Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/434d6f-daef-46f2-a920-08c784aa6ebe/1/6Kr0d1ianILMJV4aTqa-Kdf58eI.roa
File: 6Kr0d1ianILMJV4aTqa-Kdf58eI.roa (raw, json)
Hash identifier: hPT4hK44eCzU/rqkJqyJPPFKtaTwzNB4fHFg6+aWFg8=
Subject key identifier: E8:AA:F4:77:58:9A:9C:82:CC:25:5E:1A:4E:A6:BE:29:D7:F9:F1:E2
Certificate issuer: /CN=f1969c845a752b92213710fc712eea8111d27b04
Certificate serial: 01882086B3740F351D22C1F9BBFBBC909FEB
Authority key identifier: F1:96:9C:84:5A:75:2B:92:21:37:10:FC:71:2E:EA:81:11:D2:7B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZachFp1K5IhNxD8cS7qgRHSewQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/434d6f-daef-46f2-a920-08c784aa6ebe/1/6Kr0d1ianILMJV4aTqa-Kdf58eI.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.151.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b3:74:0f:35:1d:22:c1:f9:bb:fb:bc:90:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1969c845a752b92213710fc712eea8111d27b04
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8aaf477589a9c82cc255e1a4ea6be29d7f9f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:13:4e:6b:30:32:c5:d4:b0:0c:e6:b7:75:
08:d6:ed:5f:4d:7e:97:1c:12:ce:fb:e2:4f:e5:44:
ce:56:42:4c:71:68:30:79:ac:fe:df:81:da:e4:67:
c6:66:52:32:ea:eb:d3:6d:50:18:4d:c7:4a:71:f4:
4a:2e:d4:47:d7:59:e9:e2:da:17:5c:a3:66:54:74:
7b:9e:94:15:c6:7d:63:3e:78:10:33:b8:a7:b0:7a:
6b:f7:cf:df:dd:57:7b:d6:da:aa:82:83:57:3e:26:
64:93:dc:16:6a:2f:fc:33:fd:6d:18:d0:3d:86:e2:
3c:5c:c9:e3:31:18:a5:ac:9e:dc:2f:33:61:b3:b7:
77:20:56:65:cb:b3:ae:ad:f6:7d:d6:b0:21:99:07:
a3:c4:1c:8a:28:5a:30:54:07:84:e0:56:4f:53:04:
40:3d:59:cb:7a:40:88:0b:fb:d2:2f:6b:23:14:1d:
11:26:cf:42:5f:72:6c:17:d5:ce:93:45:d5:c9:46:
9b:c0:63:b7:75:69:ab:c3:0b:ee:12:67:a6:f3:ec:
92:b2:94:61:56:63:5c:c0:2d:b0:bf:25:cb:c8:f7:
d6:11:04:6b:34:d2:2a:d8:68:4a:98:ed:f5:70:45:
8c:4a:ef:9e:a0:6e:fc:b7:30:18:e7:ec:98:ae:e4:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:F4:77:58:9A:9C:82:CC:25:5E:1A:4E:A6:BE:29:D7:F9:F1:E2
X509v3 Authority Key Identifier:
keyid:F1:96:9C:84:5A:75:2B:92:21:37:10:FC:71:2E:EA:81:11:D2:7B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZachFp1K5IhNxD8cS7qgRHSewQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/434d6f-daef-46f2-a920-08c784aa6ebe/1/6Kr0d1ianILMJV4aTqa-Kdf58eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/434d6f-daef-46f2-a920-08c784aa6ebe/1/8ZachFp1K5IhNxD8cS7qgRHSewQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.145.0/24
Signature Algorithm: sha256WithRSAEncryption
10:01:aa:07:fb:8d:78:a1:1e:e4:76:c4:27:97:12:56:e9:c4:
79:c1:25:19:19:a4:26:dd:c3:67:3e:2e:7e:66:9f:b2:8d:77:
b4:11:e3:af:92:9f:f0:33:0b:74:ff:5c:a6:9b:db:ef:1e:23:
94:6a:29:9a:59:0a:06:a8:0d:b0:3c:f8:51:95:08:33:7e:6c:
a4:92:79:57:d1:c6:70:de:89:a2:4a:2b:79:d7:9c:c4:b8:d4:
0b:a4:69:59:a0:bc:01:0a:da:76:5f:32:82:f9:23:e3:30:6f:
3b:5b:09:ea:0c:63:ae:16:a2:0b:d4:25:bd:40:8d:2d:62:69:
ed:9a:0b:90:09:53:c1:a3:0b:a3:ce:74:34:37:5d:d8:84:12:
ad:38:3e:8e:c7:f0:3d:a4:e5:94:b9:b7:66:73:c9:8f:e6:4a:
9f:eb:c2:ef:12:0d:29:da:ee:c5:07:d3:57:cf:58:92:13:db:
03:09:4e:19:30:b9:69:a9:74:7b:e7:c7:33:e8:7c:0d:59:0b:
08:7a:00:21:55:d1:37:d6:31:54:3a:07:f2:28:76:e4:c7:3a:
a5:27:11:37:a4:60:e4:9b:cb:1c:18:ea:0d:ef:e1:65:66:71:
47:3f:bd:4b:21:9c:c4:df:35:d5:5a:51:66:6a:dc:a1:17:de:
4c:e4:3e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:17:42 2025 by rpki-client