Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa
File: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (raw, json)
Hash identifier: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=
Subject key identifier: E8:87:6A:17:F4:77:63:83:1E:D3:1B:7E:5C:ED:D6:0E:1E:A5:05:3D
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019421B2166ACFF367FB26A4C136BC176173
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43118
IP address blocks: 46.187.128.0/17 maxlen: 17
78.152.0.0/19 maxlen: 19
91.203.244.0/22 maxlen: 22
95.108.0.0/17 maxlen: 17
195.42.140.0/23 maxlen: 23
2a02:2a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:6a:cf:f3:67:fb:26:a4:c1:36:bc:17:61:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8876a17f47763831ed31b7e5cedd60e1ea5053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:53:65:8b:95:dd:2e:cd:c9:b9:b3:55:8e:
df:d7:b1:fe:67:d4:84:39:fc:78:0a:31:ce:40:fb:
5e:4a:26:13:99:25:d2:31:76:7b:51:bc:2d:0f:08:
a2:42:ca:9b:53:a1:a9:9b:5d:ea:5d:3b:b3:2d:09:
5b:ca:a1:94:a9:bf:0d:62:18:59:d8:3a:89:8d:e0:
a1:f5:84:8c:2b:b1:e2:5f:67:81:fe:50:71:3d:5b:
09:1e:fe:70:6f:f3:7d:46:6f:88:03:07:80:fe:20:
87:05:3f:11:e5:ff:f3:65:ec:f2:85:5d:93:97:8a:
01:35:4e:0f:0c:c3:42:75:65:ce:5a:df:9b:94:bd:
ac:2e:30:c2:3e:b9:6b:a1:2c:e7:3c:66:78:c2:41:
a7:ac:64:c8:e6:65:7e:f5:15:b9:48:68:17:ae:ef:
0a:ff:31:de:c4:83:68:aa:e0:c9:f3:f3:c7:bb:bc:
c7:d7:83:12:bd:d6:64:27:35:a1:73:a4:dd:98:12:
c0:96:a4:b6:a4:87:a8:5a:82:07:4a:ac:de:c3:38:
b4:e1:11:0e:23:87:fc:e3:0a:e7:76:06:ee:85:8d:
01:83:70:2a:1e:77:e5:5a:b5:8e:90:31:45:cc:f7:
ee:e9:0c:7b:b3:c1:ab:c6:c3:79:9e:70:b3:f6:58:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:6A:17:F4:77:63:83:1E:D3:1B:7E:5C:ED:D6:0E:1E:A5:05:3D
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.187.128.0/17
78.152.0.0/19
91.203.244.0/22
95.108.0.0/17
195.42.140.0/23
IPv6:
2a02:2a0::/32
Signature Algorithm: sha256WithRSAEncryption
32:5f:6a:43:f1:75:d4:a2:f0:69:14:f0:7e:31:b1:e5:4e:bb:
99:85:ae:27:d5:e7:36:bd:91:3f:df:ce:ae:73:92:6e:d3:4b:
a6:d6:e5:50:94:32:a5:af:ab:17:8b:42:d4:0d:92:8f:50:11:
02:7b:50:ec:fd:eb:a4:9c:f2:95:d4:5f:27:25:7f:9d:9e:92:
ae:07:90:af:e1:f3:5c:1d:af:72:b4:4a:96:0b:4c:90:1f:0e:
8d:77:37:92:fd:2c:31:e9:20:68:92:df:9a:9f:95:bd:55:e5:
0b:2f:10:3b:8f:be:8c:6d:60:32:31:d4:d9:bd:d4:b0:48:70:
18:8d:c7:5c:31:d0:fc:a2:83:90:19:46:3c:ad:47:53:88:87:
4f:84:81:83:a0:f9:90:da:dc:6a:2d:d4:a1:cd:12:07:25:1b:
19:04:b9:7a:c1:51:97:61:90:4b:b3:b4:9d:36:b6:ed:3e:92:
a5:91:31:47:7f:e6:e4:a4:88:ae:5a:34:36:87:56:b7:30:e6:
2b:ab:11:82:79:45:48:4f:16:e3:e5:d9:4a:30:73:be:bf:06:
a9:87:0a:dd:1a:e4:fe:b6:74:86:5b:d7:d8:c9:15:cc:5e:6f:
6c:20:32:34:3b:6d:7e:ce:2c:fd:b8:21:fa:d4:1f:8a:fa:69:
fc:23:10:72
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQhshZqz/Nn+yakwTa8F2FzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjUwMTAxMTE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODg3NmExN2Y0Nzc2MzgzMWVkMzFiN2U1Y2VkZDYwZTFlYTUwNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pJTZYuV3S7NybmzVY7f17H+Z9SE
Ofx4CjHOQPteSiYTmSXSMXZ7UbwtDwiiQsqbU6Gpm13qXTuzLQlbyqGUqb8NYhhZ
2DqJjeCh9YSMK7HiX2eB/lBxPVsJHv5wb/N9Rm+IAweA/iCHBT8R5f/zZezyhV2T
l4oBNU4PDMNCdWXOWt+blL2sLjDCPrlroSznPGZ4wkGnrGTI5mV+9RW5SGgXru8K
/zHexINoquDJ8/PHu7zH14MSvdZkJzWhc6TdmBLAlqS2pIeoWoIHSqzewzi04REO
I4f84wrndgbuhY0Bg3AqHnflWrWOkDFFzPfu6Qx7s8GrxsN5nnCz9lgCyQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFOiHahf0d2ODHtMbflzt1g4epQU9MB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvNklkcUZfUjNZNE1lMHh0LVhPM1dEaDZsQlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQHLruAAwQF
TpgAAwQCW8v0AwQHX2wAAwQBwyqMMA0EAgACMAcDBQAqAgKgMA0GCSqGSIb3DQEB
CwUAA4IBAQAyX2pD8XXUovBpFPB+MbHlTruZha4n1ec2vZE/386uc5Ju00um1uVQ
lDKlr6sXi0LUDZKPUBECe1Ds/euknPKV1F8nJX+dnpKuB5Cv4fNcHa9ytEqWC0yQ
Hw6NdzeS/Swx6SBokt+an5W9VeULLxA7j76MbWAyMdTZvdSwSHAYjcdcMdD8ooOQ
GUY8rUdTiIdPhIGDoPmQ2txqLdShzRIHJRsZBLl6wVGXYZBLs7SdNrbtPpKlkTFH
f+bkpIiuWjQ2h1a3MOYrqxGCeUVITxbj5dlKMHO+vwaphwrdGuT+tnSGW9fYyRXM
Xm9sIDI0O21+ziz9uCH61B+K+mn8IxBy
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net