Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/6gBE7pptZYiOQYzgQrDqpd4YU28.roa
File: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (raw, json)
Hash identifier: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=
Subject key identifier: EA:00:44:EE:9A:6D:65:88:8E:41:8C:E0:42:B0:EA:A5:DE:18:53:6F
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 019428261CA0E1A6ECAD2A4A1497C3414843
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/6gBE7pptZYiOQYzgQrDqpd4YU28.roa
Signing time: Thu 02 Jan 2025 17:52:53 +0000
ROA not before: Thu 02 Jan 2025 17:52:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 89.106.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1c:a0:e1:a6:ec:ad:2a:4a:14:97:c3:41:48:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: Jan 2 17:52:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea0044ee9a6d65888e418ce042b0eaa5de18536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:6c:60:d6:6d:df:37:a0:7f:4e:d2:92:57:
35:8f:73:fe:94:4d:cb:19:b4:75:20:46:50:eb:91:
d0:e7:39:d6:28:3b:2a:b5:a5:ab:90:d7:85:7f:9b:
6d:98:23:df:57:49:82:9e:35:26:2c:57:93:7c:60:
d1:3a:73:a7:c1:23:b7:f3:e9:21:80:a9:6b:bb:f0:
29:a2:5a:02:46:01:ec:2f:f4:da:d5:19:a8:70:77:
ed:f8:d2:23:ae:27:f5:9a:86:04:0d:4b:50:03:67:
4c:8c:6a:6c:cc:bc:3e:bc:48:53:d0:37:32:e7:93:
65:9c:35:a0:bf:df:67:ed:fb:54:d8:58:4c:cb:71:
5a:8f:d7:b4:10:3e:0b:b4:5b:9b:d8:f9:35:f5:9f:
c2:8f:41:19:e0:71:c3:73:ef:60:ae:d4:a2:e4:39:
4c:da:1c:08:0f:94:0b:01:07:79:4b:c9:a5:d5:d0:
34:98:4a:84:68:6a:de:2a:b5:0b:5e:64:18:cd:3b:
a9:ce:95:04:e0:74:32:99:1f:01:33:53:c8:28:33:
fb:1c:65:c4:ef:f2:69:f8:1b:86:6f:49:44:36:61:
2f:5f:03:45:7e:72:3f:0a:22:c3:16:03:03:a3:45:
f2:b9:de:9f:3b:b3:67:24:0a:60:44:ce:ee:3a:85:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:44:EE:9A:6D:65:88:8E:41:8C:E0:42:B0:EA:A5:DE:18:53:6F
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/6gBE7pptZYiOQYzgQrDqpd4YU28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.205.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b8:4f:e7:fc:b0:08:df:55:10:da:cb:09:8b:e4:4f:46:d2:
98:72:5f:16:0b:95:99:bb:a8:40:5f:72:e2:04:61:66:18:95:
b5:88:e1:2b:3f:1d:19:2b:b3:b2:bb:6d:2d:56:7d:2a:20:d6:
de:23:29:a7:5d:54:50:60:35:63:0e:3d:1e:da:3f:b5:10:35:
16:42:58:0e:e7:93:97:25:b3:e2:6e:e7:bb:6f:e8:5d:ed:fc:
76:6b:d6:7f:8c:75:c9:6c:40:ce:86:36:82:1d:c8:0f:e6:87:
51:1a:ce:58:6b:97:7f:57:78:b5:35:d9:37:74:e8:c9:1f:29:
93:7a:79:e8:18:9d:b9:5f:b0:77:20:fd:93:4b:82:bc:b1:7f:
66:1d:6a:6f:15:67:8d:ba:f9:d4:f5:98:99:f4:e0:a8:42:95:
28:6a:21:19:58:c8:e9:19:1d:cc:34:ad:2c:d8:b9:4f:f5:2a:
ec:de:38:50:05:8e:92:6b:5a:69:37:ec:44:57:c6:39:88:33:
26:22:ba:88:85:c2:ff:e0:de:d2:ab:89:45:54:a9:f6:22:b7:
f2:36:65:71:de:2c:81:b8:0c:cf:54:74:77:7d:58:a6:03:67:
3c:24:c2:96:2b:ac:12:a0:84:a3:9c:01:57:84:b8:ee:12:64:
b4:98:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:08 2025 by rpki-client