Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/6MomF24SoPaNk6ERP73wy8mqx3c.roa
File: 6MomF24SoPaNk6ERP73wy8mqx3c.roa (raw, json)
Hash identifier: IjQTHFK2Z40w4CuSFshJCdouXIm82jCIjL5J78qv4kA=
Subject key identifier: E8:CA:26:17:6E:12:A0:F6:8D:93:A1:11:3F:BD:F0:CB:C9:AA:C7:77
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0194221F3DAFB5FB7B2E2A9CCBAA29CC28EE
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/6MomF24SoPaNk6ERP73wy8mqx3c.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202933
IP address blocks: 91.217.213.0/24 maxlen: 24
185.167.128.0/22 maxlen: 24
185.175.120.0/22 maxlen: 22
185.197.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3d:af:b5:fb:7b:2e:2a:9c:cb:aa:29:cc:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ca26176e12a0f68d93a1113fbdf0cbc9aac777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:d3:fa:5d:93:ab:cf:7e:4b:b1:3c:28:a0:
be:3a:e6:4e:81:fd:9a:02:94:aa:b4:d1:7e:ec:d5:
de:80:00:c1:72:62:a7:9d:74:67:66:24:2d:95:25:
6d:ed:be:93:a1:52:28:02:74:41:55:43:37:cb:62:
70:31:bc:04:a8:96:c0:95:12:fa:93:7d:40:5c:1a:
ce:76:61:11:9f:44:e5:32:43:f0:52:4b:e1:44:05:
0a:0e:d5:63:32:bb:81:9d:2d:e2:e9:3e:d3:ea:64:
32:53:8a:d0:c9:90:8c:43:b8:6b:9e:7a:9b:79:62:
63:b3:35:1d:43:24:2e:0a:7d:d1:08:41:6e:7e:c0:
6b:19:fe:b3:fc:4d:16:6c:5a:03:b1:e3:7d:ac:18:
0d:32:a7:96:6f:58:8e:6e:0d:49:b1:a2:60:a2:88:
03:b3:b2:77:09:34:74:b6:a9:a8:f1:1f:bb:ec:14:
d7:75:87:d0:bc:06:03:c5:5e:b6:41:c1:a3:51:de:
03:1e:35:dd:45:11:4a:8c:c4:40:be:e0:91:b5:fe:
ed:a4:f9:55:12:65:04:76:a4:df:af:51:b8:71:43:
0f:f2:94:dd:b7:8c:3e:08:aa:65:2c:a4:4a:71:be:
13:ce:ce:ec:09:20:d6:f3:b8:17:7e:d5:e3:3e:d8:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:26:17:6E:12:A0:F6:8D:93:A1:11:3F:BD:F0:CB:C9:AA:C7:77
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/6MomF24SoPaNk6ERP73wy8mqx3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.213.0/24
185.167.128.0/22
185.175.120.0/22
185.197.156.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b9:f5:81:d3:cd:b6:fc:49:30:6e:d4:f1:c6:40:a4:03:14:
24:37:48:66:3c:c3:56:d8:14:88:8c:ef:22:4f:56:95:c6:ae:
47:fe:e5:91:74:85:8f:f7:32:96:03:a0:1d:83:99:43:5e:19:
47:e7:2b:d4:02:da:a9:af:9d:1e:9d:ce:04:44:35:56:d6:32:
74:37:ae:8b:92:45:f6:0c:91:5e:88:6d:91:3c:ae:6f:85:66:
8a:de:00:49:e4:11:4a:d4:2c:80:bc:c8:1c:e0:64:0b:86:db:
f6:af:1f:f9:2f:46:a5:ee:a5:c4:8d:35:00:be:b0:93:bc:a3:
2d:95:0d:c0:b5:6c:58:5f:0e:55:3d:bb:f2:16:15:31:20:36:
e4:b7:5d:de:2b:07:71:d4:7b:3d:5e:06:15:58:af:6f:66:ea:
36:c0:8e:94:ca:fc:1f:a2:1b:91:11:7f:f0:0c:40:50:10:7a:
8d:0d:66:da:d6:72:41:0f:7f:66:47:3e:1f:3b:6c:4a:d5:ec:
0b:66:fb:48:26:61:63:54:59:e6:c9:1b:e4:75:69:56:dc:c6:
0b:f5:5a:6d:5b:d1:f2:fb:0a:60:d5:be:6e:9a:86:10:7b:3f:
2f:78:f5:50:49:95:48:5a:20:d4:ca:73:e8:e1:62:12:bd:11:
f8:5b:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net