Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/6ePgS-H7Yzuq3toYao1SpcCwfpw.roa
File: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (raw, json)
Hash identifier: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=
Subject key identifier: E9:E3:E0:4B:E1:FB:63:3B:AA:DE:DA:18:6A:8D:52:A5:C0:B0:7E:9C
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019546AC77B293699121A536A0276DB427A7
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/6ePgS-H7Yzuq3toYao1SpcCwfpw.roa
Signing time: Thu 27 Feb 2025 09:11:02 +0000
ROA not before: Thu 27 Feb 2025 09:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20771
IP address blocks: 185.163.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:ac:77:b2:93:69:91:21:a5:36:a0:27:6d:b4:27:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Feb 27 09:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e3e04be1fb633baadeda186a8d52a5c0b07e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:0a:bf:a2:6d:42:51:fe:16:da:d6:03:fe:
f7:02:58:3c:f9:4c:2e:1c:d6:67:89:6c:45:65:92:
f9:b0:5f:46:b3:ec:c3:2c:ff:b9:e3:f9:af:13:93:
e9:bc:19:57:d0:38:68:87:07:58:99:50:51:07:f6:
52:19:cb:90:e3:46:37:26:a7:9e:6a:38:b8:04:ee:
7f:ee:9b:39:7e:d0:b9:a9:a0:06:e1:16:9b:9c:01:
e3:3d:c6:bd:18:7f:ac:19:72:5d:c8:44:55:7f:e4:
f7:3c:4a:27:c4:0d:0a:13:51:44:a8:a4:4e:7f:f7:
8f:fc:a4:d5:cc:b5:7f:16:49:f5:26:6e:45:2f:04:
04:ff:53:24:e2:cc:0f:bb:33:12:3b:b6:84:f1:54:
bf:b8:e5:e5:73:ec:44:45:35:9a:68:8c:c8:93:5f:
58:0d:04:9e:fd:ff:38:03:dc:cd:cf:d3:c3:f2:f7:
29:cc:7f:14:67:c1:4a:03:da:44:a2:cc:e1:50:0f:
81:32:f9:05:12:fe:13:44:c3:97:99:a3:12:ac:7e:
44:3f:5e:ef:d9:1a:f1:a3:1e:85:26:43:1b:8b:ac:
d3:73:e5:13:89:39:aa:a0:ad:4c:61:7e:96:60:fb:
6d:df:3c:cd:4a:a0:ab:c1:98:82:04:c6:52:c2:06:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E3:E0:4B:E1:FB:63:3B:AA:DE:DA:18:6A:8D:52:A5:C0:B0:7E:9C
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/6ePgS-H7Yzuq3toYao1SpcCwfpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.200.0/24
Signature Algorithm: sha256WithRSAEncryption
05:61:a3:ee:a5:50:62:f4:3f:ec:38:83:01:a9:dc:46:e6:37:
2f:f9:61:6a:18:99:cd:da:7e:70:6d:03:67:f5:52:43:1f:d8:
0e:06:69:8d:e7:c6:77:4d:ae:f9:9b:67:72:25:b7:ff:3a:6a:
9b:1b:c5:37:dc:d9:53:90:33:05:fa:22:54:b6:56:2f:61:de:
53:05:f4:d1:1a:ea:b9:3c:73:4e:1c:58:60:b7:e0:45:ec:65:
27:34:80:e3:73:94:a0:2d:57:e9:b1:92:85:09:f5:b4:32:f9:
74:cf:8b:a4:87:cf:46:ff:f4:ec:2f:9e:7d:3b:32:3d:68:ac:
13:b7:e6:10:db:b5:ba:e4:da:4e:f9:5e:9b:d9:e9:79:7d:2b:
48:be:2d:d0:96:e9:c1:49:1c:f4:bf:0b:57:6d:90:14:8c:22:
08:01:a0:22:c6:29:d4:03:df:22:9a:23:81:48:88:b7:a9:99:
5d:eb:27:aa:7b:f9:b9:a4:05:cf:41:89:b7:f1:76:ca:82:8e:
9d:69:d8:ae:13:26:aa:ef:62:a0:91:81:c3:bc:a1:a0:51:55:
64:df:42:14:9b:af:12:1b:0a:f2:f9:64:d2:ba:d1:6f:d9:a1:
d6:f7:cf:06:0a:79:a3:80:a5:fb:18:07:b4:f0:d4:91:3c:9f:
2f:84:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:54 2025 by rpki-client