Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa
File: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (raw, json)
Hash identifier: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=
Subject key identifier: E8:C2:4B:A7:F7:5C:31:85:F0:93:D4:62:13:70:C0:03:16:38:A1:2C
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0194282800C373CFA15CECD1AF968FA65DDF
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa
Signing time: Thu 02 Jan 2025 17:54:57 +0000
ROA not before: Thu 02 Jan 2025 17:54:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212496
IP address blocks: 85.92.109.0/24 maxlen: 24
185.166.199.0/24 maxlen: 24
195.80.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:00:c3:73:cf:a1:5c:ec:d1:af:96:8f:a6:5d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c24ba7f75c3185f093d4621370c0031638a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:15:ff:67:7f:52:c2:f2:77:59:91:46:c3:
d7:7f:2d:44:d5:9f:be:88:85:3b:a9:67:19:e5:6d:
e4:01:bf:28:3d:29:bb:c1:18:3b:74:a5:68:a9:30:
30:b8:d9:0d:4c:21:d9:c5:e0:c8:c6:a0:ee:f4:9c:
9d:4e:7e:66:7e:56:37:4b:ea:1b:d4:80:dc:fb:f1:
04:8b:44:28:e8:b2:16:95:4f:8c:cf:4b:b2:4b:8f:
76:4f:44:39:1e:01:e4:7a:b8:8c:6c:6b:c3:d6:72:
81:69:09:a7:ff:f7:4f:7b:5a:02:4c:0c:b4:b3:32:
82:3a:d6:30:e9:a8:02:3b:64:b4:22:28:d2:6c:a2:
90:3b:5c:5f:39:41:a7:89:b6:09:0a:2f:2e:7c:5f:
cf:37:eb:7c:fb:3e:75:37:6b:5b:8d:de:48:52:b3:
41:65:5d:93:3c:98:20:f4:ca:a9:61:03:e9:e7:d5:
63:93:a7:60:62:42:c9:0d:4e:68:1a:d6:51:0c:50:
b3:a0:6b:b1:b8:8c:10:44:76:c0:1b:5f:cb:0d:dd:
05:39:22:82:8a:41:29:9d:f9:1a:a5:9c:7c:23:22:
68:35:ba:cb:1f:f9:29:2d:ef:f8:4c:43:dd:01:9b:
4a:f9:d7:46:be:4b:94:9f:7c:b5:f9:c0:7a:1f:a5:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:4B:A7:F7:5C:31:85:F0:93:D4:62:13:70:C0:03:16:38:A1:2C
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.109.0/24
185.166.199.0/24
195.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6b:46:9b:61:a0:51:39:25:8b:dc:f6:58:a7:7b:b5:10:00:
d6:5e:ce:ba:e0:17:33:9c:d4:08:95:fc:ad:ae:16:30:65:c5:
0c:3e:0b:cb:b3:9d:cb:df:44:dc:de:20:42:fb:a3:74:c1:7c:
b3:08:61:7f:3d:9b:38:4e:9f:7a:67:91:96:21:89:21:35:d5:
6c:d3:1f:ba:00:6d:5f:fe:8b:41:ad:be:75:c6:7a:f5:e5:71:
e0:16:de:42:03:44:f2:4e:b7:e5:c0:e2:6e:30:58:aa:8a:f3:
ee:d7:5d:42:87:d6:6a:ee:d7:db:0e:11:0d:3b:b1:7a:54:0b:
b2:75:2d:55:2c:21:0d:1a:e4:f2:c5:5a:48:77:fc:71:b5:c9:
64:fe:55:6f:0e:c6:b5:77:f0:55:8a:1c:e5:6c:68:55:59:7c:
fa:1b:75:53:6a:6e:bd:75:fb:13:b6:4e:7f:d4:d1:0a:69:0c:
fe:6b:be:8a:f1:52:31:35:9c:95:79:09:8f:fd:9c:15:de:a0:
0e:9c:d2:b9:95:69:8c:e0:05:19:a2:ef:13:89:8b:c0:ce:cb:
76:78:f0:2b:63:18:a8:e4:ba:5e:89:41:15:dd:68:d0:95:b6:
68:67:68:c1:24:d5:52:27:6c:d6:92:73:4f:f0:80:39:0f:36:
8a:e4:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:07 2025 by rpki-client