Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/bEP6BpgWEwuDr5XbU9fjHciv2p8.roa
File: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (raw, json)
Hash identifier: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=
Subject key identifier: 6C:43:FA:06:98:16:13:0B:83:AF:95:DB:53:D7:E3:1D:C8:AF:DA:9F
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 019426D8B9BF0E2E0D2B53634E2E6DF8B909
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/bEP6BpgWEwuDr5XbU9fjHciv2p8.roa
Signing time: Thu 02 Jan 2025 11:48:45 +0000
ROA not before: Thu 02 Jan 2025 11:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 193.35.240.0/22 maxlen: 24
194.33.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:b9:bf:0e:2e:0d:2b:53:63:4e:2e:6d:f8:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Jan 2 11:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c43fa069816130b83af95db53d7e31dc8afda9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:c6:60:86:fc:be:30:7f:42:44:3a:e6:c5:
55:7e:6b:25:7e:9c:a9:93:d3:da:4f:0e:a3:38:bf:
0f:6a:93:74:82:98:fd:8d:39:df:78:58:a0:e4:13:
ef:1f:a5:2d:f9:48:7b:9a:f9:2d:c3:59:3e:47:de:
f1:b8:76:f4:3d:37:e7:0b:48:5a:bc:89:3e:b4:b5:
a7:a5:60:2b:3c:14:a7:62:b0:d6:a6:a5:ad:dc:da:
66:65:96:7b:18:68:18:2d:bf:de:07:6f:aa:c9:d5:
b3:6a:44:e2:9c:ff:1d:d9:32:99:8d:4f:74:92:d9:
7f:8d:0a:37:3d:72:42:cc:fb:ec:fa:3b:fd:f8:d4:
e3:74:4e:b0:73:73:40:f7:08:23:9a:67:bc:fe:bd:
5c:a6:98:62:57:4a:96:55:ac:cf:bf:b8:0e:53:c4:
ae:f5:c0:95:64:cf:7f:36:bc:c3:5e:90:53:e7:e0:
d7:39:4f:18:6a:89:c5:9b:b1:c6:aa:14:be:84:fd:
40:c4:c3:8d:fb:93:66:6a:7a:e5:c7:8b:0d:46:77:
82:28:ba:b6:a4:c7:80:b7:9e:0b:c9:d6:ae:28:8c:
52:5e:10:32:53:a7:6c:78:c6:ab:bb:14:22:9f:4a:
79:d4:4f:bf:bf:26:e0:d7:6f:32:66:c6:07:20:56:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:FA:06:98:16:13:0B:83:AF:95:DB:53:D7:E3:1D:C8:AF:DA:9F
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/bEP6BpgWEwuDr5XbU9fjHciv2p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.240.0/22
194.33.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:76:b6:5b:70:77:66:6b:00:85:34:37:1f:ee:45:a4:84:71:
6f:c8:3d:98:ea:26:b1:31:bc:4a:81:cf:f1:02:ad:c1:a8:a2:
9f:23:09:3f:55:ab:5d:06:a0:1c:11:98:25:1c:f5:11:42:ba:
40:c3:27:8b:40:5e:66:41:c1:ea:3d:14:9b:c2:54:a3:5e:2b:
65:87:6d:33:74:2b:16:b3:b1:ad:7a:25:e7:05:1b:c5:cb:7e:
e7:04:e0:f8:62:e7:dd:38:7e:80:09:68:41:0a:92:11:f0:80:
21:fc:64:1e:d0:99:13:f4:fd:b7:b5:5b:8f:7f:48:0f:c0:68:
5c:51:66:f8:48:90:52:28:cb:72:7b:d0:bf:28:e5:9f:f7:b7:
42:d2:79:ab:b8:c8:8e:90:1f:48:b2:74:f5:94:9b:b2:4b:9f:
c1:6d:1d:0e:41:d5:0e:7b:c1:b8:a4:3b:40:b1:bb:44:d9:70:
37:a6:7c:5b:fd:83:02:41:01:1c:94:25:d2:5d:35:00:12:fc:
64:d4:2c:90:32:bf:67:cb:55:df:d1:f6:33:80:51:59:47:b0:
f9:73:ff:ac:90:5d:fd:06:d0:a2:c5:7c:3c:cb:09:0b:b4:cc:
d2:dd:30:d7:15:db:84:1e:e8:2d:63:05:e2:99:7a:2c:f0:2f:
6a:61:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:10:05 2025 by rpki-client