Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/a66gcbPU6YNBmFUkopTkchdOH68.roa
File: a66gcbPU6YNBmFUkopTkchdOH68.roa (raw, json)
Hash identifier: sBlszJoNIxjoAG7psHXrrpa5cuZ//OjPiFwGmdCJUPI=
Subject key identifier: 6B:AE:A0:71:B3:D4:E9:83:41:98:55:24:A2:94:E4:72:17:4E:1F:AF
Certificate issuer: /CN=6c11fc8d6e7301a679b8cdbea905596411640883
Certificate serial: 0189654AC37DB06826652C26E60A5ADA27CA
Authority key identifier: 6C:11:FC:8D:6E:73:01:A6:79:B8:CD:BE:A9:05:59:64:11:64:08:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/a66gcbPU6YNBmFUkopTkchdOH68.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 195.225.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c3:7d:b0:68:26:65:2c:26:e6:0a:5a:da:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c11fc8d6e7301a679b8cdbea905596411640883
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6baea071b3d4e98341985524a294e472174e1faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:df:90:be:90:fd:18:f7:5c:d6:58:3e:d9:
74:2c:6d:b3:46:da:2f:a0:95:17:9d:62:ae:54:fe:
71:72:c7:6a:83:22:02:cd:b1:9b:e9:e0:5f:92:01:
af:b7:6a:cc:62:33:db:dc:ba:cb:bc:65:07:5a:1a:
70:96:a9:d8:ba:80:46:67:d5:32:36:b6:03:82:fc:
2e:30:d6:c8:cb:26:7b:09:10:02:18:d7:bb:84:58:
e0:98:39:6b:ec:e7:a2:0e:51:75:b4:63:03:c9:b3:
3a:14:4e:2d:b7:6b:27:9d:4c:2e:34:1d:92:d2:92:
7a:fe:87:78:3e:19:89:a5:25:57:28:5f:6e:45:5f:
16:7d:bd:b3:c5:cd:8d:22:60:6f:9f:7e:51:98:51:
75:4f:3c:97:ee:6c:3b:4e:0d:58:cc:95:18:95:43:
de:85:83:d0:5b:cc:cf:be:bb:aa:47:6f:43:3c:c5:
c9:61:f6:db:0e:91:f7:0a:6d:5e:53:2b:7a:92:e1:
0f:40:cb:1f:6f:64:f1:fe:20:ee:fc:a5:ea:3d:7d:
df:d4:cc:9d:30:7e:8d:2b:84:54:4f:26:b7:38:aa:
58:6a:29:62:2b:fc:c8:51:49:fb:90:af:16:7e:ae:
7a:66:d5:3e:13:f8:87:3d:30:78:97:88:24:20:e0:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AE:A0:71:B3:D4:E9:83:41:98:55:24:A2:94:E4:72:17:4E:1F:AF
X509v3 Authority Key Identifier:
keyid:6C:11:FC:8D:6E:73:01:A6:79:B8:CD:BE:A9:05:59:64:11:64:08:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/a66gcbPU6YNBmFUkopTkchdOH68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d67e51-ac3f-4405-95b3-3cf9f27ad66f/1/bBH8jW5zAaZ5uM2-qQVZZBFkCIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2c:b3:4e:ef:1c:90:f3:95:98:44:2b:d8:f0:0a:27:e2:35:
6c:8d:4f:34:49:3a:ad:27:be:1c:d0:88:be:18:9c:ed:81:11:
9a:fa:a1:f4:23:82:33:6c:d8:15:24:ab:d9:f8:7a:34:50:6b:
9f:12:68:c1:81:fc:23:9a:13:2c:49:e1:69:f0:4e:b2:85:51:
bd:84:71:14:a7:0f:d8:3e:2e:4e:a8:21:f7:c0:db:af:44:96:
c0:da:35:7e:2c:a8:38:47:9d:f4:6d:cc:20:49:db:58:57:93:
cc:6c:49:a2:89:fd:4d:7c:55:67:91:68:27:cc:fa:e3:91:7c:
1e:6d:8e:27:be:3e:17:0f:a8:5f:a3:09:ed:c4:63:c1:36:03:
fd:d0:94:38:28:00:55:1b:55:34:81:08:0f:2a:1f:9c:32:b5:
1d:b2:1b:f2:59:a9:b9:04:2e:a0:a3:26:ca:95:cf:b2:9d:93:
d0:1c:1e:4b:45:46:b8:41:87:6c:18:9f:80:11:da:58:ce:fc:
5c:e5:95:be:3f:b7:30:9c:c6:f2:bb:36:38:46:16:f9:5e:1c:
67:31:64:0d:f7:06:ec:4a:dd:cd:ac:4a:43:f7:f5:71:fe:03:
f7:34:10:9f:fc:7d:92:a4:d5:02:00:09:a2:ce:5d:06:fd:6d:
72:d1:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:00 2025 by rpki-client