Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6uM9geMN5E_JocXQTslv41Eocx8.roa
File: 6uM9geMN5E_JocXQTslv41Eocx8.roa (raw, json)
Hash identifier: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=
Subject key identifier: EA:E3:3D:81:E3:0D:E4:4F:C9:A1:C5:D0:4E:C9:6F:E3:51:28:73:1F
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CA78060F910D31D40916B82E9DD2
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6uM9geMN5E_JocXQTslv41Eocx8.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10557
IP address blocks: 2.56.20.0/23 maxlen: 23
2.56.22.0/23 maxlen: 23
84.39.200.0/23 maxlen: 23
84.39.202.0/23 maxlen: 23
92.246.68.0/23 maxlen: 23
92.246.70.0/23 maxlen: 23
193.31.32.0/23 maxlen: 23
193.31.34.0/23 maxlen: 23
194.93.52.0/23 maxlen: 23
194.93.54.0/23 maxlen: 23
195.38.0.0/23 maxlen: 23
195.38.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ca:78:06:0f:91:0d:31:d4:09:16:b8:2e:9d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae33d81e30de44fc9a1c5d04ec96fe35128731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:c8:47:86:1c:14:c8:75:2e:ee:47:4b:56:
3c:02:7c:56:eb:5c:f0:db:bc:37:9d:df:f3:31:92:
83:6b:f8:25:e8:d9:c5:fb:da:d2:e1:91:b4:7c:86:
4b:31:48:2a:d6:b9:0f:7c:34:2d:8c:c8:8c:ab:0d:
04:5e:9a:30:af:d0:48:c2:b0:6c:d5:c0:23:05:32:
f9:54:32:a6:a4:87:a0:3f:47:24:c1:5b:21:47:6c:
d3:64:af:05:ad:e8:3b:db:f7:1d:f4:43:42:d2:2c:
9c:ab:89:7c:5f:14:04:0b:2b:96:93:95:cf:f8:6b:
12:f3:3b:ad:33:df:18:7c:84:04:16:ed:9e:f9:95:
2f:cf:2c:fb:47:c7:e0:ac:2c:83:5a:32:5e:e7:ed:
ec:1f:04:78:ca:a4:b4:c2:30:22:6b:b3:28:b9:bd:
6b:ab:fc:c9:52:fb:db:c1:40:33:8f:ed:4a:17:5f:
d4:6a:51:fc:32:5d:28:c4:53:fe:a9:cb:7c:09:87:
bb:8f:37:8e:7e:4c:e0:b9:71:b9:14:8c:a2:ca:5a:
57:ab:90:48:50:0f:e5:4f:76:31:76:ae:41:e9:25:
da:ab:c2:b9:2d:f7:a1:82:30:0e:87:1e:cc:31:29:
37:49:7f:cc:fa:38:26:2a:6a:78:ea:fa:7a:41:b5:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:3D:81:E3:0D:E4:4F:C9:A1:C5:D0:4E:C9:6F:E3:51:28:73:1F
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6uM9geMN5E_JocXQTslv41Eocx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.20.0/22
84.39.200.0/22
92.246.68.0/22
193.31.32.0/22
194.93.52.0/22
195.38.0.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:16:f2:b0:b1:1c:a3:7c:98:4c:f5:7c:2c:96:87:2e:0e:e5:
b1:89:08:dc:df:83:cc:8e:64:4f:e2:81:07:b8:98:8b:65:b4:
46:f4:5f:0c:a8:04:86:02:a0:a5:87:c6:80:6f:23:3d:d5:7e:
65:47:52:cb:d3:9f:20:8f:a0:31:63:d3:be:dc:bb:d5:88:aa:
b4:4a:60:eb:2e:2a:62:35:72:5c:eb:17:3e:c9:43:64:f2:98:
46:da:84:a7:d3:c9:ad:29:df:70:f6:ef:0f:94:10:ee:d8:6f:
d6:aa:0e:cd:ab:85:34:f5:a2:ff:e5:40:55:76:85:d0:37:d0:
00:22:bc:6b:96:eb:d6:5f:cb:5e:db:f9:0a:ca:28:14:c5:8a:
42:24:c4:bd:03:5b:e0:d9:5d:6a:6f:58:33:23:e4:48:29:90:
f3:4b:5a:5f:05:26:c9:dd:74:85:c0:27:0f:a9:c8:df:19:6c:
fa:04:8e:6b:e8:36:3a:1b:d8:1c:78:b4:c0:1d:14:6c:ca:6e:
80:5d:2f:25:14:1e:d3:60:4d:25:96:25:1f:93:80:2b:e5:0b:
48:01:81:0d:64:e9:87:58:98:0f:07:0c:49:e1:58:ea:0c:f8:
33:f3:a0:08:a6:66:41:51:c0:0a:50:09:de:c5:bd:a2:be:a6:
da:d0:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:32 2025 by rpki-client