Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/a4ymEjMsJhtXkcAJ6G7kVnIhTYw.roa
File: a4ymEjMsJhtXkcAJ6G7kVnIhTYw.roa (raw, json)
Hash identifier: UnNO09ZwmXFienrwUtifAF5dtre8Vto8PtqszYxfGtk=
Subject key identifier: 6B:8C:A6:12:33:2C:26:1B:57:91:C0:09:E8:6E:E4:56:72:21:4D:8C
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0194228E38D948605B97D4ED28BE3D528E4E
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/a4ymEjMsJhtXkcAJ6G7kVnIhTYw.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203714
IP address blocks: 176.53.180.0/23 maxlen: 23
176.53.182.0/23 maxlen: 23
185.207.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:38:d9:48:60:5b:97:d4:ed:28:be:3d:52:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b8ca612332c261b5791c009e86ee45672214d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:d0:07:0e:cd:26:fb:7e:6d:a1:bc:80:1f:
35:c4:9b:e0:c7:ba:82:e2:cc:e6:00:c2:f0:0c:38:
a6:06:9e:89:93:bf:c4:c9:69:63:2b:cf:7f:ed:74:
cb:3a:7b:68:a5:d0:d2:e1:d5:d5:d2:cf:22:ba:88:
57:ab:fd:8b:20:10:46:3e:a6:95:a8:dc:c0:b3:f9:
37:5e:d6:37:f0:16:5e:1f:28:98:2c:12:51:e9:e5:
51:22:ce:20:63:23:3b:9b:24:52:3c:f6:71:78:0a:
ef:1f:9e:e6:f8:ba:73:34:5b:9a:43:0b:fe:d3:f2:
59:35:b9:95:d9:8b:b9:14:37:62:1b:6e:9b:4b:25:
a9:82:ab:91:e5:4e:e2:69:08:da:1f:7c:0e:79:c5:
a2:05:97:ec:28:08:d5:f3:8f:f6:c0:c2:96:73:6f:
2c:aa:ba:90:ab:e3:c6:76:1b:4e:d8:fa:0d:56:7b:
ba:51:9f:ae:b9:62:1e:b2:33:5b:4c:b4:fa:61:be:
d9:ad:72:6a:16:c3:e3:29:2b:94:aa:42:a9:c9:1e:
86:bd:94:46:61:5e:b1:cd:c0:c6:6c:a6:35:51:21:
64:02:e7:c0:cd:3a:79:94:12:63:fc:82:f6:65:9c:
9f:9a:6f:da:d0:c6:a0:d6:ab:62:d8:7e:90:34:1a:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:A6:12:33:2C:26:1B:57:91:C0:09:E8:6E:E4:56:72:21:4D:8C
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/a4ymEjMsJhtXkcAJ6G7kVnIhTYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.180.0/22
185.207.2.0/24
Signature Algorithm: sha256WithRSAEncryption
44:24:02:45:75:1f:c0:8f:dc:bf:4e:b3:38:7e:7b:10:96:84:
44:91:ba:64:0e:1e:73:2f:9e:63:7e:4d:b4:5a:3c:b6:52:2a:
12:ae:11:20:be:93:02:4c:07:27:bb:48:6c:2b:dc:ad:63:3a:
c3:31:92:61:d8:32:55:fe:02:27:1e:75:95:11:d2:e6:0e:e3:
3b:ee:5d:eb:88:a8:2b:38:1e:2a:81:f9:51:c8:a3:2a:96:b4:
6f:3f:5e:0f:14:df:3f:0c:5a:08:0e:72:3e:a8:b2:ca:89:01:
7d:4f:40:8d:eb:f7:d9:e9:1c:79:9d:18:54:39:f6:64:d6:88:
9e:73:ab:ce:97:f2:bc:3b:e0:dc:97:ac:54:6f:eb:ed:0a:6d:
7a:42:90:69:d6:64:37:d3:de:38:0f:ab:9e:59:bd:6c:42:be:
e4:4f:3e:4c:b4:2b:cc:c7:0b:bb:c7:19:39:06:4d:e9:46:b7:
9f:b5:1c:c7:30:49:26:36:60:fb:d3:27:84:9a:ac:4c:cd:88:
6a:d4:a6:6a:e6:ee:74:fb:d3:15:c4:3c:be:e6:ff:d6:20:5a:
12:c0:44:3a:c7:89:b6:b8:78:e5:90:dd:f1:cd:0e:c7:4f:e5:
bc:f7:1d:72:97:4a:d1:12:09:83:c4:4d:8f:e8:8c:a9:58:72:
d2:29:0f:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijjjZSGBbl9TtKL49Uo5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjUwMTAxMTU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjhjYTYxMjMzMmMyNjFiNTc5MWMwMDllODZlZTQ1NjcyMjE0ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRfQBw7NJvt+baG8gB81xJvgx7qC
4szmAMLwDDimBp6Jk7/EyWljK89/7XTLOntopdDS4dXV0s8iuohXq/2LIBBGPqaV
qNzAs/k3XtY38BZeHyiYLBJR6eVRIs4gYyM7myRSPPZxeArvH57m+LpzNFuaQwv+
0/JZNbmV2Yu5FDdiG26bSyWpgquR5U7iaQjaH3wOecWiBZfsKAjV84/2wMKWc28s
qrqQq+PGdhtO2PoNVnu6UZ+uuWIesjNbTLT6Yb7ZrXJqFsPjKSuUqkKpyR6GvZRG
YV6xzcDGbKY1USFkAufAzTp5lBJj/IL2ZZyfmm/a0Mag1qti2H6QNBpiZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGuMphIzLCYbV5HACehu5FZyIU2MMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvYTR5bUVqTXNKaHRYa2NBSjZHN2tWbkloVFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsDW0AwQA
uc8CMA0GCSqGSIb3DQEBCwUAA4IBAQBEJAJFdR/Aj9y/TrM4fnsQloREkbpkDh5z
L55jfk20Wjy2UioSrhEgvpMCTAcnu0hsK9ytYzrDMZJh2DJV/gInHnWVEdLmDuM7
7l3riKgrOB4qgflRyKMqlrRvP14PFN8/DFoIDnI+qLLKiQF9T0CN6/fZ6Rx5nRhU
OfZk1oiec6vOl/K8O+Dcl6xUb+vtCm16QpBp1mQ30944D6ueWb1sQr7kTz5MtCvM
xwu7xxk5Bk3pRreftRzHMEkmNmD70yeEmqxMzYhq1KZq5u50+9MVxDy+5v/WIFoS
wEQ6x4m2uHjlkN3xzQ7HT+W89x1yl0rREgmDxE2P6IypWHLSKQ/q
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:48:46 2025 by rpki-client on console.sobornost.net