Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/7aXu2rhZmv4-BuCU66jCzo0ecAY.roa
File: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (raw, json)
Hash identifier: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=
Subject key identifier: ED:A5:EE:DA:B8:59:9A:FE:3E:06:E0:94:EB:A8:C2:CE:8D:1E:70:06
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 01942369996F20E4064DFD509764639F2D02
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/7aXu2rhZmv4-BuCU66jCzo0ecAY.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2108
IP address blocks: 31.147.0.0/16 maxlen: 16
82.132.0.0/17 maxlen: 17
161.53.0.0/16 maxlen: 16
193.198.0.0/16 maxlen: 16
2001:b68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:99:6f:20:e4:06:4d:fd:50:97:64:63:9f:2d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda5eedab8599afe3e06e094eba8c2ce8d1e7006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:ff:16:76:6c:aa:cb:be:6a:ac:22:ee:c8:
64:0c:9d:b0:ed:2e:cb:d3:a7:2d:f8:4d:30:19:d4:
a8:42:16:8f:aa:3f:09:94:a7:1a:ed:8c:16:c9:cc:
18:b7:81:6e:c1:2f:79:58:29:b5:73:4c:7b:13:ec:
40:e0:51:40:8d:e5:f7:53:bf:d2:cc:70:67:d1:02:
41:84:d7:e3:d2:c6:45:53:67:61:26:ea:f9:83:1a:
93:1b:a0:8e:a2:ba:00:2f:28:f3:3e:7d:61:15:35:
4c:55:81:9f:f6:d3:05:3f:74:7f:3d:41:a5:4b:08:
2b:e7:29:37:ea:f3:78:28:ed:cf:34:8f:72:e2:06:
1c:88:8e:40:d8:9f:b6:cf:3c:e7:1f:c3:6f:04:cb:
74:38:c7:7f:c5:1e:80:35:fd:87:36:b9:97:8f:e9:
22:70:56:2e:4e:9a:65:47:85:96:e5:68:d6:ce:0d:
f7:89:b8:b1:35:1c:53:80:15:d4:80:21:24:e5:71:
f9:c7:3e:7d:d1:a1:80:c3:99:91:94:5e:89:2a:67:
ef:e2:11:00:5f:c3:92:76:2a:0b:7a:c3:1c:e8:f5:
fe:35:ee:e4:c2:09:e4:0a:b5:e9:d7:1d:4d:a1:8a:
3a:de:64:60:43:05:43:51:9d:c9:06:51:0e:5f:e9:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:EE:DA:B8:59:9A:FE:3E:06:E0:94:EB:A8:C2:CE:8D:1E:70:06
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/7aXu2rhZmv4-BuCU66jCzo0ecAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.147.0.0/16
82.132.0.0/17
161.53.0.0/16
193.198.0.0/16
IPv6:
2001:b68::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ff:13:76:56:d5:66:a8:e2:9d:0f:5f:84:17:87:de:d6:71:
79:00:08:82:0f:c2:65:e0:46:f3:9b:b3:7a:b1:38:db:00:fd:
c6:e0:4e:26:63:2d:c8:fe:74:e9:13:0b:6a:90:e3:e9:fd:e5:
a4:91:9e:34:6b:f3:d9:31:d3:9e:56:2e:df:64:48:b5:ab:71:
e1:10:66:98:bd:23:d0:57:ca:9d:61:3c:09:1e:77:92:35:26:
70:d5:72:84:bf:0d:92:9a:6e:14:fd:2b:1d:f6:ec:3c:1d:e7:
c8:67:03:95:eb:bc:62:1c:10:64:84:fc:21:f8:47:fc:9b:f3:
1f:96:48:70:e5:e0:76:5c:e6:e3:ac:2d:a7:31:8f:db:f5:a3:
d9:4e:61:97:d1:35:f6:a9:12:40:f3:a0:0d:61:e8:06:19:39:
92:6f:06:45:f7:5c:92:a9:81:20:cd:fb:2d:2d:1b:7d:e4:81:
25:72:69:44:b8:6e:09:77:72:8f:c5:f1:36:27:d7:2d:33:44:
a8:75:5a:c3:42:e1:fe:69:8c:ca:8c:48:8f:81:02:ad:46:78:
c1:4b:c7:a3:07:15:37:8f:76:1f:d2:e2:e3:b2:68:06:95:f7:
fd:64:d8:a6:cb:54:db:de:e7:15:a6:b4:fa:e3:f4:78:2e:1a:
d7:e4:96:9f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQjaZlvIOQGTf1Ql2Rjny0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0
NmVlNmYwHhcNMjUwMTAxMTk0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE1ZWVkYWI4NTk5YWZlM2UwNmUwOTRlYmE4YzJjZThkMWU3MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ij/FnZsqsu+aqwi7shkDJ2w7S7L
06ct+E0wGdSoQhaPqj8JlKca7YwWycwYt4FuwS95WCm1c0x7E+xA4FFAjeX3U7/S
zHBn0QJBhNfj0sZFU2dhJur5gxqTG6COoroALyjzPn1hFTVMVYGf9tMFP3R/PUGl
Swgr5yk36vN4KO3PNI9y4gYciI5A2J+2zzznH8NvBMt0OMd/xR6ANf2HNrmXj+ki
cFYuTpplR4WW5WjWzg33ibixNRxTgBXUgCEk5XH5xz590aGAw5mRlF6JKmfv4hEA
X8OSdioLesMc6PX+Ne7kwgnkCrXp1x1NoYo63mRgQwVDUZ3JBlEOX+m3EQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFO2l7tq4WZr+PgbglOuows6NHnAGMB8GA1UdIwQY
MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct
Nzc5MTc1MmE5YzZlLzEvN2FYdTJyaFptdjQtQnVDVTY2akN6bzBlY0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl
LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAbBAIAATAVAwMAH5MDBAdS
hAADAwChNQMDAMHGMA0EAgACMAcDBQAgAQtoMA0GCSqGSIb3DQEBCwUAA4IBAQC0
/xN2VtVmqOKdD1+EF4fe1nF5AAiCD8Jl4Ebzm7N6sTjbAP3G4E4mYy3I/nTpEwtq
kOPp/eWkkZ40a/PZMdOeVi7fZEi1q3HhEGaYvSPQV8qdYTwJHneSNSZw1XKEvw2S
mm4U/Ssd9uw8HefIZwOV67xiHBBkhPwh+Ef8m/Mflkhw5eB2XObjrC2nMY/b9aPZ
TmGX0TX2qRJA86ANYegGGTmSbwZF91ySqYEgzfstLRt95IElcmlEuG4Jd3KPxfE2
J9ctM0SodVrDQuH+aYzKjEiPgQKtRnjBS8ejBxU3j3Yf0uLjsmgGlff9ZNimy1Tb
3ucVprT64/R4LhrX5Jaf
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net