Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/j0LzYUhIgfi314lRG-UPK6juSV4.roa
File: j0LzYUhIgfi314lRG-UPK6juSV4.roa (raw, json)
Hash identifier: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=
Subject key identifier: 8F:42:F3:61:48:48:81:F8:B7:D7:89:51:1B:E5:0F:2B:A8:EE:49:5E
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0195AFB1A4F1421BA66B4435A2B706068559
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/j0LzYUhIgfi314lRG-UPK6juSV4.roa
Signing time: Wed 19 Mar 2025 18:36:49 +0000
ROA not before: Wed 19 Mar 2025 18:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210779
IP address blocks: 176.105.253.0/24 maxlen: 24
176.105.255.0/24 maxlen: 24
217.13.109.0/24 maxlen: 24
2a0d:c740:a::/48 maxlen: 48
2a0d:c740:f::/48 maxlen: 48
2a0d:c740:2c::/48 maxlen: 48
2a0d:c740:3c::/48 maxlen: 48
2a0d:c740:4c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:b1:a4:f1:42:1b:a6:6b:44:35:a2:b7:06:06:85:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Mar 19 18:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f42f361484881f8b7d789511be50f2ba8ee495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:e5:f7:07:76:17:8d:0a:38:bc:00:73:4d:
65:94:0c:34:8a:8e:d3:dc:0c:7c:d8:8a:32:f4:4c:
0e:c7:e9:4a:76:62:ee:1f:40:e9:a3:a3:39:5b:18:
f9:d8:53:ab:a0:a3:33:ec:7e:f7:f0:79:5c:4c:44:
6b:df:0e:d0:55:fd:d1:e8:d9:d4:1d:f7:70:d5:99:
cf:a6:fb:06:16:39:05:58:48:f8:5d:b7:d8:7e:ef:
fe:4b:92:b3:16:15:13:3a:d1:01:6e:06:f8:72:d8:
35:34:e2:37:d8:4e:b6:67:2b:6d:a0:78:43:35:4f:
c2:04:5a:b5:f0:63:4e:b7:d2:6b:38:0b:fa:99:7c:
17:fc:7f:e5:8b:56:67:68:64:7e:ae:06:2f:13:ec:
35:05:67:a6:b8:9e:ba:09:25:4d:20:ba:49:a2:e4:
12:94:20:01:01:6f:31:17:89:c0:56:c3:15:6b:f4:
79:62:4a:24:de:30:1a:4d:1d:40:35:9e:3a:c5:18:
c4:84:4e:de:01:7d:d8:23:f6:98:d2:e6:b6:eb:41:
28:26:b2:9c:db:8f:13:7f:c0:34:7b:e1:12:81:60:
49:cd:39:25:bb:5c:5e:c4:e2:a7:ad:07:ef:3c:a2:
3c:bb:f0:ca:f5:c7:b7:c5:be:1e:10:e2:35:30:2e:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:F3:61:48:48:81:F8:B7:D7:89:51:1B:E5:0F:2B:A8:EE:49:5E
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/j0LzYUhIgfi314lRG-UPK6juSV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
176.105.255.0/24
217.13.109.0/24
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
2a0d:c740:2c::/48
2a0d:c740:3c::/48
2a0d:c740:4c::/48
Signature Algorithm: sha256WithRSAEncryption
55:4b:1b:69:d7:9a:68:92:88:23:69:c0:c5:b1:8c:34:59:a9:
79:05:2f:6d:e9:46:c8:9c:5f:db:69:f3:cc:d7:a8:1c:fc:88:
70:7a:76:c9:40:36:46:b9:a4:f4:95:46:b6:7c:63:12:62:2d:
fb:1c:e6:d0:34:ee:fa:c6:4d:35:89:d2:5c:af:70:d4:54:60:
78:d8:e1:67:24:65:39:b0:09:f3:b1:9d:85:22:5d:ee:bc:07:
d5:e8:e5:5c:44:68:7f:73:be:ec:56:27:73:51:6f:c8:00:cd:
2a:ee:60:7f:6f:ea:ad:23:61:8e:90:5d:e4:ee:04:00:b6:12:
ec:50:c1:3e:fa:89:8d:a8:55:15:4e:75:e4:33:d7:65:a1:df:
7c:3f:92:32:ab:a7:fc:c9:e1:53:93:f1:6b:f5:16:fd:5f:ef:
be:55:02:93:de:62:13:ff:c0:48:5c:82:86:d2:ae:86:0f:66:
fb:32:b7:a0:8c:be:9f:04:b4:aa:f5:19:f8:f4:1f:3f:2d:de:
d9:c4:25:c3:9a:c8:0d:dc:aa:03:40:32:87:78:71:2d:89:4b:
df:ae:59:49:62:f9:ec:e5:67:44:8f:d1:c2:99:1f:8c:58:2c:
43:13:1e:58:f3:86:af:7e:73:56:93:04:31:ec:3d:53:77:fd:
40:98:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:43:15 2025 by rpki-client