Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/6y4ef_E4buArdFR0VyJFJok-UQk.roa
File: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (raw, json)
Hash identifier: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=
Subject key identifier: EB:2E:1E:7F:F1:38:6E:E0:2B:74:54:74:57:22:45:26:89:3E:51:09
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A64375C98B0C564717FF90E51D87
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/6y4ef_E4buArdFR0VyJFJok-UQk.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212896
IP address blocks: 185.255.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a6:43:75:c9:8b:0c:56:47:17:ff:90:e5:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb2e1e7ff1386ee02b74547457224526893e5109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:cd:33:40:8a:e0:1c:7c:22:6e:e9:b6:c0:
58:1a:09:8d:0a:fd:44:8e:f8:f3:b9:ce:64:f0:b6:
9a:9a:da:91:6f:6c:3a:c2:a5:ea:71:84:35:66:0f:
3b:11:4c:cf:da:f4:3d:51:4e:be:bf:7d:9d:60:3e:
db:f4:63:e4:c8:d9:73:05:b0:3a:4c:ce:0d:9f:18:
b1:98:b5:bb:ab:ec:17:d5:af:89:7d:b6:12:30:e9:
08:4c:2c:41:55:9b:c2:fb:60:d1:54:94:ce:a9:0b:
f3:09:c4:ca:54:3f:60:6c:9a:84:3e:8e:65:79:34:
ff:9b:32:5a:45:f3:5d:9b:d3:89:00:6a:7d:b5:3a:
3a:71:6d:22:83:91:d2:a8:ff:6f:c8:d5:30:64:45:
df:f2:0e:ac:59:4c:9a:b0:36:7a:c5:c3:9f:c0:4d:
34:37:ad:e9:46:1e:d8:da:79:35:55:5d:1e:4d:2c:
10:c8:db:3d:16:67:49:fb:85:2e:f7:61:14:d6:d4:
56:27:8f:b2:a4:85:04:7e:4f:60:47:e5:df:9a:52:
0d:4c:e1:ac:f1:53:39:9e:e6:eb:bc:b0:58:5a:2b:
f6:1e:74:2d:06:ed:46:86:27:c5:af:79:46:1d:80:
da:1b:f0:3a:af:c6:eb:fa:98:d1:a8:16:5c:d8:bd:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:1E:7F:F1:38:6E:E0:2B:74:54:74:57:22:45:26:89:3E:51:09
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/6y4ef_E4buArdFR0VyJFJok-UQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f8:e4:24:a5:8b:47:1b:7f:2e:db:9e:1e:76:83:f8:a3:01:
a3:93:f7:00:26:42:01:09:6d:af:93:82:38:1d:16:6a:d9:9a:
3d:09:f3:e6:69:c8:9f:60:b6:74:07:cb:89:3b:18:89:58:9c:
d3:b3:f1:16:c8:db:4c:fb:c4:89:ab:77:dc:b9:02:79:88:a7:
f0:e9:ef:fd:5c:45:a4:7b:f0:b5:d2:32:a0:98:0a:6d:43:63:
39:33:dc:71:5e:63:cb:52:ba:b6:20:c5:15:1d:4a:3b:0c:2e:
a7:06:0c:22:55:51:9b:45:51:73:0d:73:72:f0:35:91:95:37:
3d:75:05:38:5b:66:6d:d7:1a:f4:40:6f:36:ad:ef:dc:82:e5:
99:15:13:6b:f9:fb:a6:2f:4e:6a:62:28:1d:5b:b4:97:09:bb:
13:8c:ff:a5:db:77:d6:37:72:48:d1:21:01:5b:6d:8f:6e:8c:
82:33:d5:a3:62:d0:46:eb:b3:a1:ec:41:fb:30:96:57:75:ec:
c0:cb:e5:08:71:16:f6:ca:af:90:52:1d:42:42:7b:42:1b:59:
39:f6:ad:eb:f9:e7:cb:79:0e:46:ec:a2:1d:43:af:4b:ff:39:
97:64:b8:94:ce:fb:9f:b4:ec:e0:39:50:02:dc:1f:c1:e2:db:
84:c4:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:49 2025 by rpki-client