Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/K6aKOIW-1NSddcmGQED-lRQwj0w.roa
File: K6aKOIW-1NSddcmGQED-lRQwj0w.roa (raw, json)
Hash identifier: v7gYWwseoKMltABOPqU3Qixh8CrsOMIdWsIeCwhrWxM=
Subject key identifier: 2B:A6:8A:38:85:BE:D4:D4:9D:75:C9:86:40:40:FE:95:14:30:8F:4C
Certificate issuer: /CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
Certificate serial: 01856CB868AAAC6A12C92E7F250D6575DA78
Authority key identifier: 64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/K6aKOIW-1NSddcmGQED-lRQwj0w.roa
Signing time: Sun 01 Jan 2023 09:45:02 +0000
ROA not before: Sun 01 Jan 2023 09:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:68:aa:ac:6a:12:c9:2e:7f:25:0d:65:75:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640e2db8c5e0fd2c726b0ab4780d97811843ad70
Validity
Not Before: Jan 1 09:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba68a3885bed4d49d75c9864040fe9514308f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:ec:50:c0:a0:c7:36:66:41:a1:df:dd:10:
d7:f2:f8:d2:7b:78:8e:a5:d4:b3:15:fe:67:2b:2a:
12:19:b7:fd:0c:72:fa:e4:94:18:1c:a2:c2:2d:7f:
f3:a5:71:23:2b:5d:50:45:7b:45:3d:4a:35:11:f8:
f6:6d:1a:1c:7f:f5:b2:1a:05:c4:16:c4:90:81:2e:
e9:9d:c6:1c:0f:a1:e7:7e:f1:32:fb:63:80:1f:f4:
2f:b4:15:51:1f:61:62:4d:37:f2:2e:66:aa:47:cb:
90:c0:3c:91:99:fb:8b:91:b8:88:5a:06:67:55:36:
59:7d:ed:bb:ad:eb:1b:4b:51:f7:15:f4:d4:3d:be:
51:1c:9d:c3:f3:bd:c6:03:db:95:e5:a3:fb:f6:e1:
78:88:94:01:b2:95:d3:8c:e2:a8:62:79:d6:de:b5:
20:20:a4:e9:b0:92:48:7e:dd:47:88:91:86:9c:6a:
73:94:cb:ab:61:9f:79:a2:09:c1:28:ea:79:27:56:
85:ed:3e:ae:84:57:cf:81:52:3f:68:23:73:21:16:
f8:a4:40:f4:cc:94:95:30:7b:65:a4:b9:d4:75:95:
f5:dc:50:95:c3:72:bb:b1:e9:90:bd:d8:ec:28:d3:
b5:80:57:69:76:c7:44:e3:a4:0a:3e:02:37:8a:b9:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:8A:38:85:BE:D4:D4:9D:75:C9:86:40:40:FE:95:14:30:8F:4C
X509v3 Authority Key Identifier:
keyid:64:0E:2D:B8:C5:E0:FD:2C:72:6B:0A:B4:78:0D:97:81:18:43:AD:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/K6aKOIW-1NSddcmGQED-lRQwj0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f63f2-b412-4e55-8b2f-bf37d96e5b77/1/ZA4tuMXg_Sxyawq0eA2XgRhDrXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
04:99:30:84:56:af:64:1d:53:3e:c0:b5:d8:cc:2d:85:0b:15:
d6:05:4d:f2:0b:4e:64:fe:87:38:0a:32:17:f7:ef:6c:93:c1:
15:36:35:41:9c:91:64:8a:b6:29:3e:53:16:a3:cf:50:bd:e0:
ed:4e:9a:81:71:f0:a2:fc:28:ee:ba:9e:96:5f:ae:30:da:ef:
a5:b6:b7:16:d1:4e:36:ac:0e:7b:dd:6c:27:e7:e3:23:50:8e:
0d:7a:3f:33:85:1e:b5:48:0c:f5:f8:33:18:17:9a:1c:a0:78:
e7:56:8c:32:ad:da:15:03:ae:33:de:e0:1e:d1:61:a5:1c:a2:
3a:af:d1:43:ff:3e:de:f3:00:a7:53:b3:e1:9d:8b:78:49:7a:
2d:22:6d:41:82:42:da:d7:61:21:b4:61:ee:8c:e7:74:58:26:
be:d8:49:6a:f0:5a:ef:d3:9b:f0:7b:a5:62:e4:d8:f5:48:d6:
d6:ff:a3:9e:6e:0e:b9:e4:fc:0c:80:ef:48:36:8d:62:3a:98:
53:61:0d:a7:13:f4:65:3e:63:79:19:5e:c9:d1:30:37:36:21:
30:9c:b9:2f:09:16:71:cf:2b:18:65:2d:04:98:fe:56:d5:fc:
c1:45:94:d1:fd:2c:13:98:50:24:e1:46:a4:6d:87:f1:b5:6d:
1c:5f:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:16 2025 by rpki-client