Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/6oC7BPAJB50zVhhQ4YjXtqdkh7A.roa
File: 6oC7BPAJB50zVhhQ4YjXtqdkh7A.roa (raw, json)
Hash identifier: V4zYEUBUGfbI4GhgnwAliu8xc4TyLS0VcFDxdnFIvAU=
Subject key identifier: EA:80:BB:04:F0:09:07:9D:33:56:18:50:E1:88:D7:B6:A7:64:87:B0
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0194206814B5513AA6ACC9769DE03E285660
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/6oC7BPAJB50zVhhQ4YjXtqdkh7A.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 85.239.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:14:b5:51:3a:a6:ac:c9:76:9d:e0:3e:28:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea80bb04f009079d33561850e188d7b6a76487b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:84:e3:39:65:96:ff:3d:21:83:c8:a4:7e:
d4:cd:a4:dc:da:20:bd:ab:32:be:1b:32:89:85:c2:
4b:49:b2:e5:73:4d:84:e6:20:9b:1c:59:27:59:77:
dc:43:f6:fa:0c:57:ad:48:2e:63:48:65:7a:b3:25:
9e:6d:14:39:8a:5a:97:71:e8:e1:f9:40:c1:c4:0f:
2a:06:44:dd:6f:bf:3c:d5:c4:d7:3c:2b:d5:fa:be:
8c:f0:55:b5:6b:08:9b:e5:fe:3f:18:ee:75:19:ea:
09:58:05:15:b0:dd:c9:ad:e6:33:43:c3:d4:5c:be:
47:43:a6:a7:ae:89:db:6e:54:5b:a6:ae:7b:27:9c:
35:8b:06:31:cc:89:f4:21:71:f6:41:4a:88:7b:28:
84:de:46:0a:e9:fd:ee:d5:6a:cb:70:aa:1b:70:fb:
09:22:4a:a0:b6:35:32:71:78:27:29:6a:d0:c6:26:
6c:40:1b:27:e6:a2:66:a4:63:8c:a2:af:57:2e:75:
2a:8f:6b:21:64:3e:81:87:b2:af:37:44:79:d1:02:
1f:bb:c9:a4:d9:49:97:2c:f4:4f:ed:48:2b:a9:31:
84:2b:38:ff:6c:2b:52:a3:f9:df:16:c3:79:29:a6:
d7:3e:b0:4c:60:a9:bc:ee:c8:ba:4e:8d:e9:da:3f:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:BB:04:F0:09:07:9D:33:56:18:50:E1:88:D7:B6:A7:64:87:B0
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/6oC7BPAJB50zVhhQ4YjXtqdkh7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:6a:27:7e:4d:74:22:fe:77:60:80:03:c4:22:f2:a3:3a:d9:
89:22:6e:c5:9d:bc:df:bd:95:08:ab:e5:3c:85:97:b6:24:e6:
be:23:88:46:28:78:dc:83:5d:25:a4:63:23:88:50:8f:ca:7c:
e8:d8:d4:6c:dc:d3:21:54:56:13:30:b6:28:8c:99:ce:68:ca:
34:36:12:2d:f5:0b:da:70:4e:eb:5d:3b:ce:1f:bb:52:24:77:
5b:f4:19:40:a6:09:4c:90:cf:43:45:c6:1d:6e:5b:a4:29:1a:
88:62:8b:90:69:64:1c:ff:bc:83:c5:a1:9f:d9:37:6c:eb:61:
7f:d4:a0:fd:c0:12:36:5d:3c:26:57:84:d0:1a:3a:37:26:1c:
7d:39:9a:4d:e4:36:f0:3a:77:38:a7:09:d3:e4:c7:64:f3:80:
da:c0:01:aa:fd:bc:33:ce:8d:4e:86:87:3b:86:4a:f1:de:5d:
9d:40:01:44:be:22:b7:7f:21:a4:2c:a0:c6:67:98:14:57:ee:
f5:88:60:84:b4:88:57:ad:a1:35:8c:4a:35:01:33:3a:aa:94:
60:ce:b8:f1:e0:48:0b:c2:03:59:e1:35:f4:bb:a4:e0:e0:ca:
40:6f:d4:59:40:40:d5:75:c3:82:eb:ed:0e:fc:73:5b:bb:27:
dd:96:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:18 2025 by rpki-client