Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa
File: q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa (raw, json)
Hash identifier: cfokvWEVeqwKPxGczy1eXytgUST2AAuJ7ts04BX5rq4=
Subject key identifier: AB:AF:BD:1B:76:82:4F:96:60:1A:59:2F:1E:32:05:CF:96:C0:D3:88
Certificate issuer: /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial: 0194236A37902EAE2B5A2E5E81C2FD1F9FD3
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197515
IP address blocks: 91.214.124.0/24 maxlen: 24
185.195.192.0/22 maxlen: 24
2a13:3900::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:37:90:2e:ae:2b:5a:2e:5e:81:c2:fd:1f:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abafbd1b76824f96601a592f1e3205cf96c0d388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:43:e9:aa:62:be:d6:6e:c3:41:73:7f:61:
f9:b8:c9:00:67:d8:44:35:ef:b8:c5:e4:80:74:24:
73:0d:e8:c2:b9:b3:8a:df:c4:a8:28:3f:1b:fb:c6:
fd:99:cc:16:a0:40:b9:d8:c3:4f:12:af:51:bc:d2:
ec:7a:78:53:bf:87:c9:5e:27:20:c4:7c:bb:b1:a5:
cb:95:69:1e:7e:4c:13:ad:62:87:f0:f5:c3:7a:c3:
bc:1b:48:18:de:a2:38:e9:c4:d8:46:28:65:66:a2:
97:a3:c2:c6:e9:b8:c5:65:6c:3c:7a:39:a8:9e:77:
f4:73:d3:be:bd:c0:66:1f:7b:5d:6d:95:81:12:48:
7f:4e:56:90:73:ce:49:a7:52:17:47:31:02:29:b9:
33:a3:c3:f0:12:fb:57:ff:37:d0:be:5a:ab:82:2d:
cb:18:60:c8:9b:9b:51:69:4d:70:92:7e:42:e2:51:
53:cb:6e:9e:d0:c2:11:19:3c:15:76:fe:90:0b:2c:
fb:95:98:bc:aa:28:42:f2:66:00:24:2d:26:55:14:
9b:2b:6d:ed:9c:1a:a0:48:9f:d4:d3:27:4f:7e:bb:
65:d4:fb:c8:78:0c:7b:5a:70:fa:01:e9:7f:fa:36:
2c:46:0a:2a:2b:31:c2:87:21:13:29:0c:ba:c9:bf:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:BD:1B:76:82:4F:96:60:1A:59:2F:1E:32:05:CF:96:C0:D3:88
X509v3 Authority Key Identifier:
keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/q6-9G3aCT5ZgGlkvHjIFz5bA04g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.124.0/24
185.195.192.0/22
IPv6:
2a13:3900::/29
Signature Algorithm: sha256WithRSAEncryption
19:c5:bb:f4:6b:74:30:d3:63:30:e7:4e:96:a1:ad:34:a8:c2:
e9:de:c1:56:51:8d:05:42:2b:22:2e:4f:ba:58:27:42:77:dc:
96:bc:61:65:a4:dc:7e:63:5e:23:e9:09:0f:4e:a7:36:4d:ac:
dc:84:5b:7e:8e:6b:6c:d5:b4:89:4d:a5:21:97:a4:9e:1b:85:
04:66:a1:16:62:86:f1:2c:96:8f:35:19:46:46:4e:6a:8a:2a:
23:fa:b2:32:5b:c7:88:78:fb:a4:85:82:b9:b3:de:a5:b8:b5:
b1:93:c0:ed:02:ac:22:99:45:a0:ad:77:17:d2:2d:ce:62:99:
4e:0f:86:79:0b:aa:06:48:79:ca:86:32:0e:4a:23:9f:2b:55:
d4:f5:92:60:82:ff:67:94:f6:d1:17:80:5a:b0:6c:66:36:e8:
4b:d5:bb:f0:f4:66:98:20:60:c6:df:4a:f9:b1:3c:b8:a6:00:
d2:03:bc:25:a3:33:50:c0:77:0f:db:05:85:ec:42:44:f2:c6:
c7:f7:31:87:02:2d:e5:ee:5e:90:34:03:d7:50:d1:21:f1:f7:
e5:1a:a4:8e:40:23:4e:84:8f:95:c1:a2:28:41:1d:11:ce:eb:
df:3e:84:50:b6:b1:b9:92:4b:13:fb:fa:e3:5e:c9:83:ac:98:
a1:9b:94:4a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQjajeQLq4rWi5egcL9H5/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTZkMmNiMzk0Nzc4N2YxNWUxOWJhY2IxZTMzNjljMTlm
M2VjOTQwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmFmYmQxYjc2ODI0Zjk2NjAxYTU5MmYxZTMyMDVjZjk2YzBkMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeBD6apivtZuw0Fzf2H5uMkAZ9hE
Ne+4xeSAdCRzDejCubOK38SoKD8b+8b9mcwWoEC52MNPEq9RvNLsenhTv4fJXicg
xHy7saXLlWkefkwTrWKH8PXDesO8G0gY3qI46cTYRihlZqKXo8LG6bjFZWw8ejmo
nnf0c9O+vcBmH3tdbZWBEkh/TlaQc85Jp1IXRzECKbkzo8PwEvtX/zfQvlqrgi3L
GGDIm5tRaU1wkn5C4lFTy26e0MIRGTwVdv6QCyz7lZi8qihC8mYAJC0mVRSbK23t
nBqgSJ/U0ydPfrtl1PvIeAx7WnD6Ael/+jYsRgoqKzHChyETKQy6yb9ceQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKuvvRt2gk+WYBpZLx4yBc+WwNOIMB8GA1UdIwQY
MBaAFOmW0ss5R3h/FeGbrLHjNpwZ8+yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85YzYxYmEtYzc0Ni00ZmNlLWE5Yzkt
NzI3NjJiNTcwNjJmLzEvcTYtOUczYUNUNVpnR2xrdkhqSUZ6NWJBMDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85YzYxYmEtYzc0Ni00ZmNlLWE5YzktNzI3NjJiNTcwNjJm
LzEvNlpiU3l6bEhlSDhWNFp1c3NlTTJuQm56N0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9Z8AwQC
ucPAMA0EAgACMAcDBQMqEzkAMA0GCSqGSIb3DQEBCwUAA4IBAQAZxbv0a3Qw02Mw
506Woa00qMLp3sFWUY0FQisiLk+6WCdCd9yWvGFlpNx+Y14j6QkPTqc2TazchFt+
jmts1bSJTaUhl6SeG4UEZqEWYobxLJaPNRlGRk5qiioj+rIyW8eIePukhYK5s96l
uLWxk8DtAqwimUWgrXcX0i3OYplOD4Z5C6oGSHnKhjIOSiOfK1XU9ZJggv9nlPbR
F4BasGxmNuhL1bvw9GaYIGDG30r5sTy4pgDSA7wlozNQwHcP2wWF7EJE8sbH9zGH
Ai3l7l6QNAPXUNEh8fflGqSOQCNOhI+VwaIoQR0RzuvfPoRQtrG5kksT+/rjXsmD
rJihm5RK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net