Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/6FGsGLFn7A73WCT0SPiFHEX5nI8.roa
File: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (raw, json)
Hash identifier: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=
Subject key identifier: E8:51:AC:18:B1:67:EC:0E:F7:58:24:F4:48:F8:85:1C:45:F9:9C:8F
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019427B5F8DC90E5F20BC46F7AB3D8BDCAED
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/6FGsGLFn7A73WCT0SPiFHEX5nI8.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7138
IP address blocks: 185.14.84.0/22 maxlen: 22
185.14.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f8:dc:90:e5:f2:0b:c4:6f:7a:b3:d8:bd:ca:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e851ac18b167ec0ef75824f448f8851c45f99c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:77:f8:7b:42:3a:6f:ab:5c:7f:2a:37:12:
4b:d3:c0:2e:bb:bd:2e:6e:5f:77:00:e5:d4:d2:19:
97:e6:ea:20:1c:6e:32:38:f8:8e:5f:f5:09:b7:71:
2c:9b:03:2e:cf:d6:e1:95:5a:3a:4c:16:80:4a:ec:
2b:21:99:e3:dd:ca:59:41:0f:1d:1b:c5:31:f8:0e:
45:1a:61:39:1e:4c:75:3e:c0:9b:bb:26:9c:54:c6:
94:96:2f:62:85:8f:05:c4:f9:dc:d3:6d:0d:7e:75:
6c:50:7e:4e:54:06:6c:6b:89:15:b2:7e:dc:e5:cc:
4e:8f:17:e4:6f:1c:76:7a:03:ad:d8:09:22:c7:ac:
6e:71:0f:ce:55:46:34:02:c2:30:47:59:db:0a:78:
96:73:85:01:20:4c:36:7b:74:3f:5f:05:3e:99:f6:
06:2a:c8:f5:6f:7b:7d:a2:31:b4:40:62:1c:40:e6:
fd:d1:75:b5:2c:74:e6:7a:6d:6d:1c:c1:7d:05:d6:
da:ce:3e:5c:68:2a:3e:65:35:c1:e9:c7:34:ea:45:
5b:85:44:6e:68:19:c7:2b:3a:81:06:ad:3a:2a:0c:
57:62:a1:d7:cf:b8:09:ad:2f:bb:1d:e8:ed:35:85:
f8:00:d8:6c:49:02:08:22:44:3c:99:cc:53:67:f5:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:AC:18:B1:67:EC:0E:F7:58:24:F4:48:F8:85:1C:45:F9:9C:8F
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/6FGsGLFn7A73WCT0SPiFHEX5nI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ba:3b:a2:db:c0:51:34:cf:20:37:b1:09:ab:bb:02:55:95:
b7:d1:2c:5f:34:c1:ee:7e:2f:f4:8f:6c:01:f9:97:b4:4e:99:
3e:b1:38:66:31:ce:36:50:9a:2b:40:78:e9:4e:7d:9f:0e:7b:
f9:f2:41:6a:d9:1c:9b:88:be:c0:9c:e7:95:a9:92:3d:ad:ea:
45:3f:1b:1a:d5:64:57:15:c4:32:3f:33:f0:12:ac:28:93:33:
dc:cb:2d:92:6b:b2:15:ea:52:f6:d5:b3:d6:6a:8a:30:fe:7b:
54:c5:6d:2d:19:0a:2b:f5:37:6a:5c:48:61:5c:7a:00:76:66:
c1:4b:74:45:d9:55:26:ba:f6:be:1f:95:a1:8b:c7:d2:0e:f1:
cb:79:2c:26:54:2a:a7:02:86:d9:bb:95:4d:98:7a:18:7e:9e:
fd:7a:e0:0d:64:83:2d:ae:6a:0f:34:cf:c2:09:13:55:2b:0e:
6c:17:61:ab:d3:0a:26:a4:bc:bb:70:94:68:85:b8:1b:08:d1:
b1:65:de:d5:64:98:e7:d7:5c:8f:c0:95:a3:47:77:a9:47:62:
ea:d2:38:a0:b8:7d:3d:58:9e:68:27:8d:f3:15:71:02:7a:46:
38:52:78:63:fe:ab:1f:08:8e:4c:5a:01:45:04:7d:28:fa:f3:
be:b5:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net