Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/6LoGTUsxl6ngR0px_QWDZqMrDqY.roa
File: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (raw, json)
Hash identifier: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=
Subject key identifier: E8:BA:06:4D:4B:31:97:A9:E0:47:4A:71:FD:05:83:66:A3:2B:0E:A6
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 019423D6C3EEBA11A4E4D60F83781033FCC7
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/6LoGTUsxl6ngR0px_QWDZqMrDqY.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199143
IP address blocks: 5.158.216.0/24 maxlen: 24
5.158.217.0/24 maxlen: 24
5.158.218.0/24 maxlen: 24
5.158.219.0/24 maxlen: 24
5.158.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c3:ee:ba:11:a4:e4:d6:0f:83:78:10:33:fc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ba064d4b3197a9e0474a71fd058366a32b0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:a4:0a:e7:94:dd:a0:5a:c5:79:96:d4:5f:
79:5e:e0:c2:53:2c:56:31:54:fb:8b:b4:fd:db:2f:
20:b0:cf:8a:a7:51:83:2c:c9:52:9c:eb:62:38:98:
15:06:ed:c6:92:77:dd:ed:19:f5:b1:5e:75:3a:0b:
b8:01:e2:7e:a8:35:ef:75:e9:63:5d:10:b7:a9:72:
9a:9d:bb:09:53:aa:55:34:ca:ea:5c:f7:0f:cb:14:
44:47:bd:36:9c:71:3e:ba:5b:bd:c7:07:00:fd:bb:
db:16:88:26:27:f0:97:7d:ed:7e:d0:84:c0:cc:c2:
1f:c1:ee:ed:0f:cd:cb:60:68:24:05:7b:9f:bf:b0:
e4:25:7b:a6:99:1a:34:99:82:da:c7:60:15:d1:54:
45:18:e7:73:21:14:a7:5d:de:10:9f:8a:80:83:17:
d8:a4:8a:88:51:a0:b7:07:58:e9:29:b4:d6:89:70:
b6:a3:ec:4e:af:61:a6:3e:11:12:c8:1c:6f:ba:4e:
01:bf:dd:4d:67:29:98:db:d9:a7:d1:1e:a1:13:1b:
ea:f4:b2:ac:ab:d2:b9:44:23:80:00:39:66:e2:17:
eb:86:88:68:cb:7f:3f:b7:25:88:6f:7b:15:b9:73:
c5:23:7d:66:b1:8e:44:6f:c2:3f:34:93:67:47:37:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:06:4D:4B:31:97:A9:E0:47:4A:71:FD:05:83:66:A3:2B:0E:A6
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/6LoGTUsxl6ngR0px_QWDZqMrDqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.216.0-5.158.220.255
Signature Algorithm: sha256WithRSAEncryption
17:98:96:bc:50:0b:e1:bb:78:08:47:13:db:cd:5b:cd:10:c8:
07:77:01:ff:e1:18:a2:55:af:60:3b:5b:11:34:7f:8d:cb:0e:
6d:ce:2a:f5:67:78:fd:7b:ef:ff:5b:a6:56:f2:20:cc:ee:41:
dd:54:e7:13:07:36:b1:77:26:3f:a9:20:64:3f:57:42:dc:30:
b0:ff:6b:21:df:08:43:dd:43:12:eb:36:d7:c6:3a:c5:f2:9c:
df:a7:27:a9:8a:c4:53:c2:ab:17:0c:77:1e:34:ee:09:2f:1b:
0b:f5:48:fd:30:fd:76:49:89:bd:c9:7e:0a:71:2d:68:6e:70:
83:c1:b6:49:be:45:36:14:97:85:94:88:f1:fd:6e:df:42:e7:
98:90:7c:8e:72:cb:5b:01:bb:3c:de:d6:af:95:ae:37:4e:94:
e4:7b:2b:ff:6b:29:75:b5:bf:93:57:7d:a8:68:06:27:5e:01:
17:7e:53:c1:67:97:b0:64:8a:33:4f:9e:d4:a1:91:dc:2c:de:
4b:cc:c3:5a:e2:c4:a2:79:d9:ca:3e:90:cd:d5:95:64:2d:5e:
be:08:94:36:ad:3e:54:44:70:dc:3f:9e:ab:68:23:22:58:ad:
22:f9:3b:1c:4d:60:d6:05:a4:13:cc:b4:9e:7e:49:ce:34:dc:
03:e2:15:14
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj1sPuuhGk5NYPg3gQM/zHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm
OWFhMzcwHhcNMjUwMTAxMjE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJhMDY0ZDRiMzE5N2E5ZTA0NzRhNzFmZDA1ODM2NmEzMmIwZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu6kCueU3aBaxXmW1F95XuDCUyxW
MVT7i7T92y8gsM+Kp1GDLMlSnOtiOJgVBu3Gknfd7Rn1sV51Ogu4AeJ+qDXvdelj
XRC3qXKanbsJU6pVNMrqXPcPyxRER702nHE+ulu9xwcA/bvbFogmJ/CXfe1+0ITA
zMIfwe7tD83LYGgkBXufv7DkJXummRo0mYLax2AV0VRFGOdzIRSnXd4Qn4qAgxfY
pIqIUaC3B1jpKbTWiXC2o+xOr2GmPhESyBxvuk4Bv91NZymY29mn0R6hExvq9LKs
q9K5RCOAADlm4hfrhohoy38/tyWIb3sVuXPFI31msY5Eb8I/NJNnRzeITQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOi6Bk1LMZep4EdKcf0Fg2ajKw6mMB8GA1UdIwQY
MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt
ZjAxYTJmNThlZjg4LzEvNkxvR1RVc3hsNm5nUjBweF9RV0RacU1yRHFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4
LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMFntgD
BAAFntwwDQYJKoZIhvcNAQELBQADggEBABeYlrxQC+G7eAhHE9vNW80QyAd3Af/h
GKJVr2A7WxE0f43LDm3OKvVneP177/9bplbyIMzuQd1U5xMHNrF3Jj+pIGQ/V0Lc
MLD/ayHfCEPdQxLrNtfGOsXynN+nJ6mKxFPCqxcMdx407gkvGwv1SP0w/XZJib3J
fgpxLWhucIPBtkm+RTYUl4WUiPH9bt9C55iQfI5yy1sBuzze1q+VrjdOlOR7K/9r
KXW1v5NXfahoBideARd+U8Fnl7BkijNPntShkdws3kvMw1rixKJ52co+kM3VlWQt
Xr4IlDatPlREcNw/nqtoIyJYrSL5OxxNYNYFpBPMtJ5+Sc403APiFRQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net