Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/6EgB2s4hHhzG_eb7UGRloxvUkFg.roa
File: 6EgB2s4hHhzG_eb7UGRloxvUkFg.roa (raw, json)
Hash identifier: rzrAGl9Mfl53to3gecQwKC96n6DuhfXpQ/5hUKN96ts=
Subject key identifier: E8:48:01:DA:CE:21:1E:1C:C6:FD:E6:FB:50:64:65:A3:1B:D4:90:58
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 0194214391BC16C8B0C984472F1D9DF64053
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/6EgB2s4hHhzG_eb7UGRloxvUkFg.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215697
IP address blocks: 2001:678:554::/48 maxlen: 48
2001:67c:e64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:91:bc:16:c8:b0:c9:84:47:2f:1d:9d:f6:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e84801dace211e1cc6fde6fb506465a31bd49058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9b:28:83:bc:07:0d:02:a1:fe:40:11:c8:89:
f4:b8:61:24:8e:81:e5:34:b9:10:3e:9b:c7:50:12:
35:7d:dc:c8:66:96:a2:9a:9f:1a:54:5e:50:8b:8e:
b0:70:7f:ea:bc:2e:1a:07:27:78:59:d2:ac:a0:26:
67:33:c5:86:13:0e:42:e4:0d:ac:33:55:94:84:fe:
30:2d:70:8d:d6:54:ac:39:fd:cc:7b:c8:bc:4b:4e:
fa:ea:1c:a7:93:21:c3:02:28:81:cd:7d:59:a7:b5:
4d:62:c4:a6:3e:eb:76:26:a2:7f:50:f0:2b:a8:2f:
62:a2:30:56:35:8e:e5:15:4d:92:7e:29:ef:76:f8:
0b:4f:3e:2a:98:50:1f:18:6f:f0:15:32:1e:7c:85:
a7:69:99:f0:f9:19:45:6c:69:a4:3e:c1:6b:c2:dd:
a9:67:6f:93:d8:09:a7:db:15:b7:fd:28:77:48:eb:
ad:da:ab:a2:ae:c9:c9:16:21:2b:d2:97:11:3b:1f:
57:b3:46:3b:8d:8b:bd:97:8d:f5:5f:bc:ae:92:95:
28:59:7b:38:b3:c6:31:7c:49:83:ba:50:d0:bf:81:
34:74:03:58:57:bc:b0:f7:4a:88:f8:72:5c:59:b6:
40:ea:a5:61:a4:5e:ed:9d:96:a6:37:76:f1:22:5c:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:01:DA:CE:21:1E:1C:C6:FD:E6:FB:50:64:65:A3:1B:D4:90:58
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/6EgB2s4hHhzG_eb7UGRloxvUkFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:554::/48
2001:67c:e64::/48
Signature Algorithm: sha256WithRSAEncryption
53:e5:dd:54:6c:4e:6e:7c:4d:1c:28:e0:51:09:25:21:7a:eb:
de:04:5d:fd:fe:65:06:6d:88:d2:f0:d6:b6:54:78:2a:cb:e0:
43:d0:42:6c:fc:a7:52:a5:e0:5e:f0:a1:7b:6c:50:df:53:d1:
a1:ec:11:ed:53:fe:b4:0a:25:32:92:de:cc:b3:f3:6d:8e:1e:
ed:bc:5f:be:46:78:d7:46:4a:dd:88:c4:db:ce:65:53:8b:6d:
3e:da:c6:ef:93:4b:0b:31:27:21:ee:17:89:29:ab:dd:34:e6:
b8:96:48:32:1e:67:14:26:c7:cf:96:b0:95:13:30:80:e8:19:
9d:fc:d7:3c:a8:2f:9a:26:84:fc:36:9d:41:a8:19:fd:56:bf:
24:3e:44:9f:14:06:58:b5:ad:98:e6:64:97:4f:2c:ce:53:9d:
45:c7:98:6d:2e:b9:55:8f:91:29:64:fa:78:f4:af:88:8e:e9:
48:e6:16:10:6e:77:24:ea:c7:cc:30:4f:53:78:9a:69:b5:4c:
27:69:d3:49:53:86:cf:0a:ed:80:c6:b5:76:10:12:74:b8:aa:
40:32:78:41:74:5c:b9:75:df:7b:b5:7f:b7:c5:11:52:55:22:
b6:50:12:7d:61:43:2c:c4:cb:eb:f9:0b:8b:03:c2:9b:70:d8:
15:41:f5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:15 2025 by rpki-client on console.sobornost.net