3:54:4c:5a:3c:60:92:18:2b:39:1b:04:5f:fb:8a:cf:e6:
77:35:87:39:75:99:0c:01:91:3b:bc:f6:25:3a:0d:79:d1:04:
b3:0c:b1:77:dd:c3:6c:b9:e6:bd:1a:92:73:37:69:ae:ab:af:
8e:79:91:61:06:a8:6f:ef:cb:49:fe:07:db:77:54:e6:5d:7d:
7a:95:45:f3:30:51:48:e7:94:7a:82:37:aa:a4:d9:cb:6a:9a:
80:5d:84:cc:19:5d:5c:80:43:b3:7f:9d:e4:c2:d6:37:d5:0a:
43:69:74:e3:19:9f:21:f4:13:41:82:5a:a1:22:ca:ad:76:0c:
a1:5e:02:62:a1:d3:7a:1f:cb:89:34:0f:13:5e:b4:4a:71:a7:
21:b6:70:bf:c5:1a:db:d5:4a:af:44:06:64:7f:a7:8c:af:29:
60:50:6f:28:9d:40:44:d7:8e:7f:93:51:e7:d7:82:92:b4:2a:
08:80:4e:fb:d9:05:4e:3e:1e:85:ec:96:aa:72:b9:d8:ba:c8:
95:67:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:39 2025 by rpki-client