Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/6Q6FQqkQjr0GW7raN5K7ctLfQq8.roa
File: 6Q6FQqkQjr0GW7raN5K7ctLfQq8.roa (raw, json)
Hash identifier: TB0wXuzRpMvJVDmYlghUojEHc873V1+6Bcl9jnqn5tc=
Subject key identifier: E9:0E:85:42:A9:10:8E:BD:06:5B:BA:DA:37:92:BB:72:D2:DF:42:AF
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 019420D621990AC659AF94AED7523F24F5E7
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/6Q6FQqkQjr0GW7raN5K7ctLfQq8.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44932
IP address blocks: 91.228.132.0/23 maxlen: 24
91.229.46.0/23 maxlen: 24
185.80.198.0/23 maxlen: 24
185.147.176.0/22 maxlen: 24
185.147.176.0/24 maxlen: 24
185.147.177.0/24 maxlen: 24
185.147.178.0/24 maxlen: 24
185.147.179.0/24 maxlen: 24
188.209.116.0/22 maxlen: 24
188.209.116.0/24 maxlen: 24
188.209.117.0/24 maxlen: 24
188.209.118.0/24 maxlen: 24
188.209.119.0/24 maxlen: 24
2a0b:1fc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:21:99:0a:c6:59:af:94:ae:d7:52:3f:24:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e90e8542a9108ebd065bbada3792bb72d2df42af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:4f:90:a8:61:e1:f4:b2:7c:ab:5d:f3:07:
95:3e:ee:69:08:e2:e3:60:a8:de:76:ed:b3:eb:69:
c2:05:cc:b8:0a:f7:64:6c:d6:c4:5c:c7:8f:37:0c:
b4:de:38:17:80:78:fb:0f:eb:7f:39:bc:cc:30:8d:
98:b1:0b:b0:b3:69:03:25:2b:4e:38:91:02:dc:d6:
66:bb:20:26:44:d5:6e:f0:1c:e9:e5:25:40:34:23:
91:8d:26:d9:1c:63:9b:12:4d:cd:81:0c:bf:30:2e:
48:6f:d8:a2:f9:04:0f:c4:53:38:bf:41:4d:3e:77:
26:b9:4f:59:7b:8b:f2:e1:4c:1f:14:77:04:4b:06:
77:ab:70:9b:e9:e9:10:eb:af:d1:a6:ef:4a:be:17:
4c:ad:c1:39:2b:88:83:6b:c9:24:c6:03:f4:ad:b2:
6e:ef:ee:7e:17:e2:05:1e:6a:a5:0c:02:e8:55:9a:
f0:ba:bc:a6:dd:48:b1:5f:d9:25:10:af:f5:08:cd:
c5:04:a0:9e:dd:a3:b5:39:65:ce:c3:b9:8b:bd:c3:
39:62:84:85:fb:d9:97:4d:62:af:3d:f1:c0:fc:c4:
22:59:fe:2f:13:fd:2f:37:b1:bf:c1:cf:7c:2f:27:
56:44:c0:c8:1a:8a:df:25:b2:85:4a:1f:d9:ca:7c:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0E:85:42:A9:10:8E:BD:06:5B:BA:DA:37:92:BB:72:D2:DF:42:AF
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/6Q6FQqkQjr0GW7raN5K7ctLfQq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.132.0/23
91.229.46.0/23
185.80.198.0/23
185.147.176.0/22
188.209.116.0/22
IPv6:
2a0b:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
29:31:d7:30:f3:be:25:e5:19:6d:1a:8c:0e:ca:b8:22:6b:02:
7d:5f:22:40:25:fe:87:54:76:4e:09:5f:b0:66:72:08:47:f3:
27:19:cb:38:af:cf:7a:fc:b6:0e:b1:e4:58:28:36:27:e9:6b:
83:2c:15:62:f1:7c:b0:02:06:f2:85:93:e1:f8:eb:ee:73:ac:
b6:45:00:d3:1d:b3:ca:7b:16:a5:50:e4:3b:15:f7:2b:9e:b5:
73:07:c2:14:fa:55:c4:57:94:43:1f:59:6b:c0:13:63:24:86:
43:bb:a5:2b:2c:e2:2a:25:36:9c:2d:cc:dd:81:cc:a9:bd:db:
ab:d4:6d:7b:96:b0:17:b2:7b:0e:5e:bf:20:13:94:10:fd:4c:
32:02:76:d0:f9:f2:77:53:08:34:b4:46:4e:0e:fc:69:06:a8:
24:86:5f:9b:32:a1:c2:0d:81:a1:29:99:32:5c:66:c4:02:4b:
4d:76:e8:c2:5e:64:6f:99:24:9b:2e:eb:ff:6f:ad:f5:e1:8b:
1c:0e:02:ed:a9:8d:14:26:51:c5:f5:7c:93:3e:6b:31:01:23:
1f:41:ed:25:ab:e8:06:98:60:74:0c:4d:5e:ac:cd:c8:91:ac:
ff:2c:9f:35:00:a3:5e:ae:ab:51:b6:2e:2b:72:1f:7f:be:25:
a9:f6:76:9b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQg1iGZCsZZr5Su11I/JPXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjUwMTAxMDc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTBlODU0MmE5MTA4ZWJkMDY1YmJhZGEzNzkyYmI3MmQyZGY0MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv5PkKhh4fSyfKtd8weVPu5pCOLj
YKjedu2z62nCBcy4CvdkbNbEXMePNwy03jgXgHj7D+t/ObzMMI2YsQuws2kDJStO
OJEC3NZmuyAmRNVu8Bzp5SVANCORjSbZHGObEk3NgQy/MC5Ib9ii+QQPxFM4v0FN
PncmuU9Ze4vy4UwfFHcESwZ3q3Cb6ekQ66/Rpu9KvhdMrcE5K4iDa8kkxgP0rbJu
7+5+F+IFHmqlDALoVZrwurym3UixX9klEK/1CM3FBKCe3aO1OWXOw7mLvcM5YoSF
+9mXTWKvPfHA/MQiWf4vE/0vN7G/wc98LydWRMDIGorfJbKFSh/Zynzl8QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFOkOhUKpEI69Blu62jeSu3LS30KvMB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvNlE2RlFxa1FqcjBHVzdyYU41SzdjdExmUXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBW+SEAwQB
W+UuAwQBuVDGAwQCuZOwAwQCvNF0MA0EAgACMAcDBQMqCx/AMA0GCSqGSIb3DQEB
CwUAA4IBAQApMdcw874l5RltGowOyrgiawJ9XyJAJf6HVHZOCV+wZnIIR/MnGcs4
r896/LYOseRYKDYn6WuDLBVi8XywAgbyhZPh+Ovuc6y2RQDTHbPKexalUOQ7Ffcr
nrVzB8IU+lXEV5RDH1lrwBNjJIZDu6UrLOIqJTacLczdgcypvdur1G17lrAXsnsO
Xr8gE5QQ/UwyAnbQ+fJ3Uwg0tEZODvxpBqgkhl+bMqHCDYGhKZkyXGbEAktNdujC
XmRvmSSbLuv/b6314YscDgLtqY0UJlHF9XyTPmsxASMfQe0lq+gGmGB0DE1erM3I
kaz/LJ81AKNerqtRti4rch9/viWp9nab
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:48 2025 by rpki-client on console.sobornost.net