Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa
File: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (raw, json)
Hash identifier: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=
Subject key identifier: EA:76:CE:B9:87:EE:F2:C6:C5:08:05:0F:52:97:BA:E0:17:77:46:67
Certificate issuer: /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial: 019421B21906CEB84F1A40D10E7883431645
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212766
IP address blocks: 193.163.116.0/24 maxlen: 24
2a11:e340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:19:06:ce:b8:4f:1a:40:d1:0e:78:83:43:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea76ceb987eef2c6c508050f5297bae017774667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:92:58:b1:cf:25:d9:81:5f:21:da:33:b4:
b2:ec:51:c3:9c:73:b2:0b:02:20:63:63:60:8e:dc:
0c:66:7e:62:1b:82:52:f1:cc:f1:c3:db:3b:23:da:
cd:85:c3:85:72:6a:b7:a1:7e:1a:5c:32:2d:d3:c4:
f7:5f:e1:52:e4:25:1c:67:e2:73:31:5e:1a:51:f2:
08:6d:bb:31:6b:fd:1e:27:c6:dd:eb:5f:68:28:48:
04:8a:0e:7e:21:22:12:b5:36:65:d4:fa:36:1f:43:
45:6a:22:dd:0b:63:1d:78:66:95:f6:c7:65:d2:04:
be:c7:73:9e:18:85:5f:2d:07:9c:b6:54:9e:ab:5c:
63:e8:54:31:b1:40:a7:09:81:15:09:57:2a:5b:4e:
61:46:a7:b1:f9:19:83:8f:0d:76:5e:f3:b5:ab:f1:
73:c5:db:bd:49:a8:92:66:f2:6f:cb:5d:5a:1c:74:
d5:ff:22:e5:31:ec:3d:5a:32:9e:52:e0:5a:11:6e:
9b:48:c4:bb:a1:5f:15:97:47:b2:de:3f:d2:16:c0:
43:ed:bf:79:01:01:9f:88:59:8b:aa:90:5e:f8:9b:
d1:ef:6c:09:f5:4d:07:df:56:3f:73:48:67:ad:f9:
39:91:59:99:fa:5c:94:43:99:87:3e:71:8a:87:9c:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:CE:B9:87:EE:F2:C6:C5:08:05:0F:52:97:BA:E0:17:77:46:67
X509v3 Authority Key Identifier:
keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.116.0/24
IPv6:
2a11:e340::/29
Signature Algorithm: sha256WithRSAEncryption
a5:29:71:04:8a:3a:54:c0:9b:98:87:20:77:64:58:c8:f4:86:
9f:b3:28:01:97:5e:80:ba:df:a9:c3:0c:d0:3c:1a:43:c7:73:
9e:bb:c5:aa:6b:47:04:5e:ad:71:3a:7a:34:5c:9b:e2:17:79:
f4:fc:f4:66:42:e7:39:88:1e:16:7c:48:55:ff:34:93:54:fa:
ff:3f:30:29:b7:33:6b:af:40:2d:3b:d3:2f:30:c1:ae:27:17:
4d:1b:dd:81:e6:a0:6d:a7:03:c0:74:b7:c5:0f:6e:c2:11:4f:
da:e2:e2:8d:8e:96:74:79:8a:62:fe:47:24:20:3f:1e:e6:43:
5e:05:81:66:6a:97:02:fe:5f:6c:ad:5e:a3:ee:47:b8:07:d4:
4b:96:69:eb:d2:f2:3d:e0:e1:32:8b:25:f3:7e:ae:3e:3f:58:
2d:d0:0a:2d:44:32:eb:78:b1:6d:3b:50:4d:90:86:9f:cf:43:
a6:42:b7:6f:02:68:d4:f0:58:bd:ae:d5:e8:75:ef:2c:95:5d:
24:df:dd:dc:3d:76:b5:b1:89:d7:b7:5a:59:6e:57:14:b1:88:
f8:65:5c:d3:de:ea:c8:54:74:96:ea:fb:12:cf:8c:e4:6f:cd:
e4:2a:d4:d2:74:42:57:b2:38:78:66:a8:c6:f6:e6:70:a7:71:
54:80:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:31:25 2025 by rpki-client