Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/6EHcMUdIhjJoUv7tuo2VFFavj1I.roa
File: 6EHcMUdIhjJoUv7tuo2VFFavj1I.roa (raw, json)
Hash identifier: sOTV8LIX47DYFqhd5/wOFwCvjRBSj+Fylzp4Tl0JsxE=
Subject key identifier: E8:41:DC:31:47:48:86:32:68:52:FE:ED:BA:8D:95:14:56:AF:8F:52
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F1FF7AEE150BEEA695D6E9E47D8E3
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/6EHcMUdIhjJoUv7tuo2VFFavj1I.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210594
IP address blocks: 95.183.206.0/23 maxlen: 23
95.183.206.0/24 maxlen: 24
95.183.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1f:f7:ae:e1:50:be:ea:69:5d:6e:9e:47:d8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e841dc31474886326852feedba8d951456af8f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:3f:14:cc:de:e7:de:f6:3b:de:e9:e5:9a:
dd:53:c8:6f:cf:31:09:83:d3:90:c5:5b:bb:f2:8a:
a3:a9:bc:4d:d6:1b:a1:c5:7c:04:ee:c3:5f:61:0e:
c5:f9:f6:a3:c6:4c:26:da:4a:57:ff:62:8e:2f:fb:
83:f4:6d:22:9f:f1:ee:24:a1:8d:4c:71:f3:04:9f:
01:aa:3e:0d:eb:b2:fc:d9:02:ba:4a:f7:01:aa:b6:
dd:38:ad:5f:d1:a3:29:a7:92:47:d9:56:40:30:6b:
07:39:a2:4b:af:a3:b6:ee:84:9a:13:73:5d:7f:33:
c3:09:26:40:34:9c:3b:d0:52:9c:85:4b:1a:94:3d:
ee:9f:51:d6:29:29:be:ba:9b:bf:23:27:5a:ce:b3:
97:33:a7:a0:4c:64:13:f9:65:47:7e:57:65:83:48:
72:66:d0:67:0b:f5:a3:61:ff:09:a9:d2:91:49:35:
ee:a8:ac:a4:64:40:98:98:83:aa:d1:07:b7:88:57:
02:43:b3:21:00:f6:1a:59:12:ba:0d:df:b3:62:86:
47:3b:ca:a5:56:bf:74:f2:18:16:22:57:24:20:a6:
1d:24:04:a1:eb:80:97:d4:87:28:03:17:22:60:19:
33:0d:1f:02:4d:f2:74:de:b1:df:5a:e5:e6:60:8e:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:DC:31:47:48:86:32:68:52:FE:ED:BA:8D:95:14:56:AF:8F:52
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/6EHcMUdIhjJoUv7tuo2VFFavj1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.206.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:10:46:eb:55:ff:0a:69:81:6f:e2:1c:96:13:b5:53:78:eb:
b5:a6:3d:f0:e4:fd:92:cf:49:a0:e4:1b:25:29:60:f4:02:46:
bc:87:e9:e5:28:26:9e:22:c6:0b:9c:48:f6:16:8f:1d:f7:97:
f7:79:1a:76:52:52:0b:67:d7:03:f5:17:8b:23:41:ba:af:96:
61:b8:66:d9:e8:24:e7:e1:3e:60:67:7d:94:86:22:72:74:66:
11:6a:86:46:09:4a:07:a5:80:b7:43:39:c9:ed:9c:a1:29:06:
01:2e:48:5a:9a:0d:93:4f:86:da:6d:a0:55:c4:dc:3c:82:a5:
5e:d8:f3:f6:22:bb:1a:aa:8c:41:83:a4:02:30:5a:04:3e:94:
a1:a4:d9:e5:e8:7e:db:50:d8:61:96:50:aa:7f:61:87:a5:ae:
36:2b:ff:a9:bf:6d:97:a1:17:e4:46:1b:59:c9:bc:2b:6d:46:
fb:83:52:b8:3e:48:8d:3d:e7:4e:df:b9:ad:35:2c:c8:d6:c4:
6b:77:5d:78:86:72:9b:85:0a:b6:1a:37:22:da:a6:3d:c5:c4:
f6:5e:6d:95:d7:8f:dc:6c:89:45:b8:88:f1:60:3d:06:0d:ae:
e4:61:2d:5a:2a:9f:c1:2c:7b:b9:93:1f:82:e5:5a:5a:74:ea:
0f:63:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:11:22 2025 by rpki-client