Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/7kEBaLYENNXM-m7MMqq2tPsGg5U.roa
File: 7kEBaLYENNXM-m7MMqq2tPsGg5U.roa (raw, json)
Hash identifier: vLeyTfkRE7QxiITdb9n+0czyVURuavOs7JgFzDbNbCU=
Subject key identifier: EE:41:01:68:B6:04:34:D5:CC:FA:6E:CC:32:AA:B6:B4:FB:06:83:95
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01951DEC07F6F2AD717E95C441EF326F5E20
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/7kEBaLYENNXM-m7MMqq2tPsGg5U.roa
Signing time: Wed 19 Feb 2025 11:16:02 +0000
ROA not before: Wed 19 Feb 2025 11:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.138.0/24 maxlen: 24
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
195.167.184.0/24 maxlen: 24
195.167.187.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:ec:07:f6:f2:ad:71:7e:95:c4:41:ef:32:6f:5e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Feb 19 11:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee410168b60434d5ccfa6ecc32aab6b4fb068395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:fc:06:12:df:6b:9c:bf:9c:1d:67:48:ea:
62:2f:0a:8d:35:57:f5:ba:35:33:d3:f0:e1:f9:6c:
a3:54:a3:69:3c:36:77:31:17:c2:36:69:ee:ac:e7:
f9:71:c9:02:54:e7:65:6b:3f:fa:25:58:b0:9b:f1:
c6:6e:de:2b:34:9f:bf:7a:fa:a2:df:4e:35:e0:ec:
cd:67:a8:4f:e9:bd:c6:62:59:cd:99:f2:09:ec:cc:
77:54:90:c0:b8:e8:81:14:a5:80:50:54:ff:eb:ae:
8b:18:43:a1:6c:f4:5a:47:99:0f:83:f8:5d:3d:32:
4e:b3:4c:9d:3e:c2:8d:c4:c0:ab:75:c0:12:f8:39:
98:7b:bd:27:34:56:1b:15:86:b7:cb:10:ec:35:66:
6d:ea:22:95:c5:fd:0e:97:0d:2f:27:c0:ac:e6:f3:
ff:4d:44:95:2a:71:df:a3:b4:04:54:04:89:6f:74:
65:29:a2:fd:7a:65:a4:45:73:68:b2:c8:98:4f:60:
b5:43:0c:d0:18:0c:47:37:e3:e2:c4:a9:48:59:62:
cc:b9:6c:47:43:0d:cd:21:f4:a5:83:57:01:ad:b8:
5e:b5:fc:17:38:29:81:b5:59:f4:2c:2a:87:55:b7:
2c:b7:f4:e5:35:5a:47:ec:3a:a1:13:3e:67:c8:74:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:01:68:B6:04:34:D5:CC:FA:6E:CC:32:AA:B6:B4:FB:06:83:95
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/7kEBaLYENNXM-m7MMqq2tPsGg5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
80.252.120.0/22
103.110.208.0/22
109.224.248.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.138.0/24
195.167.181.0-195.167.182.255
195.167.184.0/24
195.167.187.0/24
209.42.4.0/22
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
2d:be:0d:ef:2d:3b:ee:5b:87:7e:12:a0:f0:ac:cb:fb:92:35:
02:94:51:34:eb:f7:49:57:29:cb:c3:bb:24:1c:14:c5:53:11:
56:e6:f8:90:40:34:f3:c0:be:39:8e:c9:65:9d:b3:70:32:ac:
a5:12:cc:80:6e:18:66:e4:13:4d:f4:bd:f8:80:cc:a7:f7:27:
6d:50:f4:76:b8:c4:a6:75:35:ea:e2:22:93:a6:68:aa:49:fc:
40:70:df:83:01:1f:34:e3:e7:a2:1e:72:ce:13:87:13:7d:c0:
ca:69:4e:7d:ce:da:e9:f4:50:a9:f3:72:ab:22:3a:3d:89:38:
18:cb:cf:63:3c:fc:3d:23:32:e4:c8:df:54:74:d5:10:11:ce:
83:81:0d:46:e6:ce:8c:59:0e:e4:48:80:ba:4f:69:ca:fe:23:
29:d5:3b:65:6e:a3:c5:c6:1f:73:96:30:88:0d:56:ce:ba:be:
de:c5:e5:fa:29:d9:f5:cc:3a:bb:5e:81:9b:87:dc:e3:18:6a:
91:9f:e9:79:74:fb:37:fe:f1:47:d0:5e:0d:15:84:48:1d:7a:
04:44:5a:8d:1d:12:5f:53:92:c0:b4:25:24:96:72:44:33:cc:
54:91:4d:a3:90:2a:e9:50:0b:cb:49:40:e9:18:e3:dd:46:b5:
bd:ee:63:ce
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAZUd7Af28q1xfpXEQe8yb14gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjUwMjE5MTExNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTQxMDE2OGI2MDQzNGQ1Y2NmYTZlY2MzMmFhYjZiNGZiMDY4Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2D8BhLfa5y/nB1nSOpiLwqNNVf1
ujUz0/Dh+WyjVKNpPDZ3MRfCNmnurOf5cckCVOdlaz/6JViwm/HGbt4rNJ+/evqi
30414OzNZ6hP6b3GYlnNmfIJ7Mx3VJDAuOiBFKWAUFT/666LGEOhbPRaR5kPg/hd
PTJOs0ydPsKNxMCrdcAS+DmYe70nNFYbFYa3yxDsNWZt6iKVxf0Olw0vJ8Cs5vP/
TUSVKnHfo7QEVASJb3RlKaL9emWkRXNossiYT2C1QwzQGAxHN+PixKlIWWLMuWxH
Qw3NIfSlg1cBrbhetfwXOCmBtVn0LCqHVbcst/TlNVpH7DqhEz5nyHThrwIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFO5BAWi2BDTVzPpuzDKqtrT7BoOVMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvN2tFQmFMWUVOTlhNLW03TU1xcTJ0UHNHZzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAi2WjAME
Ak9jWAMEAlD8eAMEAmdu0AMEA23g+AMEArlsqAMEArnNrAMEAcGyNgMEAcGycAME
AMOnijAMAwQAw6e1AwQAw6e2AwQAw6e4AwQAw6e7AwQC0SoEMA0EAgACMAcDBQMq
Bg5AMA0GCSqGSIb3DQEBCwUAA4IBAQAtvg3vLTvuW4d+EqDwrMv7kjUClFE06/dJ
VynLw7skHBTFUxFW5viQQDTzwL45jsllnbNwMqylEsyAbhhm5BNN9L34gMyn9ydt
UPR2uMSmdTXq4iKTpmiqSfxAcN+DAR804+eiHnLOE4cTfcDKaU59ztrp9FCp83Kr
Ijo9iTgYy89jPPw9IzLkyN9UdNUQEc6DgQ1G5s6MWQ7kSIC6T2nK/iMp1TtlbqPF
xh9zljCIDVbOur7exeX6Kdn1zDq7XoGbh9zjGGqRn+l5dPs3/vFH0F4NFYRIHXoE
RFqNHRJfU5LAtCUklnJEM8xUkU2jkCrpUAvLSUDpGOPdRrW97mPO
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:14 2025 by rpki-client on console.sobornost.net