Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/q6x66SBm505HYUsBD_qG35EnKdU.roa
File: q6x66SBm505HYUsBD_qG35EnKdU.roa (raw, json)
Hash identifier: g6sXro765sRwJogPFROxsiKq6pc7p7jkSyk6U1r2l1I=
Subject key identifier: AB:AC:7A:E9:20:66:E7:4E:47:61:4B:01:0F:FA:86:DF:91:27:29:D5
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018CC5DD12D58A36A6B11EEED976824077CD
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/q6x66SBm505HYUsBD_qG35EnKdU.roa
Signing time: Mon 01 Jan 2024 16:30:49 +0000
ROA not before: Mon 01 Jan 2024 16:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33823
IP address blocks: 212.87.200.0/22 maxlen: 24
89.39.203.0/24 maxlen: 24
95.214.38.0/23 maxlen: 24
193.168.186.0/24 maxlen: 24
2a0e:4844::/32 maxlen: 48
2a0e:4840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:12:d5:8a:36:a6:b1:1e:ee:d9:76:82:40:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 16:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abac7ae92066e74e47614b010ffa86df912729d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:63:83:83:49:cc:9c:2f:f0:1e:e2:af:e4:
d2:7d:c1:3f:2a:ba:3e:17:28:31:aa:66:ad:08:e4:
bd:8b:2c:09:17:5f:29:c8:5a:38:1e:08:fe:16:fa:
ac:13:80:a3:ba:38:a2:3c:de:3f:bb:6c:8d:d7:7f:
f8:ac:a0:4b:7a:85:db:4d:92:fe:73:e7:28:f5:1f:
96:72:b7:7d:57:1f:d7:fd:78:a1:7a:88:de:c5:d0:
46:f5:2a:79:f4:a2:6d:63:ed:c9:de:08:a4:1d:aa:
6f:ee:02:0b:1d:6d:6d:3a:81:7d:d0:ed:2e:42:67:
1b:15:ad:fa:b7:af:79:ad:52:6f:8f:d1:24:72:b6:
d0:a8:f0:0a:ac:77:95:00:76:f6:19:5a:3d:3b:72:
72:0b:d0:fb:8d:95:18:da:6d:7f:35:7d:06:76:67:
f7:75:74:09:dd:07:f7:24:a1:7b:93:3e:c8:40:fb:
84:c7:f5:dc:ff:88:0b:90:a5:c5:57:32:27:42:f6:
bd:59:59:35:4f:b4:12:bc:34:9f:82:80:4a:e6:1e:
45:53:1f:14:34:29:ad:2a:b5:60:58:01:2e:1a:37:
2e:60:e6:58:c4:d0:db:cc:8a:57:10:e0:e5:28:90:
1e:0f:72:c2:73:e1:76:d7:8d:62:eb:52:f1:82:81:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:7A:E9:20:66:E7:4E:47:61:4B:01:0F:FA:86:DF:91:27:29:D5
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/q6x66SBm505HYUsBD_qG35EnKdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.203.0/24
95.214.38.0/23
193.168.186.0/24
212.87.200.0/22
IPv6:
2a0e:4840::/32
2a0e:4844::/32
Signature Algorithm: sha256WithRSAEncryption
1c:4a:d5:50:0d:8d:24:a0:73:3d:41:af:1b:ed:eb:b6:d9:a9:
9b:8c:6f:2e:0d:09:00:9f:ed:5b:a8:f9:19:6c:19:a8:33:41:
ff:6b:b7:9d:b0:b9:43:56:e3:d9:47:f3:fe:fa:9e:29:2b:79:
f5:04:79:93:fe:1f:bf:5a:a4:95:f3:0c:13:36:c4:55:0c:11:
ab:d6:8d:ea:93:70:52:97:21:86:99:94:12:5c:40:f4:ce:9b:
76:a5:fa:0b:39:2a:f7:d5:4c:51:0a:16:8c:db:1d:2f:b0:0d:
e2:3c:1a:3b:9a:e9:8c:56:2e:68:0d:db:22:4c:7a:6e:96:a6:
36:60:04:c5:8e:d7:8c:60:2b:6f:78:22:9f:43:e4:1a:17:5f:
f9:45:85:20:5c:2f:4e:ba:17:84:4e:d3:76:e3:e5:6f:07:ec:
a0:7b:2b:08:0f:c4:a0:93:5b:a6:65:10:4e:9e:ac:36:2c:19:
cc:15:50:98:58:22:30:74:c7:62:cb:7c:da:e6:77:88:7b:28:
88:b9:bc:b8:7d:45:df:2c:3f:d7:ed:e4:9f:65:29:69:21:b9:
42:40:c1:4a:54:4b:ec:4e:28:16:fc:e2:bb:1d:d9:cb:49:17:
74:1f:3f:74:5c:41:66:2f:a2:5a:13:66:15:26:23:05:a9:ba:
7f:c3:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:52 2025 by rpki-client