Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6rvpyTq3GpToeI0SORQBn8auSqk.roa
File: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (raw, json)
Hash identifier: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=
Subject key identifier: EA:BB:E9:C9:3A:B7:1A:94:E8:78:8D:12:39:14:01:9F:C6:AE:4A:A9
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019426D957EBC86B3A34E55F283E2F957338
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6rvpyTq3GpToeI0SORQBn8auSqk.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 92.119.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:57:eb:c8:6b:3a:34:e5:5f:28:3e:2f:95:73:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabbe9c93ab71a94e8788d123914019fc6ae4aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:3d:85:74:49:bb:87:d0:fe:56:04:c9:2a:
23:b6:ba:91:c9:93:10:d0:c6:05:04:93:d9:e8:b2:
66:6a:24:29:27:80:45:c3:22:65:b0:c4:b0:40:e0:
8e:c6:38:26:b5:2d:bb:0c:e8:01:26:cb:10:2f:1e:
22:7d:16:61:ce:46:e1:63:15:6d:ef:51:50:4e:72:
4f:2c:df:7c:93:21:ec:18:ba:b6:f1:78:43:8d:8b:
86:e1:b8:06:0c:ae:f2:b4:25:fc:c4:ac:e4:d0:31:
a4:7a:21:58:8f:cd:82:f7:97:d6:d3:db:5a:1d:96:
d9:1d:a5:62:4d:84:13:7c:12:b0:6c:e8:8c:b9:d6:
0b:df:3f:5a:50:be:16:aa:7b:07:b5:49:36:bc:09:
8e:a6:6a:14:58:f2:5c:6f:6c:09:be:95:17:7c:dc:
a8:e9:6c:2e:b6:3e:1c:18:60:ce:93:12:4a:33:f4:
46:e4:fd:c1:e2:29:03:99:ac:e9:37:93:48:3e:75:
14:54:78:4b:e6:c6:f9:ef:50:a9:79:32:16:05:b2:
f5:e3:f4:63:28:8c:b6:7d:a6:c3:9e:03:d7:c4:87:
10:2f:dc:12:19:a5:eb:b4:2d:ef:a7:7c:72:60:4c:
e5:58:7d:b4:5f:e6:00:fd:ee:7d:52:59:b4:da:e8:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:E9:C9:3A:B7:1A:94:E8:78:8D:12:39:14:01:9F:C6:AE:4A:A9
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6rvpyTq3GpToeI0SORQBn8auSqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:8b:5b:8c:97:3c:77:2f:82:91:c6:2a:d8:5f:af:85:80:9f:
14:7c:12:bd:6f:94:30:19:24:68:4e:b8:0b:be:79:66:4c:f5:
d9:0e:00:ed:3c:3c:e4:e4:91:33:ff:17:72:0b:c4:5a:b5:cb:
5b:a0:53:27:1b:63:5b:43:0e:b4:56:2a:e3:f2:a4:6d:59:78:
8a:73:33:3f:76:ac:27:ef:f9:50:b4:b8:85:e9:06:ef:f5:15:
15:a2:d7:16:f1:de:ea:cc:4a:bc:b8:08:0f:db:bd:23:f5:6b:
a9:a2:7a:78:06:51:46:a7:23:98:72:0f:af:ce:71:01:71:a9:
57:1a:1c:54:a1:9a:23:8c:61:a2:55:9c:0a:68:84:d8:43:73:
48:03:8e:9f:1a:99:63:da:a3:3d:25:6a:d4:5c:ec:f0:8d:5f:
8a:84:c6:ba:6c:a6:73:da:79:c6:7d:04:25:56:15:6f:f8:f2:
29:d0:2d:08:3f:04:ce:1a:dc:80:a6:41:b9:85:24:84:8f:2c:
70:05:e6:5a:73:64:20:86:1d:49:b6:68:1a:97:93:f8:2c:74:
8e:1f:3d:b2:52:80:a6:33:ce:19:e5:fa:56:62:bf:6d:fa:92:
09:49:88:8c:1b:27:db:87:8b:ce:50:b4:24:11:0f:b9:40:d6:
81:ff:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:04 2025 by rpki-client