Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/c6eHaiXiRvnVAbCikD-QIkjcWys.roa
File: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (raw, json)
Hash identifier: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=
Subject key identifier: 73:A7:87:6A:25:E2:46:F9:D5:01:B0:A2:90:3F:90:22:48:DC:5B:2B
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0194282801E7C052434069799AD216428B0C
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/c6eHaiXiRvnVAbCikD-QIkjcWys.roa
Signing time: Thu 02 Jan 2025 17:54:58 +0000
ROA not before: Thu 02 Jan 2025 17:54:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3285
IP address blocks: 80.90.176.0/23 maxlen: 24
95.140.144.0/23 maxlen: 24
95.140.150.0/24 maxlen: 24
2a00:1818::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:01:e7:c0:52:43:40:69:79:9a:d2:16:42:8b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 2 17:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73a7876a25e246f9d501b0a2903f902248dc5b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:6e:c4:7d:01:62:65:07:99:30:4a:05:c0:
d0:65:cb:a9:16:58:7f:21:8e:fa:c8:75:a6:c2:c0:
49:a9:d1:01:d3:96:30:58:94:72:14:ba:a9:f3:5b:
a0:34:b3:db:84:04:15:a4:a2:cc:b4:c6:8e:ab:94:
53:01:29:31:a9:07:6d:48:38:2b:e1:6b:88:0a:8f:
49:74:97:c1:4b:ec:e0:f4:00:b4:8b:ef:be:f3:03:
95:40:21:f4:cb:95:54:f7:c7:aa:ae:1f:f9:02:98:
98:c9:76:57:15:3c:90:eb:c8:2b:b1:50:99:4b:57:
cc:43:05:17:58:a4:3d:dd:c0:dd:0d:9a:b1:03:2b:
6a:8d:f9:cc:9d:31:99:05:ed:c4:9a:76:1a:e6:0d:
ad:6e:f8:f0:77:e3:ef:bc:7b:e7:92:cc:61:18:15:
29:2c:7f:2a:40:d5:11:d2:33:15:fe:7d:c2:d3:89:
a2:7b:35:1b:75:da:68:da:36:e8:91:d7:fc:4d:19:
86:03:c6:ea:a6:57:e0:54:65:27:7a:6c:e1:a0:7c:
ad:f5:68:34:17:7c:97:98:cb:a4:0a:5e:a4:c9:28:
b3:ed:bc:dc:b8:d3:5e:ba:a3:99:a6:e9:6e:a0:32:
75:88:8d:75:63:7b:1d:d8:39:3e:de:d3:8c:17:95:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:87:6A:25:E2:46:F9:D5:01:B0:A2:90:3F:90:22:48:DC:5B:2B
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/c6eHaiXiRvnVAbCikD-QIkjcWys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.176.0/23
95.140.144.0/23
95.140.150.0/24
IPv6:
2a00:1818::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f7:70:96:52:67:cb:55:71:6b:2f:c5:10:b1:24:ab:38:e6:
ba:ee:fb:c5:d4:ea:2f:a8:ec:7e:26:d3:75:c1:52:ad:4e:33:
68:da:b9:32:0e:d3:38:88:17:5b:91:0a:8f:2b:cc:a6:84:e0:
f6:59:ea:58:91:0b:1c:23:4a:90:2b:b7:54:61:9b:9e:95:07:
48:de:17:85:0a:15:42:be:53:a0:9f:2b:c4:d3:14:c5:07:5d:
36:93:a0:5c:8c:bb:51:7d:75:a5:25:1c:7c:bf:41:f5:b1:31:
65:ce:71:13:50:e6:6a:22:bf:2b:21:41:a8:71:66:a9:37:f5:
f7:e3:49:eb:49:25:63:4c:2f:0c:67:e8:98:c2:5e:ea:19:78:
7e:40:4d:3d:a4:8f:31:29:f3:24:63:99:41:3f:05:8d:4a:53:
f4:66:c8:0b:06:12:74:e8:6c:0c:63:90:11:d5:aa:27:bb:c2:
b1:1b:88:ed:50:1a:7f:0c:e3:47:35:51:ef:25:87:62:aa:1c:
0a:b4:35:e2:27:45:10:49:b5:05:b1:a5:35:70:1a:1f:23:67:
3d:03:bb:a5:5e:82:e8:37:b4:f1:4f:80:5f:e7:cb:c0:6a:04:
55:03:ce:88:2e:ea:cf:7f:cb:58:5b:78:00:b8:31:89:22:d2:
92:f3:b0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:22 2025 by rpki-client