Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6nNEcGNbAbmlo7ZNGcxbsjswN9w.roa
File: 6nNEcGNbAbmlo7ZNGcxbsjswN9w.roa (raw, json)
Hash identifier: oywKZcJFTuhv+lEdE1dqEhDji8MglwmlfmqOqLwLJBM=
Subject key identifier: EA:73:44:70:63:5B:01:B9:A5:A3:B6:4D:19:CC:5B:B2:3B:30:37:DC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019504414BBF568F91C1ED06388B8131C59C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6nNEcGNbAbmlo7ZNGcxbsjswN9w.roa
Signing time: Fri 14 Feb 2025 11:39:02 +0000
ROA not before: Fri 14 Feb 2025 11:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.118.0/24 maxlen: 32
185.115.206.0/24 maxlen: 32
185.205.68.0/24 maxlen: 32
185.207.212.0/24 maxlen: 32
194.113.164.0/24 maxlen: 32
194.113.169.0/24 maxlen: 32
194.113.170.0/24 maxlen: 32
194.113.172.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:41:4b:bf:56:8f:91:c1:ed:06:38:8b:81:31:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 14 11:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea734470635b01b9a5a3b64d19cc5bb23b3037dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:83:18:ef:dc:94:d0:b5:9a:5c:90:21:be:
0e:e7:c4:1f:57:3c:85:af:05:ae:bc:e1:9c:39:f1:
57:17:41:f3:c3:e4:4d:c6:ed:0a:fc:4a:65:47:4d:
84:1b:77:66:cd:ab:0b:91:2a:03:cb:04:ba:cf:da:
9d:8a:15:94:43:62:4b:08:f5:83:ad:d8:83:b0:ce:
dc:5e:aa:0b:53:d1:f9:48:36:82:f8:e2:75:be:45:
1c:ae:14:17:34:77:2d:26:87:1f:f7:45:8c:1f:21:
44:ba:5b:8e:a6:a0:91:4f:5c:67:aa:33:4b:26:84:
b8:8d:21:6d:55:97:f2:7e:d9:1c:9b:ef:28:de:74:
92:b8:aa:9c:89:8e:77:02:f8:df:9b:9c:fc:70:bc:
ea:de:88:0f:50:42:f6:20:b8:ef:07:45:b5:43:1c:
53:76:55:cc:bb:a3:3d:4c:ab:03:f2:60:1e:4e:db:
96:ed:83:0f:ae:54:ff:97:52:bd:c7:6e:55:8e:99:
1f:de:0c:65:01:4a:1a:0a:ef:cb:83:32:b7:bc:c0:
88:6d:22:89:a4:a5:f2:66:05:1d:a3:69:f3:f4:89:
e4:a9:26:74:0c:6d:b0:25:d8:d4:d8:11:c7:24:fa:
c2:ba:04:ce:26:90:96:ef:5d:25:7e:40:dd:17:b3:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:44:70:63:5B:01:B9:A5:A3:B6:4D:19:CC:5B:B2:3B:30:37:DC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6nNEcGNbAbmlo7ZNGcxbsjswN9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.118.0/24
185.115.206.0/24
185.205.68.0/24
185.207.212.0/24
194.113.164.0/24
194.113.169.0-194.113.170.255
194.113.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a6:f4:05:f8:c5:b2:6a:f4:dc:94:71:f6:07:50:f9:dc:2a:
10:1e:09:a3:cb:ee:fb:73:0f:d3:cb:22:04:72:68:61:2d:42:
e9:54:56:49:c2:9d:23:27:4b:31:07:1a:fd:be:d0:c0:a5:a6:
97:90:ac:fe:71:4e:bd:15:b6:61:60:ee:a8:27:fc:c5:3a:7d:
f7:be:14:d2:d8:2b:aa:96:00:42:a0:75:c9:17:70:66:0a:f2:
ed:6c:af:48:06:35:84:86:5f:b4:8f:79:c0:eb:15:cb:2b:d6:
5b:4c:d3:37:1d:30:02:f3:d9:f6:9c:3e:18:20:74:cc:eb:76:
29:63:22:0a:58:54:7a:ab:d7:3c:15:4e:37:1b:d6:f2:d1:5e:
ff:0e:6c:aa:03:30:0a:43:49:ca:96:ae:f0:4b:ea:09:bb:cf:
00:52:67:3f:f7:92:97:bb:70:1b:ea:7f:ce:da:2e:c9:22:19:
b3:44:84:99:73:2e:26:bb:00:cb:46:4b:b4:b8:60:d8:0b:29:
7c:26:e8:bf:9a:7e:30:27:eb:c8:55:f9:21:16:f2:31:1c:7f:
d2:10:c4:b4:c2:c3:ab:27:1e:85:a0:39:ee:16:6b:f2:d1:1b:
84:60:08:e7:a5:af:4c:9c:99:49:f4:82:2e:36:c6:38:51:3d:
63:2b:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:45 2025 by rpki-client