Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/6PtM-1AaPYw4bqr8rhramn1KHKU.roa
File: 6PtM-1AaPYw4bqr8rhramn1KHKU.roa (raw, json)
Hash identifier: ZEUURVdVTclBEs9HLYVv5QcivcC8b8fYZMI68lFlKnw=
Subject key identifier: E8:FB:4C:FB:50:1A:3D:8C:38:6E:AA:FC:AE:1A:DA:9A:7D:4A:1C:A5
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018C26F6DC1068152A2558E3A4EC686FF1DF
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/6PtM-1AaPYw4bqr8rhramn1KHKU.roa
Signing time: Fri 01 Dec 2023 19:59:21 +0000
ROA not before: Fri 01 Dec 2023 19:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56762
IP address blocks: 64.187.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:f6:dc:10:68:15:2a:25:58:e3:a4:ec:68:6f:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Dec 1 19:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8fb4cfb501a3d8c386eaafcae1ada9a7d4a1ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:5a:1f:30:9b:f3:3d:9c:75:9f:7f:52:48:
8d:c6:64:ab:e1:6a:c6:e0:c2:52:05:a6:73:ce:a2:
d8:42:59:01:53:0b:e2:1e:58:bc:0a:a6:1c:99:81:
23:52:0b:cd:53:c1:57:18:4b:b9:c8:61:de:e9:dc:
2b:74:16:2b:78:34:e9:33:c9:4a:dd:6b:10:d3:77:
97:b2:ec:20:23:ee:8d:e5:5e:7d:c9:64:aa:37:06:
09:40:50:e5:8e:cb:3d:85:93:33:0a:22:21:b1:15:
af:eb:e9:af:ad:d1:f3:e8:94:22:f9:71:2c:bc:d5:
c0:ff:6f:68:cd:24:b4:9a:52:78:93:ad:36:e2:6b:
96:6a:16:87:74:b5:30:b8:16:11:cc:73:cf:5f:a9:
8f:07:47:bb:1a:eb:01:ca:08:67:9e:50:34:69:19:
e5:27:17:e7:c4:a3:63:dc:01:e2:de:8e:2f:95:ed:
a1:f4:53:53:99:70:62:5b:b3:60:38:ef:85:c4:37:
7d:2a:5f:94:bb:b1:fe:1d:9b:36:40:10:ff:c1:21:
12:dc:78:2b:13:80:b5:21:36:f9:5a:19:33:a9:ec:
b4:f3:04:c0:fe:6c:23:5c:af:58:5a:b3:6c:64:73:
a0:35:e0:c1:08:d0:e6:ab:8e:00:cd:e0:87:1c:83:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FB:4C:FB:50:1A:3D:8C:38:6E:AA:FC:AE:1A:DA:9A:7D:4A:1C:A5
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/6PtM-1AaPYw4bqr8rhramn1KHKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:0d:88:b7:24:6a:d0:f5:28:30:06:fb:34:ad:87:2b:fd:85:
97:19:80:97:ec:87:42:4c:ed:3e:bd:7d:81:c3:1f:a9:2c:80:
34:30:ef:a0:48:85:61:31:76:86:dc:27:a6:58:17:6b:70:e7:
b2:7e:07:ae:9a:b3:be:42:1c:da:35:33:c3:67:d2:1a:13:65:
60:ca:28:4f:4b:84:bf:c6:4b:95:de:66:94:0d:b1:db:ce:0f:
0d:ad:fd:57:44:b2:b4:45:35:9d:7e:65:bf:e9:b5:de:14:30:
d0:a1:12:3b:32:9d:b5:8a:f2:03:9c:55:8a:c1:f6:ed:58:60:
d4:8f:0d:80:2a:f5:39:b7:a5:1a:04:97:e8:f2:0f:c5:60:a2:
45:84:55:d9:ab:24:c8:c2:33:75:61:15:76:77:a1:cf:ff:a6:
fe:87:2c:0f:98:79:17:0a:42:51:0d:f8:ca:c7:9a:40:59:23:
21:ea:f6:84:9f:0a:b4:fe:a8:e0:3c:fd:2c:34:fb:08:6f:41:
62:7e:cc:1f:c6:df:78:40:5f:e2:f1:77:ed:10:61:7c:6c:07:
17:df:00:a3:28:90:be:b2:08:c5:f8:8e:ef:8f:b8:98:93:5b:
51:90:49:d9:ef:35:16:63:13:61:36:a3:41:9d:7e:7e:fa:b7:
2a:d1:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:41 2025 by rpki-client