Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/6pGOy13A0yv2XpGMHC49XWUcOU0.roa
File: 6pGOy13A0yv2XpGMHC49XWUcOU0.roa (raw, json)
Hash identifier: Gf8loyuCjHR/BOSih1YaIkWguCsWDzoRqR7fbMfcJuo=
Subject key identifier: EA:91:8E:CB:5D:C0:D3:2B:F6:5E:91:8C:1C:2E:3D:5D:65:1C:39:4D
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 0804CB
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/6pGOy13A0yv2XpGMHC49XWUcOU0.roa
Signing time: Thu 03 Feb 2022 16:57:15 +0000
ROA not before: Thu 03 Feb 2022 16:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525515 (0x804cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 3 16:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea918ecb5dc0d32bf65e918c1c2e3d5d651c394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:3a:48:b4:34:9e:3d:73:c7:65:ab:dd:21:
5b:29:eb:d7:ee:b8:77:2f:87:94:ab:29:80:a8:0f:
df:ba:21:a9:85:c0:d2:5b:a7:4c:f2:68:05:81:5a:
39:7e:c4:4e:c1:8b:2c:06:62:f7:22:5b:d0:df:5b:
c8:c5:11:df:ea:8f:21:cc:82:cf:5f:a8:a7:3f:4d:
45:b4:02:95:06:a2:ae:2a:c8:0b:af:30:e9:e2:21:
fb:93:ab:56:05:54:7e:f5:2e:02:0e:4a:4a:23:7b:
ec:22:5f:7b:09:e0:f3:a2:1d:1a:9f:da:16:c2:47:
92:50:ad:3f:e0:9b:f7:06:56:94:f1:06:51:82:09:
8a:5b:6a:96:6a:eb:c4:c9:e0:d5:d0:72:d3:f3:7a:
71:3e:b8:41:0c:27:92:34:f8:bb:b0:e7:27:3e:a4:
7a:d8:21:87:66:84:0d:fb:4e:e3:6c:fb:fe:f7:43:
10:0d:c3:49:4a:6f:17:a1:e1:71:cc:b5:40:16:bf:
96:87:0a:83:80:d0:65:92:c0:c0:99:f9:a2:04:2e:
15:51:b7:b1:a2:1e:04:f1:52:6c:91:0b:68:05:68:
cc:5d:16:a8:bf:86:57:4c:14:e4:da:35:e7:9c:f6:
89:cf:17:a5:88:e6:8e:90:3e:9c:9b:67:56:d2:9b:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:8E:CB:5D:C0:D3:2B:F6:5E:91:8C:1C:2E:3D:5D:65:1C:39:4D
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/6pGOy13A0yv2XpGMHC49XWUcOU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
74:10:44:2c:75:1d:e7:1c:67:88:e7:71:f4:81:5c:70:3a:f6:
f4:63:6d:c3:39:0b:75:79:da:4f:de:e2:e7:e7:65:1e:ff:09:
c8:88:ad:8f:55:e1:28:92:63:43:b7:d9:5e:04:c4:2a:66:46:
f5:3d:97:33:40:b9:40:2c:51:f9:1e:b3:a9:ba:ca:3a:b9:a6:
b6:8a:b1:6a:ce:f5:e3:13:a9:d1:a2:59:8b:a0:4c:4a:a7:a0:
84:9d:c4:29:e8:d2:44:c6:ed:49:c6:45:72:61:15:67:a9:0a:
57:4b:32:41:19:3a:e9:c4:1c:0f:a7:28:c7:eb:f2:ae:55:6a:
9a:81:63:46:b0:b5:5d:c8:ff:e5:f6:01:ef:17:46:17:14:9b:
6e:bb:af:0a:58:2a:b3:9f:61:32:e4:0d:c5:5b:1b:a3:ed:44:
d3:79:91:c8:8f:a0:24:5b:b0:43:d3:8f:24:71:9b:81:eb:07:
91:5c:61:be:08:bc:6f:cf:99:21:f4:54:c1:ef:25:dd:75:9e:
54:22:c3:c4:75:e7:9e:37:88:9e:66:8d:59:cb:fe:4c:93:5d:
1b:61:a9:4f:04:ed:71:29:02:fb:bf:3f:0e:f4:cc:37:7a:3d:
36:43:1b:bf:66:8d:09:4c:d6:81:50:b3:b0:25:b4:5b:a5:20:
6c:2f:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:58 2025 by rpki-client