Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/cl6-xP7qlNVenXtKej75GmET20w.roa
File: cl6-xP7qlNVenXtKej75GmET20w.roa (raw, json)
Hash identifier: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=
Subject key identifier: 72:5E:BE:C4:FE:EA:94:D5:5E:9D:7B:4A:7A:3E:F9:1A:61:13:DB:4C
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019422FB9CD8DEBEEE913D46492E08C89675
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/cl6-xP7qlNVenXtKej75GmET20w.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12357
IP address blocks: 185.111.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9c:d8:de:be:ee:91:3d:46:49:2e:08:c8:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=725ebec4feea94d55e9d7b4a7a3ef91a6113db4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:aa:b6:3c:a6:c6:dd:b7:6b:fa:a6:2e:7c:
a9:09:47:ba:37:f1:b5:d7:a8:bd:dd:b1:a9:37:99:
b8:c5:32:08:1b:0c:0d:bb:4f:f4:e1:29:07:92:33:
10:d6:99:34:76:1b:9e:9b:4e:cd:7d:d2:7a:e1:ac:
89:3b:a1:8a:ad:a2:90:b3:9e:8d:27:4e:de:b3:a4:
c4:9a:9e:b2:ea:a7:bd:ab:c8:c4:ac:e2:48:a8:64:
3f:32:dc:4e:1f:cf:96:47:60:7a:27:e4:e2:aa:c1:
36:52:fe:cb:3d:73:ec:29:12:96:6b:14:e9:d1:38:
26:2d:9d:9e:ee:dc:ac:87:9c:d0:7e:94:3e:ef:87:
5a:7a:06:0c:23:9b:b1:64:88:0a:d4:3b:30:48:1f:
7d:53:ef:05:90:03:00:f9:ca:eb:cf:4b:bf:e1:b6:
f8:7d:b1:b5:09:de:7a:d4:3d:cc:da:c7:33:f2:e2:
72:0f:ee:ff:6b:4c:59:c0:ba:ac:f1:b8:bc:57:43:
b1:50:94:d1:a1:e4:e3:d4:3c:a2:e2:5c:6f:f0:0c:
d4:86:1c:28:18:df:3e:a6:4b:ec:bd:52:e9:c0:15:
e9:b4:86:b1:2a:9c:a5:dc:11:4e:f3:70:16:34:00:
0e:d3:1b:bc:53:88:6a:93:7a:c3:25:dd:4e:80:79:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:BE:C4:FE:EA:94:D5:5E:9D:7B:4A:7A:3E:F9:1A:61:13:DB:4C
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/cl6-xP7qlNVenXtKej75GmET20w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:98:19:50:25:2f:ee:90:2f:41:f5:45:74:c1:78:64:43:2c:
78:ea:c7:57:68:36:d7:e3:16:b8:c3:67:11:bb:2f:06:41:e2:
54:bf:d1:f3:85:7c:63:ba:3b:f6:83:9c:81:12:3f:25:5c:cf:
59:8a:00:f0:d7:20:cd:b7:06:93:f5:f8:cd:0e:bb:8a:2c:04:
1f:55:b3:7b:8a:65:e8:6d:9c:2a:5d:59:4c:37:64:21:e3:b6:
59:a6:3a:40:1b:17:b2:6a:a3:b9:54:00:81:52:85:05:ea:10:
98:34:b0:91:b5:d1:6e:13:d3:8d:98:fb:d1:66:db:18:c6:33:
76:63:f2:c7:7a:2e:ef:f9:e4:0f:c3:f1:cc:90:69:26:c3:8d:
ef:a3:18:e4:4e:df:da:0e:01:b1:00:32:1c:84:10:11:89:a1:
ec:87:80:75:f7:c2:26:f9:eb:c8:40:2b:e2:88:74:65:de:35:
96:02:c1:59:2b:b7:03:b5:f7:a5:f3:45:05:e3:72:6a:2d:be:
a9:9b:b4:93:c8:76:7d:55:fc:6d:b9:08:e1:5a:f6:bb:f5:9b:
a8:a9:5c:0a:f2:6f:e3:4c:32:a8:c0:4b:a3:ca:2e:9e:c2:9b:
e5:80:43:3f:92:ee:67:d9:dd:8b:ed:5f:a9:8f:de:c7:c3:ee:
e8:12:36:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5zY3r7ukT1GSS4IyJZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTc1ODAyZTdlZmI4NjUzZTNhZjU5Y2JmMWJjMDY1Mzhi
Y2E2NzEwHhcNMjUwMTAxMTc0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjVlYmVjNGZlZWE5NGQ1NWU5ZDdiNGE3YTNlZjkxYTYxMTNkYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJSqtjymxt23a/qmLnypCUe6N/G1
16i93bGpN5m4xTIIGwwNu0/04SkHkjMQ1pk0dhuem07NfdJ64ayJO6GKraKQs56N
J07es6TEmp6y6qe9q8jErOJIqGQ/MtxOH8+WR2B6J+TiqsE2Uv7LPXPsKRKWaxTp
0TgmLZ2e7tysh5zQfpQ+74daegYMI5uxZIgK1DswSB99U+8FkAMA+crrz0u/4bb4
fbG1Cd561D3M2scz8uJyD+7/a0xZwLqs8bi8V0OxUJTRoeTj1Dyi4lxv8AzUhhwo
GN8+pkvsvVLpwBXptIaxKpyl3BFO83AWNAAO0xu8U4hqk3rDJd1OgHll+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHJevsT+6pTVXp17Sno++RphE9tMMB8GA1UdIwQY
MBaAFKjnWALn77hlPjr1nL8bwGU4vKZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjkt
NDExZjU4MzdmZWZhLzEvY2w2LXhQN3FsTlZlblh0S2VqNzVHbUVUMjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjktNDExZjU4MzdmZWZh
LzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW/8MA0G
CSqGSIb3DQEBCwUAA4IBAQC7mBlQJS/ukC9B9UV0wXhkQyx46sdXaDbX4xa4w2cR
uy8GQeJUv9HzhXxjujv2g5yBEj8lXM9ZigDw1yDNtwaT9fjNDruKLAQfVbN7imXo
bZwqXVlMN2Qh47ZZpjpAGxeyaqO5VACBUoUF6hCYNLCRtdFuE9ONmPvRZtsYxjN2
Y/LHei7v+eQPw/HMkGkmw43voxjkTt/aDgGxADIchBARiaHsh4B198Im+evIQCvi
iHRl3jWWAsFZK7cDtfel80UF43JqLb6pm7STyHZ9VfxtuQjhWva79ZuoqVwK8m/j
TDKowEujyi6ewpvlgEM/ku5n2d2L7V+pj97Hw+7oEjby
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net