Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/m6x_oZHQXTbxnXXD90xWd49XI3c.roa
File: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (raw, json)
Hash identifier: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=
Subject key identifier: 9B:AC:7F:A1:91:D0:5D:36:F1:9D:75:C3:F7:4C:56:77:8F:57:23:77
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01941FFA7565713644DEF39752DEC2F2E111
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/m6x_oZHQXTbxnXXD90xWd49XI3c.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.39.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:65:71:36:44:de:f3:97:52:de:c2:f2:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bac7fa191d05d36f19d75c3f74c56778f572377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:67:08:04:aa:cc:9b:ab:b4:f8:c0:22:fb:
43:b1:d7:39:cb:d0:c0:18:0d:9b:6e:0b:36:56:67:
9c:76:a4:7e:79:32:d2:24:d9:c2:bd:2e:41:80:3f:
2b:ce:9e:30:58:92:fe:47:2a:1f:59:8a:f4:81:52:
5c:a8:07:b1:55:22:4b:71:69:72:a3:39:05:a1:7b:
00:d0:7b:1c:84:19:81:00:07:c9:36:f0:65:6d:71:
f7:5f:43:30:5c:e4:7a:e9:ac:e4:4a:57:65:ed:e8:
8e:f7:2e:51:31:06:ea:bf:4b:45:6a:eb:ab:80:e9:
47:9d:96:e8:5b:49:1e:36:11:9a:a9:be:cd:38:78:
2f:2b:19:0b:e1:06:a4:26:2f:cc:03:de:65:d4:3b:
0f:b0:0c:b4:00:d3:4a:c7:c5:b8:1b:c8:b7:03:c7:
e8:8a:37:ca:78:da:d5:71:7f:5e:42:50:bf:a6:6a:
a6:5d:85:8c:e2:70:7f:b0:1c:dc:11:ac:b7:b5:a1:
8e:63:1a:e2:de:cf:c0:78:73:ff:37:e5:4d:b3:0a:
13:bb:31:bb:90:a4:57:a6:49:37:df:a2:c3:07:05:
6b:73:6c:a3:8a:ef:4b:f1:87:d6:2e:29:a9:40:41:
ee:bd:a3:1a:fc:ef:7f:97:bc:da:b2:c0:83:a4:67:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:7F:A1:91:D0:5D:36:F1:9D:75:C3:F7:4C:56:77:8F:57:23:77
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/m6x_oZHQXTbxnXXD90xWd49XI3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:45:cb:a1:0f:97:d1:27:fe:d1:49:6a:8d:34:ff:79:fc:e4:
71:a4:ac:5b:f0:8c:b9:c7:9e:38:3f:eb:ea:d2:18:79:7b:7f:
a4:94:00:af:29:13:37:2a:65:3b:23:a2:7f:24:88:80:e2:19:
b2:90:f2:7d:0a:c6:86:87:17:be:27:5a:ff:61:30:19:d7:ea:
38:c8:be:70:1f:d5:37:b2:55:1a:ff:dc:c7:19:f5:0d:33:0a:
67:07:86:ab:d1:32:e1:e5:56:65:04:4b:52:53:08:2f:b4:b8:
78:d2:1f:df:ef:87:fd:58:22:c8:49:19:9f:1c:d4:60:4e:87:
38:1b:e9:82:9c:f6:4d:1a:16:21:a7:1f:b6:56:bb:05:07:e5:
1d:e2:79:a1:40:fa:e6:1e:b8:4e:d5:6d:5f:b0:0f:ed:c0:2a:
5d:54:0e:f6:02:9a:76:cd:dc:85:10:5b:54:2f:82:c9:7e:a7:
38:20:9d:97:ec:cd:58:d7:f7:f8:47:0f:75:74:53:ed:f7:b4:
a1:92:5b:bc:e4:21:8f:b3:f1:d2:f3:cd:a9:c6:ba:5c:dc:58:
ed:7b:3d:ee:59:29:39:ca:0f:7a:f7:38:a6:d3:b3:6e:b4:50:
ea:1f:a4:66:8f:4b:36:2e:e0:2a:ec:9b:89:95:33:2d:d5:da:
c8:42:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:57 2025 by rpki-client