Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/_6bJkuzxLJMC8zZKQrB-nCnecco.roa
File: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (raw, json)
Hash identifier: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=
Subject key identifier: FF:A6:C9:92:EC:F1:2C:93:02:F3:36:4A:42:B0:7E:9C:29:DE:71:CA
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019427B56C1930E657F9ABC2D2512BBAD144
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/_6bJkuzxLJMC8zZKQrB-nCnecco.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203183
IP address blocks: 144.2.160.0/22 maxlen: 24
185.143.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6c:19:30:e6:57:f9:ab:c2:d2:51:2b:ba:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa6c992ecf12c9302f3364a42b07e9c29de71ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:cb:66:96:8d:c3:2b:95:7a:7a:79:a2:0e:
e4:3d:a4:dc:9a:35:b5:1c:69:62:cd:2e:a4:8f:46:
0a:6c:f7:60:96:d9:66:32:e0:e3:40:72:d3:70:fb:
3f:8f:b3:52:e5:c0:cd:34:fd:ed:57:0a:63:a4:c4:
26:fb:a7:dd:b0:d3:b2:6a:e3:75:1a:8d:09:f5:8f:
15:b4:82:6c:00:a7:f3:22:36:58:f7:8b:47:c5:75:
dd:8c:87:d2:0e:2f:cd:45:38:69:10:90:23:01:be:
7b:9c:6b:03:83:5f:cb:62:4e:85:0c:04:b3:0c:d1:
3b:8a:0a:a9:33:6f:91:a5:ef:a4:bb:de:85:91:99:
35:c8:ce:c5:9b:76:b6:88:b8:17:38:7a:10:d9:91:
19:3b:31:54:26:22:3b:a3:ee:73:95:96:80:a2:55:
2b:2b:b6:f7:b6:c2:c3:f8:df:c1:0c:63:30:21:d3:
b7:5b:86:4c:8d:cb:36:27:90:69:45:fd:23:19:29:
fd:eb:00:d0:c0:f1:dd:7e:ce:48:65:35:70:cf:d4:
64:11:05:78:85:22:51:98:80:04:7d:98:f1:71:94:
53:ed:91:d5:9f:dd:fc:60:03:1b:8a:65:74:ba:9b:
d4:6d:c7:8d:95:01:79:1b:85:e6:08:aa:35:f3:18:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:C9:92:EC:F1:2C:93:02:F3:36:4A:42:B0:7E:9C:29:DE:71:CA
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/_6bJkuzxLJMC8zZKQrB-nCnecco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.160.0/22
185.143.92.0/22
Signature Algorithm: sha256WithRSAEncryption
16:32:0e:49:a0:82:3a:1a:e3:5e:84:ae:74:f4:4f:12:37:fb:
cb:6a:3e:bc:5a:cf:78:92:be:8b:38:7e:ab:db:1e:c4:6b:f7:
c0:2e:ee:9d:a8:13:4b:dc:34:02:ce:d8:22:d6:b1:cd:e8:91:
ad:29:db:2f:3e:4e:fd:4a:4d:7d:cd:3c:47:e6:bb:39:52:1a:
82:92:7f:54:27:e1:c1:ae:3e:d8:39:88:71:9d:f7:47:e2:ae:
b3:69:5d:38:b8:14:24:be:1f:2e:38:fd:94:20:ae:73:4d:a1:
7c:42:98:fd:fe:25:77:e8:71:63:db:c2:a2:49:f2:70:69:57:
9b:a0:b3:5e:96:78:b0:78:09:8c:c4:07:01:7c:40:01:eb:fe:
bf:f8:1a:2c:68:e5:86:11:9a:88:dc:66:70:29:85:ab:26:58:
b6:9a:2a:1a:ab:2b:56:88:30:80:fe:f9:3d:c4:37:36:dd:77:
1d:fd:3b:26:e8:1e:c7:63:fc:9c:7e:ea:14:d1:49:26:62:e3:
02:b5:c7:1c:a9:c5:a6:48:90:fd:90:16:0a:dd:e7:5c:7c:ec:
27:35:2c:9d:22:79:f6:be:d3:af:44:69:51:7a:3e:f7:b3:a8:
0a:3c:75:bb:60:f6:7e:b4:a2:db:62:c7:25:f9:7b:ec:bd:74:
f3:f0:a8:0d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntWwZMOZX+avC0lErutFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDQzNzU4NGFiZGI0ODIxMzYzMGRjYWE1ZjAwYzlkMmMz
Y2MxNzkwHhcNMjUwMTAyMTU0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmE2Yzk5MmVjZjEyYzkzMDJmMzM2NGE0MmIwN2U5YzI5ZGU3MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnLZpaNwyuVenp5og7kPaTcmjW1
HGlizS6kj0YKbPdgltlmMuDjQHLTcPs/j7NS5cDNNP3tVwpjpMQm+6fdsNOyauN1
Go0J9Y8VtIJsAKfzIjZY94tHxXXdjIfSDi/NRThpEJAjAb57nGsDg1/LYk6FDASz
DNE7igqpM2+Rpe+ku96FkZk1yM7Fm3a2iLgXOHoQ2ZEZOzFUJiI7o+5zlZaAolUr
K7b3tsLD+N/BDGMwIdO3W4ZMjcs2J5BpRf0jGSn96wDQwPHdfs5IZTVwz9RkEQV4
hSJRmIAEfZjxcZRT7ZHVn938YAMbimV0upvUbceNlQF5G4XmCKo18xjF5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP+myZLs8SyTAvM2SkKwfpwp3nHKMB8GA1UdIwQY
MBaAFHnUN1hKvbSCE2MNyqXwDJ0sPMF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEt
YWFhMjM4MDk4MmJjLzEvXzZiSmt1enhMSk1DOHpaS1FyQi1uQ25lY2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEtYWFhMjM4MDk4MmJj
LzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCkAKgAwQC
uY9cMA0GCSqGSIb3DQEBCwUAA4IBAQAWMg5JoII6GuNehK509E8SN/vLaj68Ws94
kr6LOH6r2x7Ea/fALu6dqBNL3DQCztgi1rHN6JGtKdsvPk79Sk19zTxH5rs5UhqC
kn9UJ+HBrj7YOYhxnfdH4q6zaV04uBQkvh8uOP2UIK5zTaF8Qpj9/iV36HFj28Ki
SfJwaVeboLNelniweAmMxAcBfEAB6/6/+BosaOWGEZqI3GZwKYWrJli2mioaqytW
iDCA/vk9xDc23Xcd/Tsm6B7HY/ycfuoU0UkmYuMCtcccqcWmSJD9kBYK3edcfOwn
NSydInn2vtOvRGlRej73s6gKPHW7YPZ+tKLbYscl+XvsvXTz8KgN
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net