Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/6YyTiJSPbv1UicGAUpUrIjUSl7s.roa
File: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (raw, json)
Hash identifier: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=
Subject key identifier: E9:8C:93:88:94:8F:6E:FD:54:89:C1:80:52:95:2B:22:35:12:97:BB
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0194282802903E07BCB220F36DA44AD0EE13
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/6YyTiJSPbv1UicGAUpUrIjUSl7s.roa
Signing time: Thu 02 Jan 2025 17:54:58 +0000
ROA not before: Thu 02 Jan 2025 17:54:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8915
IP address blocks: 80.90.176.0/23 maxlen: 24
95.140.144.0/23 maxlen: 24
95.140.150.0/24 maxlen: 24
2a00:1818::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:02:90:3e:07:bc:b2:20:f3:6d:a4:4a:d0:ee:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 2 17:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e98c9388948f6efd5489c18052952b22351297bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:0d:51:ee:8a:a0:7a:af:6c:e1:34:b6:ad:
0b:54:9d:55:3a:11:32:b1:8e:9a:53:a5:d7:c2:ec:
47:e1:cb:1c:a5:2b:cc:0a:19:1c:63:cf:f2:78:9e:
ec:f2:15:9f:88:ff:36:85:fe:af:28:8a:a2:ff:69:
cf:52:73:41:67:eb:19:90:85:1a:d3:8c:52:0c:54:
fd:80:39:f6:31:9f:42:58:e7:9b:90:1d:a5:21:bf:
65:43:de:99:1f:4d:86:af:89:04:0d:3c:fc:99:ba:
1c:12:04:88:43:30:5d:43:b9:c6:d1:2a:3c:35:ee:
28:f1:33:01:5b:40:1a:6e:90:8c:1d:52:e5:11:b1:
46:d0:a3:0e:76:8b:b5:7e:21:29:57:b0:7f:8c:0a:
31:c2:cd:c6:a4:d0:a1:eb:02:5b:92:34:49:fe:7c:
c2:21:82:cb:ee:29:cd:f7:d4:24:f1:a3:4f:22:28:
2c:96:b1:77:1c:bd:ae:84:18:24:c5:d1:3f:7c:21:
ef:61:08:95:d3:34:60:07:4b:54:32:48:ee:4e:26:
32:3e:e4:bb:01:35:c1:9c:6c:ef:55:55:09:0e:57:
b7:c7:da:0f:3f:3d:36:1e:ea:db:04:97:df:75:c8:
60:0c:61:65:02:0c:7e:03:d6:79:13:d7:74:ba:99:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8C:93:88:94:8F:6E:FD:54:89:C1:80:52:95:2B:22:35:12:97:BB
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/6YyTiJSPbv1UicGAUpUrIjUSl7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.176.0/23
95.140.144.0/23
95.140.150.0/24
IPv6:
2a00:1818::/32
Signature Algorithm: sha256WithRSAEncryption
8f:ab:0a:ba:66:e5:50:ac:a9:84:3b:30:a4:6e:a0:16:04:c3:
d2:38:ee:b8:4c:ca:4f:a2:a8:ba:ab:96:9b:23:e1:fe:3d:2b:
50:b9:5a:8e:05:7c:5d:f5:f1:de:10:d7:d0:95:be:11:5b:09:
a7:b1:5d:ef:66:37:cb:7d:e2:8a:f6:cc:7f:1c:50:a0:4a:15:
27:73:ec:e0:b8:7d:26:a5:03:81:21:23:ab:5b:87:ff:7e:ae:
75:22:32:1c:6e:50:44:b2:15:62:b4:99:65:50:4f:22:7b:2c:
7d:f8:b5:5f:1a:f6:81:8b:ed:65:a7:5e:07:4a:3b:9c:b1:50:
93:af:2a:ce:b1:66:f7:4e:e7:8f:c2:fe:f8:30:0b:d9:de:a9:
94:a5:3a:1d:8e:25:4f:77:ea:f1:02:1b:4d:2d:ad:1e:8b:09:
c3:b1:c0:62:0b:cb:d1:3b:16:74:82:df:cf:d4:e1:d7:df:a4:
44:74:15:69:6f:56:55:ca:16:e7:88:0c:e4:43:be:29:09:39:
df:03:cd:d3:8c:59:32:d0:22:1d:48:17:e7:89:35:7b:eb:14:
77:2a:b8:f8:a1:05:f9:9a:df:fa:25:65:73:56:78:75:f6:bd:
38:bd:91:f3:8b:34:d2:9c:fc:8f:e6:9b:6e:29:59:36:fe:e6:
70:c5:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:25 2025 by rpki-client