Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/6qhp5vwZ8p1XWEkHrAMyfBZ0C0g.roa
File: 6qhp5vwZ8p1XWEkHrAMyfBZ0C0g.roa (raw, json)
Hash identifier: 0m0+rWitIg/f9VuIjl3Rs/guFd3w09/gqRrViMamRLQ=
Subject key identifier: EA:A8:69:E6:FC:19:F2:9D:57:58:49:07:AC:03:32:7C:16:74:0B:48
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019425FDB9439CA75896A7272632CD4C63BB
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/6qhp5vwZ8p1XWEkHrAMyfBZ0C0g.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 766
IP address blocks: 130.206.0.0/16 maxlen: 16
158.99.0.0/16 maxlen: 16
185.205.148.0/22 maxlen: 22
192.148.201.0/24 maxlen: 24
192.148.202.0/23 maxlen: 23
192.148.204.0/22 maxlen: 22
192.187.24.0/23 maxlen: 23
193.144.0.0/14 maxlen: 14
212.128.0.0/18 maxlen: 18
212.128.64.0/19 maxlen: 19
212.128.64.0/20 maxlen: 20
212.128.80.0/21 maxlen: 21
212.128.128.0/17 maxlen: 17
2001:720::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b9:43:9c:a7:58:96:a7:27:26:32:cd:4c:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaa869e6fc19f29d57584907ac03327c16740b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:16:a5:88:07:d9:b4:a0:fc:30:83:e3:4f:
e0:c3:2c:7d:d2:37:c9:58:52:fd:ca:2c:13:71:90:
00:a8:3e:53:7c:55:a4:ff:79:91:2b:c1:47:29:48:
8f:45:93:dd:45:b6:13:ee:0e:85:76:93:dc:fc:f0:
0e:3f:93:96:5a:b4:4b:69:f4:05:4f:60:f5:a9:77:
15:f9:a2:36:35:e1:59:ca:aa:fb:8a:7d:ef:11:93:
2b:4f:6d:7c:3d:4b:1c:28:ed:c0:ea:6e:90:b0:75:
6e:f9:c1:52:c3:62:9a:c2:f3:6d:9a:65:d6:f6:f7:
a6:14:ec:c4:8c:0e:c9:81:0e:74:4b:99:b0:19:30:
48:8b:c0:47:df:01:47:a7:39:5e:8c:cd:10:88:83:
cb:23:4a:b2:50:5c:8c:df:9c:dd:42:0d:5c:7d:45:
85:6c:89:54:61:d5:4a:26:33:9b:74:90:f5:f7:b8:
16:03:14:87:88:0a:bf:a1:be:76:4e:aa:7b:4a:48:
b8:2f:e9:57:46:6f:a5:a4:a1:b1:02:39:c5:be:ea:
fb:32:c7:a4:f3:72:15:0f:21:ff:24:14:0c:33:c4:
46:df:82:00:50:b5:25:ba:02:e3:6a:1f:48:0c:db:
ee:94:e1:e1:89:f0:a9:ab:29:5c:f5:f2:8a:a2:e3:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:69:E6:FC:19:F2:9D:57:58:49:07:AC:03:32:7C:16:74:0B:48
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/6qhp5vwZ8p1XWEkHrAMyfBZ0C0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.206.0.0/16
158.99.0.0/16
185.205.148.0/22
192.148.201.0-192.148.207.255
192.187.24.0/23
193.144.0.0/14
212.128.0.0-212.128.95.255
212.128.128.0/17
IPv6:
2001:720::/32
Signature Algorithm: sha256WithRSAEncryption
21:45:0c:80:fa:65:43:c3:c0:8f:c3:c4:78:8a:3a:c2:c3:fd:
f2:ce:ea:04:39:00:f8:4e:34:52:6a:c4:7b:8a:3a:f8:6f:dc:
07:fb:cf:4d:81:d8:e9:e9:0a:1e:25:41:75:04:dd:68:f1:34:
91:f2:11:22:9a:f1:fc:7f:b9:bc:f0:15:39:ba:1d:72:e9:1f:
6a:96:01:a1:9f:6c:85:48:64:54:14:85:cc:c1:a5:f6:d9:67:
93:ff:c5:88:62:2d:b1:0b:75:f5:c9:1a:18:66:40:7c:0a:f7:
c8:0e:e6:9f:c9:13:e3:ce:c7:cc:92:e6:c3:90:c7:09:21:ff:
60:4b:d0:3a:e4:84:7b:7d:29:65:45:cb:6b:a2:c1:67:08:55:
2a:a3:f1:11:b3:ba:9e:fc:40:a2:f6:b9:4d:a9:36:ff:ad:55:
aa:d7:69:dd:5d:64:39:38:fb:d2:00:3a:5b:e2:3e:da:e7:e0:
49:b2:6f:90:aa:0f:40:a8:06:c6:6d:68:6f:e4:11:0a:f6:53:
d4:fe:e6:cd:d8:50:96:b1:de:7f:57:7a:2b:5a:43:4a:55:f2:
8a:e4:50:87:25:12:b0:09:e7:10:56:5a:25:f3:7b:76:84:11:
9f:0d:98:18:5d:3c:72:a3:cb:d3:07:59:7b:9f:bb:4c:5e:5c:
ac:94:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net