Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa
File: 6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa (raw, json)
Hash identifier: XDeNGBG9FcZmfX7y784opBbXWR4Kqd1BKc6tmbydzsk=
Subject key identifier: E8:DA:7F:0E:D1:44:D5:C6:3F:06:AE:FD:58:9C:7E:00:A7:4D:16:84
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 0194228E0BC2D1A14FC624E2660A6FC08913
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 185.110.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0b:c2:d1:a1:4f:c6:24:e2:66:0a:6f:c0:89:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8da7f0ed144d5c63f06aefd589c7e00a74d1684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:40:86:25:43:ab:ee:74:2b:84:0e:4d:f3:
d3:37:82:47:3c:fa:fc:98:c6:e1:3d:8e:77:43:80:
ab:cc:68:17:cc:ad:35:af:09:a2:f0:b5:7c:42:08:
6b:30:e6:34:d7:27:8d:26:d2:ae:43:e5:c3:b1:06:
10:96:16:fc:bd:70:a8:e0:e7:e3:fb:0b:2a:e3:49:
52:3a:b5:03:fe:6d:e0:27:c9:2d:4e:a8:1f:e4:5a:
41:7a:16:f7:90:13:98:f8:c8:bd:42:00:b2:db:5c:
6e:4f:b1:21:b3:91:f3:78:1f:ac:66:d9:37:6d:ba:
90:0a:e9:02:48:52:fe:be:06:47:b5:f0:94:e0:6b:
3d:91:2a:d6:b8:7b:3f:d0:69:1d:3b:4b:28:54:30:
84:ee:c4:35:a2:4d:e4:66:44:99:18:10:8a:3e:9e:
9d:ed:39:0b:48:db:88:bf:d9:27:2f:18:22:bc:96:
67:0a:28:4b:6d:e3:81:05:6b:7b:06:06:7a:27:d4:
e2:de:2d:ee:0a:56:db:c3:f4:08:39:e3:df:7a:ef:
21:e9:7f:d6:e9:ff:54:9c:b3:b8:35:07:61:de:39:
84:20:41:9d:2e:70:2b:06:80:fc:a9:44:ca:58:57:
e5:4d:d9:da:e8:13:7b:7b:5b:2c:a9:6e:0c:df:89:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:7F:0E:D1:44:D5:C6:3F:06:AE:FD:58:9C:7E:00:A7:4D:16:84
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.196.0/22
Signature Algorithm: sha256WithRSAEncryption
48:1b:89:21:7d:25:c9:96:44:f2:aa:bd:b6:ea:27:3c:d2:a7:
99:67:f4:6c:6a:70:26:60:6a:69:e1:25:80:28:b2:09:74:87:
1b:3c:d1:c1:c0:c7:bc:58:5f:3f:b9:d0:66:df:28:0c:07:45:
a6:e0:5b:de:bb:9c:ce:e8:e5:cb:4e:10:bb:00:8e:7a:06:09:
bf:95:1f:c7:9c:0a:6e:9e:f9:9e:a9:a5:76:64:9c:e7:87:8c:
93:72:99:02:fd:7d:72:dc:ab:e6:76:8a:d1:d6:15:78:71:f0:
69:5c:98:09:e5:ae:4b:c8:29:d0:6c:3f:7e:27:1b:f6:6b:1d:
68:6d:f1:da:e3:60:cc:f0:42:54:c5:f0:37:1b:b2:34:1b:87:
a3:f3:11:a2:43:44:fa:ef:24:43:fe:39:e4:43:6b:87:15:46:
3e:31:a3:84:44:c7:bb:e6:e2:c7:83:45:26:0b:33:df:d9:34:
27:13:5c:d3:32:57:85:02:49:b3:ef:ba:37:e8:c4:15:88:e7:
7a:ed:4a:96:1b:23:69:c5:59:d3:22:0e:61:95:4b:25:8f:50:
06:d3:b4:4c:bd:13:0b:f5:51:f4:7d:3b:b7:62:71:01:d8:8f:
4a:2d:57:e1:9d:d4:ae:42:a6:e9:b9:6a:52:75:13:63:f5:6d:
d4:14:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:52 2025 by rpki-client