Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/kV9IeOq2qrDzgUKUC9FckebNTOI.roa
File: kV9IeOq2qrDzgUKUC9FckebNTOI.roa (raw, json)
Hash identifier: ildEDGlVb/9bcfGRoRI8UjbfBgl6sywfS4QBtHfoEuE=
Subject key identifier: 91:5F:48:78:EA:B6:AA:B0:F3:81:42:94:0B:D1:5C:91:E6:CD:4C:E2
Certificate issuer: /CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Certificate serial: 01942368E054E098A887E19F39AC2487F46D
Authority key identifier: 6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/kV9IeOq2qrDzgUKUC9FckebNTOI.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211906
IP address blocks: 185.235.60.0/24 maxlen: 24
2a0c:8cc0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e0:54:e0:98:a8:87:e1:9f:39:ac:24:87:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=915f4878eab6aab0f38142940bd15c91e6cd4ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:10:ea:5a:03:05:c7:79:e5:eb:3e:d0:6f:
33:1e:e9:ef:b4:b9:eb:e1:3f:db:69:67:fd:19:12:
a4:c1:0e:85:57:f1:1f:0e:62:80:c7:b9:fc:6b:cd:
4f:12:81:c8:45:4d:f3:48:ce:54:a8:f6:a1:95:27:
7a:c9:2e:f1:21:dc:b3:36:0b:a3:9f:cf:22:9b:b9:
77:a1:22:f5:e9:13:d8:04:24:bc:0a:e5:d5:b3:93:
23:70:69:ba:e6:57:cb:9d:0b:d4:c0:3a:5b:4c:e5:
0b:eb:75:0a:6e:e6:2e:17:52:14:23:2a:d6:0c:74:
06:84:d9:10:16:62:d6:4f:c4:b8:ca:0f:92:ff:91:
97:db:b9:d3:fd:bd:4d:e4:80:81:95:39:23:df:7c:
ff:36:76:3c:e7:67:13:65:98:15:c4:36:75:10:93:
39:e4:e5:12:52:07:0d:0a:6e:91:ba:f8:46:2f:65:
1a:cd:3e:f5:e2:f6:7c:8f:07:90:00:de:d2:ee:46:
e0:10:3e:40:a6:e3:9d:2e:ec:fe:41:ec:ed:e1:17:
be:d8:63:98:d4:f1:48:c3:d3:7c:63:f4:ac:87:ac:
b1:9d:16:85:3b:e5:8b:84:c1:fd:59:b9:6c:a3:df:
d1:7e:8e:4f:f6:92:8c:98:3d:b5:eb:04:7a:a7:3b:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:48:78:EA:B6:AA:B0:F3:81:42:94:0B:D1:5C:91:E6:CD:4C:E2
X509v3 Authority Key Identifier:
keyid:6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/kV9IeOq2qrDzgUKUC9FckebNTOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.60.0/24
IPv6:
2a0c:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
09:15:6a:78:29:1e:54:d4:1b:7c:14:4f:02:42:d7:9d:24:bf:
24:a7:9d:3d:26:89:40:1a:c9:0a:fb:2e:52:68:62:a1:0d:61:
33:bc:3b:65:95:a2:6d:c6:61:2a:59:b6:f9:14:29:ab:03:72:
2f:67:d6:16:60:fb:18:a2:86:57:10:02:6c:00:bd:8f:b6:a1:
73:01:72:fb:6e:da:ee:36:f4:12:c4:a5:70:63:37:cc:cd:f8:
3d:6d:8b:5e:de:66:65:a2:c6:71:3a:0b:0c:7f:45:0f:a8:56:
c7:12:89:b5:a1:a5:9d:49:a5:39:a6:ab:44:48:76:ff:b9:7e:
62:33:36:96:69:e8:6b:5c:98:2d:7c:81:b4:b4:8a:1d:ff:df:
c4:99:28:41:6f:95:6b:48:32:dc:17:27:f5:1e:09:60:90:f4:
1c:c4:2b:77:80:b2:ee:1c:82:13:41:8e:c4:ae:75:dc:d7:61:
a7:0f:ef:63:88:1f:3e:1f:9e:9e:cd:f5:8c:8d:ba:d8:96:ab:
15:50:0b:5b:42:92:a5:23:2d:16:16:9f:77:0a:37:3b:57:90:
b3:ef:37:7a:26:d6:29:76:88:54:b3:64:9d:75:a6:e7:fa:54:
f5:65:91:3c:3f:c1:7f:a2:09:ee:ba:17:43:38:63:8d:7d:b8:
f1:d8:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:29 2025 by rpki-client