Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/6MwiHlH7brP7gkYxWGSzNKL3O8w.roa
File: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (raw, json)
Hash identifier: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=
Subject key identifier: E8:CC:22:1E:51:FB:6E:B3:FB:82:46:31:58:64:B3:34:A2:F7:3B:CC
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 0194214392DFA2D9B4D6FC282197154DAB3F
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/6MwiHlH7brP7gkYxWGSzNKL3O8w.roa
Signing time: Wed 01 Jan 2025 09:47:44 +0000
ROA not before: Wed 01 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a07:e00:19f::/48 maxlen: 48
2a07:e02:41::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:92:df:a2:d9:b4:d6:fc:28:21:97:15:4d:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8cc221e51fb6eb3fb8246315864b334a2f73bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:8b:08:07:b5:d8:7c:71:bd:52:8a:48:8d:
89:66:52:c8:cf:03:82:f2:e4:c0:60:07:2d:6d:a6:
d8:69:94:fe:be:08:6a:fd:c6:e2:0c:bf:4f:b1:d4:
14:e5:e6:4e:18:f5:20:0d:0c:f3:53:1a:3c:e5:86:
cd:15:73:61:d5:fe:75:63:20:f0:6c:81:a0:4a:cd:
5d:8e:14:b2:8d:fc:cc:57:fa:2e:22:2b:fe:de:95:
62:35:04:64:8e:06:97:e8:cf:df:9a:9d:3b:d4:5a:
38:7e:db:10:5a:08:c1:84:81:d4:51:0b:65:36:b7:
fb:09:c8:29:c5:9c:38:71:97:da:96:db:94:71:01:
81:8c:6e:c5:a3:8d:26:e4:26:8c:4b:61:99:32:8d:
20:cb:d1:80:69:53:64:70:fd:7b:3c:5c:3d:71:c3:
43:16:02:04:2c:50:cc:c9:ae:65:35:b5:42:70:56:
49:5c:a1:08:e9:4f:40:e1:59:3c:33:c3:4e:4e:7d:
ca:9f:a0:2c:86:ce:4b:07:9d:6c:e6:a7:c0:9b:f1:
8c:2a:3c:ef:d7:65:44:7e:39:dd:59:88:58:64:09:
c0:0a:bb:32:ab:8d:e1:76:67:f4:67:63:f2:1b:dc:
6c:af:d1:a4:81:ae:2f:15:3a:89:32:10:20:b4:3a:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:22:1E:51:FB:6E:B3:FB:82:46:31:58:64:B3:34:A2:F7:3B:CC
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/6MwiHlH7brP7gkYxWGSzNKL3O8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e00:19f::/48
2a07:e02:41::/48
Signature Algorithm: sha256WithRSAEncryption
94:f2:97:e0:53:16:89:65:2d:6d:b3:e5:0e:dd:38:a7:4d:3b:
5b:1b:39:aa:c2:1a:3a:7d:3c:5f:28:c0:db:08:2a:5e:70:aa:
61:47:fe:42:dc:f9:b9:a2:ab:1f:87:12:52:b8:63:b6:4a:a6:
c2:ae:7f:46:7c:6f:81:be:3e:6a:50:e1:64:2f:4f:dd:6d:3f:
e8:9a:3c:8a:17:53:4e:6e:24:21:9a:cc:24:5c:e3:af:1c:99:
89:27:7d:ed:65:57:b5:7a:67:2d:ee:11:33:ff:90:ed:21:f6:
aa:11:06:c4:46:dd:8d:65:64:ce:d9:76:5a:a4:cd:f0:57:e7:
19:0f:ff:87:46:59:05:6e:53:4c:c0:c8:97:aa:58:29:5d:ff:
f0:59:2e:0c:84:14:5f:45:c9:b3:1b:32:b0:a9:03:98:95:21:
9b:62:c4:78:a1:97:a5:68:7b:20:42:9e:c6:ca:b7:36:76:12:
33:ad:10:2e:96:69:74:73:5c:b0:67:dc:d3:83:e8:70:1b:2e:
7e:79:46:6f:c2:0e:f7:e4:b0:d2:dc:b0:d9:c0:11:63:22:1e:
f2:51:11:01:50:22:aa:ee:90:ba:3a:66:0f:e2:fa:8f:a4:79:
75:39:29:1a:5a:5c:a5:50:da:7a:70:cf:50:b3:91:2f:87:a8:
8f:9c:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:42 2025 by rpki-client