Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/a6SHvUwdULLlosMj0Qyu3etIaJs.roa
File: a6SHvUwdULLlosMj0Qyu3etIaJs.roa (raw, json)
Hash identifier: AXN629p0Y1qYqZU9D/jxSCYhJRckcBgGmOm3TSGD8tc=
Subject key identifier: 6B:A4:87:BD:4C:1D:50:B2:E5:A2:C3:23:D1:0C:AE:DD:EB:48:68:9B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 01941F8C53CB365047B4D93307193B6F21B6
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/a6SHvUwdULLlosMj0Qyu3etIaJs.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29013
IP address blocks: 188.239.64.0/18 maxlen: 18
188.239.120.0/21 maxlen: 21
188.239.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:53:cb:36:50:47:b4:d9:33:07:19:3b:6f:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ba487bd4c1d50b2e5a2c323d10caeddeb48689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:7b:85:42:5b:93:3e:67:bf:9a:50:5d:87:
45:fb:2e:91:64:2c:d6:58:5b:51:1c:cb:e4:bc:fe:
21:b3:52:fe:5c:28:ee:61:d2:fe:24:e1:db:88:e6:
39:30:c9:05:c1:e5:67:1d:44:bd:51:c6:fe:86:9f:
9f:30:46:aa:57:b1:b3:53:0c:76:3e:af:9d:b1:15:
60:85:89:14:70:67:e7:5e:4b:6d:5b:e3:ab:99:87:
a5:30:ad:08:60:22:eb:30:a3:9a:62:cd:29:7a:01:
82:82:73:94:47:c0:c5:3a:1d:b7:a0:57:36:a8:75:
40:81:8e:04:3e:a5:66:1a:b9:9d:85:39:6c:8d:d8:
13:16:ee:95:03:3a:ea:f4:c3:a9:89:b3:12:c4:55:
2f:48:6e:45:d6:55:14:c7:ae:1a:46:d1:6b:41:c9:
f8:56:1f:21:6d:03:6a:76:17:1b:16:d7:3f:7e:b3:
c8:53:e7:79:e5:da:21:27:fc:19:21:a7:9b:95:a4:
52:bc:af:fe:b4:97:6a:3f:ac:d3:c6:e3:39:17:8a:
22:2e:c2:6c:95:4e:06:90:cd:23:ad:e6:0e:72:a5:
6a:b7:02:84:92:78:76:77:d4:fb:9c:15:f6:83:20:
50:75:ed:9c:16:e5:20:4c:5d:23:b2:5e:30:9c:6c:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:87:BD:4C:1D:50:B2:E5:A2:C3:23:D1:0C:AE:DD:EB:48:68:9B
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/a6SHvUwdULLlosMj0Qyu3etIaJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.64.0/18
Signature Algorithm: sha256WithRSAEncryption
77:49:72:7d:42:74:02:0a:18:22:86:a9:25:14:bd:6b:32:d2:
ce:9f:53:d9:32:0c:bc:14:23:36:71:ed:9f:04:17:a9:fa:a8:
39:ec:98:2d:90:4f:80:a6:25:f7:ae:ab:e6:26:d1:b1:0d:13:
a9:79:02:9b:6c:b2:d9:78:60:c2:bb:de:b5:65:97:4a:8c:1f:
02:94:04:9d:a7:2d:26:f9:48:de:f5:26:4b:56:69:ae:69:4c:
f5:f9:fb:b2:82:7c:27:c6:73:b4:68:38:fb:4b:3f:fd:54:f1:
5a:30:b7:d0:7f:8e:39:fc:9e:5f:b7:38:0d:0d:3c:21:8f:2b:
d2:7c:03:d8:fd:ca:7e:d3:5f:78:78:8e:1a:85:9d:af:09:80:
39:a2:88:52:0c:67:35:fc:21:ab:17:5a:7a:a3:64:4d:9d:0e:
aa:ec:13:38:25:63:cc:d3:fe:74:ce:fb:01:58:a2:36:47:d3:
79:01:c7:a8:8b:3e:60:b1:43:7b:96:1e:25:ca:19:fc:64:cb:
9a:12:15:b1:a5:47:01:fb:c6:1a:2b:80:d2:c5:5e:75:27:8b:
4f:2e:f5:1b:99:a3:49:95:a4:3d:92:72:ee:6e:37:1c:02:cd:
ee:90:60:61:6d:9b:83:b1:71:d2:bf:a0:0f:d9:98:38:5a:2f:
08:72:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net