Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6W508HPEycyaINcon9hFTTDfWzg.roa
File: 6W508HPEycyaINcon9hFTTDfWzg.roa (raw, json)
Hash identifier: FaaoAr8cncXwgapb/ccKCwtqcqgVXMUYS+97flPk75A=
Subject key identifier: E9:6E:74:F0:73:C4:C9:CC:9A:20:D7:28:9F:D8:45:4D:30:DF:5B:38
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FB000214518F4A529FEFCFAEC1EF6
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6W508HPEycyaINcon9hFTTDfWzg.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139648
IP address blocks: 95.214.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b0:00:21:45:18:f4:a5:29:fe:fc:fa:ec:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e96e74f073c4c9cc9a20d7289fd8454d30df5b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:ad:5a:2d:7a:c7:7e:54:9e:94:64:30:2f:
12:1d:5f:27:46:28:fa:91:0b:c6:9c:dc:b5:d3:ba:
c6:f4:53:a2:a4:f9:29:34:90:24:a2:a2:cc:f2:98:
06:f9:a4:4e:05:15:87:40:f8:12:ac:c8:b7:a4:ab:
c7:f6:56:12:f1:79:c1:20:8d:a4:86:ae:25:ea:ef:
a6:b8:b0:52:13:b0:d0:46:63:9c:2a:31:ff:1e:9e:
2e:39:49:46:a8:0d:11:64:11:b7:b8:4a:cc:7a:c3:
97:35:8f:1a:6e:ed:21:cc:77:9c:d3:15:2d:48:55:
f7:23:e6:f5:8e:36:4d:be:16:1a:ba:b3:b4:6a:ef:
1f:31:21:4a:0a:e7:90:27:af:f9:0e:e4:17:4d:a4:
21:3e:9a:c6:32:a6:f0:45:cb:0b:9a:5a:dd:b5:ab:
f0:30:08:30:b4:09:d2:ff:2d:f9:a4:1d:8b:c9:a8:
b2:ae:cc:71:56:61:6f:11:df:2e:6d:a3:30:4a:3b:
d1:d3:ee:0d:b9:80:cd:e7:8f:8b:55:71:15:56:60:
53:e8:1a:d1:b8:00:1f:28:26:3b:d8:86:43:c3:d4:
ff:36:2b:41:0c:bd:60:aa:37:82:e5:43:ff:82:c5:
80:43:ba:5b:9a:6d:dd:4d:af:bb:86:2d:ec:46:7d:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:74:F0:73:C4:C9:CC:9A:20:D7:28:9F:D8:45:4D:30:DF:5B:38
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6W508HPEycyaINcon9hFTTDfWzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.178.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:c9:35:63:28:8a:de:cf:a1:97:46:0c:df:0a:b6:c4:03:55:
04:5b:2b:ce:2c:24:ed:83:f9:c4:77:1c:02:f8:4f:50:f7:f1:
9d:ce:07:d4:d4:12:6c:df:16:66:60:4b:a1:66:fc:88:2c:11:
ba:08:c6:e1:31:79:fd:37:cd:c0:f8:69:47:f1:cb:14:5f:47:
cb:8b:9d:27:b3:1a:cd:a9:39:8e:e6:03:82:ad:ef:67:ec:2d:
b1:6c:62:b1:46:57:c9:0f:ca:14:ce:be:d5:28:16:ec:52:53:
a8:4e:5b:e8:93:83:24:a4:30:33:2b:fc:41:96:82:ee:10:17:
7d:a2:ed:0c:dc:24:ae:08:c0:b6:a9:ac:25:e4:c1:32:21:44:
11:e5:30:51:2d:2c:5f:5f:ee:3d:89:b8:13:4a:a1:36:fc:07:
c0:7b:3d:1f:fb:d3:8a:13:0e:5b:35:98:ac:dc:91:10:c2:f7:
8e:f7:de:c3:a4:bb:8e:0c:d7:b0:84:44:94:00:92:a3:1f:7b:
d0:5a:ee:2e:f0:5c:c6:98:3a:42:7e:59:a9:27:12:f9:e9:58:
e7:8c:3f:32:d5:2d:14:5c:a0:17:ea:ec:6c:65:0f:6b:b0:7c:
d4:6d:8e:c4:4c:4f:17:a9:f1:6f:fa:d5:69:8a:33:ea:93:da:
50:37:59:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7AAIUUY9KUp/vz67B72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTZlNzRmMDczYzRjOWNjOWEyMGQ3Mjg5ZmQ4NDU0ZDMwZGY1YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOKtWi16x35UnpRkMC8SHV8nRij6
kQvGnNy107rG9FOipPkpNJAkoqLM8pgG+aROBRWHQPgSrMi3pKvH9lYS8XnBII2k
hq4l6u+muLBSE7DQRmOcKjH/Hp4uOUlGqA0RZBG3uErMesOXNY8abu0hzHec0xUt
SFX3I+b1jjZNvhYaurO0au8fMSFKCueQJ6/5DuQXTaQhPprGMqbwRcsLmlrdtavw
MAgwtAnS/y35pB2LyaiyrsxxVmFvEd8ubaMwSjvR0+4NuYDN54+LVXEVVmBT6BrR
uAAfKCY72IZDw9T/NitBDL1gqjeC5UP/gsWAQ7pbmm3dTa+7hi3sRn1xvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOludPBzxMnMmiDXKJ/YRU0w31s4MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvNlc1MDhIUEV5Y3lhSU5jb245aEZUVERmV3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX9ayMA0G
CSqGSIb3DQEBCwUAA4IBAQC5yTVjKIrez6GXRgzfCrbEA1UEWyvOLCTtg/nEdxwC
+E9Q9/GdzgfU1BJs3xZmYEuhZvyILBG6CMbhMXn9N83A+GlH8csUX0fLi50nsxrN
qTmO5gOCre9n7C2xbGKxRlfJD8oUzr7VKBbsUlOoTlvok4MkpDAzK/xBloLuEBd9
ou0M3CSuCMC2qawl5MEyIUQR5TBRLSxfX+49ibgTSqE2/AfAez0f+9OKEw5bNZis
3JEQwveO997DpLuODNewhESUAJKjH3vQWu4u8FzGmDpCflmpJxL56VjnjD8y1S0U
XKAX6uxsZQ9rsHzUbY7ETE8XqfFv+tVpijPqk9pQN1lJ
-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net