Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/6Hs21ZDEU36A7XzHFbni9nG1_gs.roa
File: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (raw, json)
Hash identifier: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=
Subject key identifier: E8:7B:36:D5:90:C4:53:7E:80:ED:7C:C7:15:B9:E2:F6:71:B5:FE:0B
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 0194228DD60F779F04AA4EFBEAD8DE69217C
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/6Hs21ZDEU36A7XzHFbni9nG1_gs.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215463
IP address blocks: 193.138.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d6:0f:77:9f:04:aa:4e:fb:ea:d8:de:69:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e87b36d590c4537e80ed7cc715b9e2f671b5fe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:fd:aa:d9:ee:f2:b6:75:15:b3:cc:61:29:
e1:6f:5d:73:61:5d:ae:b9:d4:cc:55:fb:f8:45:24:
b4:c3:c7:42:cb:2b:bc:14:ba:f0:7f:b9:32:48:9b:
b0:13:6a:1f:f9:10:78:8e:18:bd:49:1b:6d:cb:ac:
48:90:7d:87:53:bf:79:ff:53:47:20:73:05:d1:db:
4b:cd:d1:62:0e:dc:7a:6c:d4:d2:25:45:b9:12:84:
c5:1c:60:23:59:cb:e9:f1:6f:e8:5c:b1:4e:ea:b6:
74:c3:00:14:d9:70:49:13:a7:39:ac:5b:07:02:66:
ee:11:0e:ae:c6:bd:f5:2c:dc:4d:c5:db:b4:f0:d3:
94:27:df:6d:75:7e:f0:b6:72:df:bd:99:60:63:24:
f9:39:95:e3:05:65:47:68:02:56:21:d8:af:60:23:
24:c7:95:7b:01:d7:4c:68:90:db:10:55:ae:81:3b:
48:bb:46:69:e7:ec:f9:e6:a3:4b:6b:9d:3f:81:5d:
63:ad:bd:97:04:34:e4:84:c9:7f:66:a1:c8:f0:58:
c6:36:24:b5:f2:ba:1e:fd:67:9c:ee:75:1b:39:83:
ee:77:19:c2:7d:e9:9d:2d:53:5f:9b:c6:86:04:4a:
07:a8:c9:7e:c3:02:3c:de:1e:52:6f:09:22:d4:56:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:36:D5:90:C4:53:7E:80:ED:7C:C7:15:B9:E2:F6:71:B5:FE:0B
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/6Hs21ZDEU36A7XzHFbni9nG1_gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.97.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a3:2e:cd:af:a5:a7:24:25:9f:b8:c9:49:b0:f1:bd:14:63:
6e:d5:33:81:e3:1a:6d:a4:43:8e:9b:d0:d3:b5:c5:04:48:16:
87:44:3c:3c:9c:70:55:30:9b:f6:4d:34:a2:79:cf:95:24:04:
98:49:94:5b:43:90:c4:44:7b:c5:38:20:77:21:27:e2:21:4f:
2b:3c:1b:26:e4:0d:33:f0:72:e5:e8:bd:ef:45:de:66:13:f9:
d2:7b:d3:38:a7:f5:a9:2b:af:ed:be:f3:75:94:f9:3a:ba:81:
23:39:fc:85:f8:f3:c5:f2:42:aa:64:d7:d3:cc:6e:09:91:a5:
8e:ce:54:af:ef:2e:82:63:10:75:5f:10:14:7c:f9:17:53:ea:
71:36:b6:26:77:ce:b1:61:73:b3:47:38:24:b7:12:aa:13:50:
d4:c2:fa:d9:2b:00:11:b2:43:40:9a:ef:d0:bc:67:c1:5b:11:
ec:75:28:8d:b6:68:4e:01:64:23:75:fe:8e:06:e3:9c:0e:b4:
e9:8a:68:de:98:11:4c:1d:ca:7d:f6:5a:cb:27:38:04:2b:0a:
d5:b0:1e:91:e6:c5:b3:bf:15:a8:10:7e:df:73:a0:db:a8:c1:
df:a1:bd:92:ce:4a:50:60:71:f3:76:e7:d7:8a:23:a7:bf:27:
bf:4c:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net