Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/6d81q_lbBBvU-iMaj2PmLykzsqc.roa
File: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (raw, json)
Hash identifier: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=
Subject key identifier: E9:DF:35:AB:F9:5B:04:1B:D4:FA:23:1A:8F:63:E6:2F:29:33:B2:A7
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 019425FD078E28EF837027D6328668EEFD22
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/6d81q_lbBBvU-iMaj2PmLykzsqc.roa
Signing time: Thu 02 Jan 2025 07:48:47 +0000
ROA not before: Thu 02 Jan 2025 07:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39405
IP address blocks: 185.146.41.0/24 maxlen: 24
185.146.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:07:8e:28:ef:83:70:27:d6:32:86:68:ee:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Jan 2 07:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9df35abf95b041bd4fa231a8f63e62f2933b2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:f1:ce:03:aa:5e:2e:c4:86:3e:39:3e:cf:
e4:e2:01:5a:2d:54:bd:ed:33:fe:15:fc:02:ce:1b:
b9:0b:64:64:3a:d3:48:cc:49:2c:4c:67:47:29:63:
1e:79:21:58:fd:3d:d9:3b:46:db:38:63:6d:20:7f:
3b:ed:83:e8:4b:3b:50:76:61:2f:0b:84:a6:13:eb:
f4:f9:69:d6:e5:2a:67:e1:4e:7a:d4:08:70:6c:c6:
ae:17:44:76:57:f4:ad:47:45:b8:c8:12:91:4a:44:
9d:9e:d8:07:82:4e:47:32:e5:8c:79:25:88:21:36:
ce:99:06:30:c5:5d:2f:76:79:9a:68:fc:d0:ae:9f:
dd:1a:80:f3:6d:c2:88:78:2e:e8:2d:47:5f:1b:f8:
ab:a2:27:85:1e:d1:db:cc:c6:dc:84:40:d6:39:e9:
5a:90:31:02:6d:1b:51:62:24:c2:ef:02:4a:29:76:
09:a8:0f:34:9e:ce:cb:c8:b7:c5:45:c2:48:a7:16:
6f:25:15:70:78:33:54:72:99:66:13:30:64:9c:44:
c5:53:3c:b7:7a:39:b7:55:13:29:81:7e:e4:4e:dd:
f6:33:ef:5f:97:f0:17:3c:14:d2:a8:25:54:ef:59:
70:07:dc:ba:ca:37:0b:66:5c:81:d8:d9:39:87:17:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:35:AB:F9:5B:04:1B:D4:FA:23:1A:8F:63:E6:2F:29:33:B2:A7
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/6d81q_lbBBvU-iMaj2PmLykzsqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.41.0-185.146.42.255
Signature Algorithm: sha256WithRSAEncryption
03:e6:2e:ad:96:7f:f4:89:d5:e9:19:79:04:36:98:92:37:4e:
8c:2b:c2:fd:75:9d:8b:79:6c:34:6e:27:c1:eb:e8:58:9c:6a:
96:b4:eb:e0:ab:24:23:6b:c3:98:e9:82:47:b8:76:4c:7c:b2:
c9:95:c0:67:0e:e4:4b:25:f9:7f:4c:74:bb:d9:03:9d:55:4c:
49:47:e9:41:17:c5:4a:4e:aa:58:6e:23:ed:78:f0:13:84:0c:
8b:fe:1d:bf:32:d8:18:c9:b7:e9:1f:f2:ea:50:54:c1:59:e2:
22:55:e7:1d:6c:86:2b:34:d0:98:d1:66:49:94:42:01:26:10:
fd:b5:d3:e5:9b:2e:70:78:59:b8:14:89:9f:7d:dd:67:d3:f2:
7a:f0:61:99:1a:02:2e:bb:7b:57:94:e2:82:0c:e5:5c:9b:a0:
25:08:58:a7:66:46:48:c9:cd:d3:81:4d:f7:fa:2c:dd:1a:6d:
9f:65:95:d1:62:c6:4d:a8:15:f5:58:ab:1a:e3:ce:04:0a:de:
bd:56:09:df:fb:63:e8:6a:3a:c0:87:9e:17:53:04:c3:37:19:
71:eb:e8:c5:45:3f:ef:d3:6b:51:c6:b9:40:0c:1b:ea:22:5a:
3f:3c:90:ec:2a:05:9b:f3:83:03:8e:fb:e0:74:3b:01:8a:12:
56:a9:20:96
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQl/QeOKO+DcCfWMoZo7v0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2Njg4YWU5NjMyM2MxZmNmYWI1NGIyOTQ1NTczOTdiNDli
MDNiYzcwHhcNMjUwMTAyMDc0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWRmMzVhYmY5NWIwNDFiZDRmYTIzMWE4ZjYzZTYyZjI5MzNiMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SLxzgOqXi7Ehj45Ps/k4gFaLVS9
7TP+FfwCzhu5C2RkOtNIzEksTGdHKWMeeSFY/T3ZO0bbOGNtIH877YPoSztQdmEv
C4SmE+v0+WnW5Spn4U561AhwbMauF0R2V/StR0W4yBKRSkSdntgHgk5HMuWMeSWI
ITbOmQYwxV0vdnmaaPzQrp/dGoDzbcKIeC7oLUdfG/iroieFHtHbzMbchEDWOela
kDECbRtRYiTC7wJKKXYJqA80ns7LyLfFRcJIpxZvJRVweDNUcplmEzBknETFUzy3
ejm3VRMpgX7kTt32M+9fl/AXPBTSqCVU71lwB9y6yjcLZlyB2Nk5hxdeNwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOnfNav5WwQb1PojGo9j5i8pM7KnMB8GA1UdIwQY
MBaAFOZoiuljI8H8+rVLKUVXOXtJsDvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5Zjgt
MGExZWYwZWMwNTc4LzEvNmQ4MXFfbGJCQnZVLWlNYWoyUG1MeWt6c3FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5ZjgtMGExZWYwZWMwNTc4
LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5kikD
BAC5kiowDQYJKoZIhvcNAQELBQADggEBAAPmLq2Wf/SJ1ekZeQQ2mJI3Towrwv11
nYt5bDRuJ8Hr6Ficapa06+CrJCNrw5jpgke4dkx8ssmVwGcO5Esl+X9MdLvZA51V
TElH6UEXxUpOqlhuI+148BOEDIv+Hb8y2BjJt+kf8upQVMFZ4iJV5x1shis00JjR
ZkmUQgEmEP210+WbLnB4WbgUiZ993WfT8nrwYZkaAi67e1eU4oIM5VyboCUIWKdm
RkjJzdOBTff6LN0abZ9lldFixk2oFfVYqxrjzgQK3r1WCd/7Y+hqOsCHnhdTBMM3
GXHr6MVFP+/Ta1HGuUAMG+oiWj88kOwqBZvzgwOO++B0OwGKElapIJY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net