Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/6L9DAlbkXK81Q7l3f78qPgHOMdg.roa
File: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (raw, json)
Hash identifier: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=
Subject key identifier: E8:BF:43:02:56:E4:5C:AF:35:43:B9:77:7F:BF:2A:3E:01:CE:31:D8
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 019422FB704E543C72D4B978D49508E16349
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/6L9DAlbkXK81Q7l3f78qPgHOMdg.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59869
IP address blocks: 185.91.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:70:4e:54:3c:72:d4:b9:78:d4:95:08:e1:63:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8bf430256e45caf3543b9777fbf2a3e01ce31d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:46:43:b1:b5:bd:f6:00:88:6b:6e:c0:ce:
44:d0:e5:3e:62:b3:dd:20:6d:62:93:42:80:73:3b:
ce:5d:03:5f:3f:79:f2:4e:5a:97:cb:5d:9e:5f:92:
a6:bf:26:d1:ce:ec:a5:9c:c9:ea:59:82:53:2e:fc:
52:5f:37:5a:4d:38:4d:d9:6c:8b:d1:e0:c3:3d:a5:
a6:14:3f:0a:95:fd:3f:ac:6a:9b:bf:c6:f2:d0:f4:
fa:4f:83:02:a1:45:27:ed:da:23:0e:2f:b4:52:73:
0d:b4:13:19:3b:b1:a2:ba:14:c0:3d:92:21:d4:27:
d6:65:42:0f:0c:f4:53:4f:a7:d1:10:b4:9a:ca:63:
ef:54:55:8b:af:22:b0:48:95:d9:d3:16:85:0f:25:
eb:e5:c6:eb:b2:19:31:0f:11:09:41:4b:77:3d:dd:
38:e0:6f:c5:f0:88:b2:c2:f1:18:32:83:94:fb:ee:
87:13:39:73:83:93:48:8b:3f:63:5d:f2:a3:4a:cf:
0f:56:52:83:29:13:96:c7:dc:71:44:bc:c2:08:3c:
ae:cf:5e:1d:98:66:c9:34:c2:cc:2c:9d:30:f6:88:
00:4c:b5:e5:74:df:95:89:fa:aa:70:62:08:05:78:
27:31:f7:4b:23:37:6c:c3:29:42:cd:bd:98:ed:ff:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:43:02:56:E4:5C:AF:35:43:B9:77:7F:BF:2A:3E:01:CE:31:D8
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/6L9DAlbkXK81Q7l3f78qPgHOMdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.142.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ba:97:15:a3:3f:33:f2:f2:eb:98:3e:b3:60:90:73:f9:28:
51:b5:75:00:71:39:7f:4b:90:a0:05:e4:98:64:f4:ed:69:50:
0c:56:8c:3f:51:f9:02:55:ee:86:44:0f:07:a1:77:4e:a1:84:
75:e5:a2:1e:4e:4a:a4:a2:8e:d2:38:8f:38:74:bb:de:d2:9c:
1f:85:55:4a:32:ee:fc:ad:e1:08:73:bf:c9:f2:4f:0b:56:ce:
bb:d2:99:47:94:d5:a5:63:88:e7:f6:8a:81:8d:a4:fc:21:b1:
3f:ec:93:7b:03:1f:8e:d8:9d:f7:8d:01:a4:c3:31:69:a6:ec:
77:d8:6d:97:99:11:79:e5:4f:d3:e3:e5:eb:8c:72:08:8c:15:
28:5f:66:08:b2:2b:10:a7:bb:cb:ef:08:e6:9d:0b:88:ce:a3:
66:29:21:76:d8:d0:4b:3f:91:18:b7:bd:44:a0:39:05:2d:95:
f8:7a:f1:b7:94:95:6e:44:ec:13:4e:4c:9d:53:83:d2:44:38:
03:a8:92:2a:a0:e7:02:a9:61:ad:d5:4e:0d:5e:57:6a:b6:59:
d6:77:9a:dd:97:e3:ee:8a:e1:c3:d3:d2:15:0a:f3:67:41:99:
8b:6f:73:b2:41:df:d3:85:50:59:3b:ab:9d:af:46:2b:0e:97:
c6:d2:8f:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+3BOVDxy1Ll41JUI4WNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi
YmZmMjAwHhcNMjUwMTAxMTc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJmNDMwMjU2ZTQ1Y2FmMzU0M2I5Nzc3ZmJmMmEzZTAxY2UzMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMhGQ7G1vfYAiGtuwM5E0OU+YrPd
IG1ik0KAczvOXQNfP3nyTlqXy12eX5KmvybRzuylnMnqWYJTLvxSXzdaTThN2WyL
0eDDPaWmFD8Klf0/rGqbv8by0PT6T4MCoUUn7dojDi+0UnMNtBMZO7GiuhTAPZIh
1CfWZUIPDPRTT6fRELSaymPvVFWLryKwSJXZ0xaFDyXr5cbrshkxDxEJQUt3Pd04
4G/F8IiywvEYMoOU++6HEzlzg5NIiz9jXfKjSs8PVlKDKROWx9xxRLzCCDyuz14d
mGbJNMLMLJ0w9ogATLXldN+VifqqcGIIBXgnMfdLIzdswylCzb2Y7f+ErQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOi/QwJW5FyvNUO5d3+/Kj4BzjHYMB8GA1UdIwQY
MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt
OGQ4MWZkYzZmMTcwLzEvNkw5REFsYmtYSzgxUTdsM2Y3OHFQZ0hPTWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw
LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVuOMA0G
CSqGSIb3DQEBCwUAA4IBAQAJupcVoz8z8vLrmD6zYJBz+ShRtXUAcTl/S5CgBeSY
ZPTtaVAMVow/UfkCVe6GRA8HoXdOoYR15aIeTkqkoo7SOI84dLve0pwfhVVKMu78
reEIc7/J8k8LVs670plHlNWlY4jn9oqBjaT8IbE/7JN7Ax+O2J33jQGkwzFppux3
2G2XmRF55U/T4+XrjHIIjBUoX2YIsisQp7vL7wjmnQuIzqNmKSF22NBLP5EYt71E
oDkFLZX4evG3lJVuROwTTkydU4PSRDgDqJIqoOcCqWGt1U4NXldqtlnWd5rdl+Pu
iuHD09IVCvNnQZmLb3OyQd/ThVBZO6udr0YrDpfG0o+j
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net