Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/6Cj8H-p47dvCNhMHuB2pJCnFujI.roa
File: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (raw, json)
Hash identifier: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=
Subject key identifier: E8:28:FC:1F:EA:78:ED:DB:C2:36:13:07:B8:1D:A9:24:29:C5:BA:32
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 01942444C3AF4A21CBAF3D890D3938A617F2
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/6Cj8H-p47dvCNhMHuB2pJCnFujI.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57696
IP address blocks: 176.162.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c3:af:4a:21:cb:af:3d:89:0d:39:38:a6:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e828fc1fea78eddbc2361307b81da92429c5ba32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:8f:6a:cb:69:3c:c1:66:82:f4:1c:dd:a5:
99:06:00:4c:54:cb:89:c1:2a:29:dd:96:e2:86:53:
3c:3f:72:18:b2:71:ef:a0:44:92:26:02:3b:0d:7f:
07:94:90:c4:88:ce:d5:5a:c5:3b:e3:42:8d:72:f1:
a6:f7:8e:2f:91:97:34:09:25:fd:c9:62:97:17:2d:
22:28:60:74:5a:3e:81:ae:a8:d8:44:3f:6a:37:cc:
e4:21:ff:ff:c4:9f:62:f5:5d:4d:d8:92:d3:30:ea:
00:72:ce:f6:14:f7:d7:de:b3:4e:2d:e7:05:a2:5e:
26:ac:ff:a4:9c:57:bc:25:b0:24:0b:3f:99:4d:bc:
4e:ee:8c:04:3b:4d:73:72:96:fd:73:48:00:16:78:
b3:3e:f0:e8:7d:97:1f:ef:9b:32:cd:df:7a:b6:59:
b8:f2:b8:bd:e3:6b:80:8d:7c:61:e0:c3:a1:f1:c8:
01:cc:95:fb:93:e7:f7:1b:ab:df:ca:3d:4b:ec:44:
db:b3:dd:05:53:f4:49:6f:20:69:4d:49:eb:17:52:
0b:6b:69:38:73:3e:61:2c:2b:3f:7b:87:cd:2f:98:
7e:3d:cd:7d:76:93:90:a3:5d:36:06:27:84:98:22:
2c:fa:21:b4:1c:69:b8:19:41:a9:4b:4c:a3:7b:91:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:FC:1F:EA:78:ED:DB:C2:36:13:07:B8:1D:A9:24:29:C5:BA:32
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/6Cj8H-p47dvCNhMHuB2pJCnFujI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.162.233.0/24
Signature Algorithm: sha256WithRSAEncryption
61:81:bc:22:af:5a:3e:87:8c:fd:59:c9:61:c2:8b:17:d7:c6:
9a:2e:03:ff:e8:e2:33:68:59:96:3e:cf:6e:de:81:b0:d3:b7:
cd:a3:e2:e5:1b:5f:92:bc:96:0d:c7:33:c9:07:78:8c:71:77:
a9:ef:58:e3:52:c7:3f:cb:a9:a8:67:ac:d2:bc:b9:01:ce:ae:
3e:ea:09:96:da:74:38:e5:bf:a0:de:e6:ff:a2:ff:51:d5:c4:
b7:c0:99:03:e1:11:95:a1:93:57:62:65:7e:68:38:47:59:e5:
d1:c9:2c:7f:4d:47:06:e0:07:52:7a:44:b4:e2:30:ab:e2:99:
0d:ae:f4:fb:b0:ae:70:70:0b:00:09:0b:b0:ce:d3:08:3b:5d:
f9:34:df:96:2d:06:9b:1c:a6:d1:68:1c:8d:39:ae:0f:e6:9a:
94:f3:2c:a2:ce:f1:a9:97:e1:60:44:cb:cf:1a:74:c3:21:05:
08:cd:d1:33:bb:ee:65:1d:de:6c:5f:46:f3:9a:82:15:01:cb:
3c:91:65:a9:ba:c0:6c:d1:08:ee:12:9c:1e:ec:a5:44:8a:79:
c9:9c:c8:30:21:61:09:11:6c:1a:4b:72:c5:6c:1e:8d:21:54:
07:ea:f4:d9:b1:a3:b4:4f:23:89:a4:ae:39:1c:0a:58:76:25:
03:8a:20:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRMOvSiHLrz2JDTk4phfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjUwMTAxMjM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODI4ZmMxZmVhNzhlZGRiYzIzNjEzMDdiODFkYTkyNDI5YzViYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl2PastpPMFmgvQc3aWZBgBMVMuJ
wSop3ZbihlM8P3IYsnHvoESSJgI7DX8HlJDEiM7VWsU740KNcvGm944vkZc0CSX9
yWKXFy0iKGB0Wj6BrqjYRD9qN8zkIf//xJ9i9V1N2JLTMOoAcs72FPfX3rNOLecF
ol4mrP+knFe8JbAkCz+ZTbxO7owEO01zcpb9c0gAFnizPvDofZcf75syzd96tlm4
8ri942uAjXxh4MOh8cgBzJX7k+f3G6vfyj1L7ETbs90FU/RJbyBpTUnrF1ILa2k4
cz5hLCs/e4fNL5h+Pc19dpOQo102BieEmCIs+iG0HGm4GUGpS0yje5GeqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgo/B/qeO3bwjYTB7gdqSQpxboyMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEvNkNqOEgtcDQ3ZHZDTmhNSHVCMnBKQ25GdWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsKLpMA0G
CSqGSIb3DQEBCwUAA4IBAQBhgbwir1o+h4z9WclhwosX18aaLgP/6OIzaFmWPs9u
3oGw07fNo+LlG1+SvJYNxzPJB3iMcXep71jjUsc/y6moZ6zSvLkBzq4+6gmW2nQ4
5b+g3ub/ov9R1cS3wJkD4RGVoZNXYmV+aDhHWeXRySx/TUcG4AdSekS04jCr4pkN
rvT7sK5wcAsACQuwztMIO135NN+WLQabHKbRaByNOa4P5pqU8yyizvGpl+FgRMvP
GnTDIQUIzdEzu+5lHd5sX0bzmoIVAcs8kWWpusBs0QjuEpwe7KVEinnJnMgwIWEJ
EWwaS3LFbB6NIVQH6vTZsaO0TyOJpK45HApYdiUDiiCH
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:26 2025 by rpki-client