Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa
File: 6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa (raw, json)
Hash identifier: ZMfa+VC1JK7r5J2BdtywNHEZxOWql9OfKZrNLteanPw=
Subject key identifier: E8:53:B0:3E:47:0B:A3:9D:50:DC:3F:A3:40:C5:72:E4:3C:EE:0A:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 01951817B89AED5E3FF381D409139DB2D91A
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa
Signing time: Tue 18 Feb 2025 08:06:02 +0000
ROA not before: Tue 18 Feb 2025 08:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216219
IP address blocks: 185.28.44.0/24 maxlen: 24
2a13:f740::/48 maxlen: 48
2a13:f740:1::/48 maxlen: 48
2a13:f740:2::/48 maxlen: 48
2a13:f740:3::/48 maxlen: 48
2a13:f740:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:17:b8:9a:ed:5e:3f:f3:81:d4:09:13:9d:b2:d9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Feb 18 08:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e853b03e470ba39d50dc3fa340c572e43cee0a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:a5:51:d1:96:92:e6:6a:ea:15:b1:a0:b4:
54:19:7c:f3:07:3b:0a:e5:f6:17:ae:4e:7b:72:01:
cb:b3:07:e7:ab:ea:5e:cd:68:ea:3c:a2:42:77:6e:
db:b6:94:35:c9:e3:7a:9e:55:3b:d5:67:00:06:cb:
a9:2d:92:75:c8:72:64:38:29:6f:68:96:fd:12:b9:
a6:2f:b8:d4:c0:43:87:eb:86:cf:1e:3b:b0:2e:5d:
47:ac:04:d9:22:94:d9:ff:5b:8d:bf:47:f1:57:27:
21:e8:23:5e:84:c0:71:d6:d2:9c:68:08:e8:68:5b:
b7:60:b7:15:d5:af:f9:e1:11:65:46:fe:ee:d2:c1:
8c:03:49:3f:00:48:0a:e9:73:7a:0d:21:61:e8:98:
fa:d5:0b:68:90:83:51:e9:b8:98:b2:f5:0e:09:54:
d8:85:6c:e3:2a:32:95:0f:44:08:d4:77:41:dc:d2:
6e:e5:5b:97:1d:ab:2f:ad:a8:89:f0:1f:2a:d8:94:
b8:62:ac:c0:5e:88:52:2b:25:4f:88:bf:e6:d8:1c:
3d:6d:fd:ea:53:c2:2a:28:66:48:18:63:b6:4c:5d:
2b:97:f1:b2:21:93:b1:f7:ed:9e:9a:5f:08:15:70:
a8:29:3e:a3:01:6b:52:a3:77:3f:08:5b:b1:23:ea:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:B0:3E:47:0B:A3:9D:50:DC:3F:A3:40:C5:72:E4:3C:EE:0A:3A
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.44.0/24
IPv6:
2a13:f740::-2a13:f740:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:54:a0:3b:b9:61:3e:5e:62:f2:ec:39:51:81:0e:82:8d:8d:
80:d1:8e:f1:97:9d:bf:ab:cd:81:87:ae:a9:23:ef:86:b6:48:
52:29:ea:dd:2a:ce:b3:e6:b1:e2:14:8c:c3:61:fa:27:19:eb:
e8:c2:9b:18:30:49:7d:aa:34:15:ce:83:13:ab:6b:4f:8e:24:
01:4c:05:e2:5c:8f:78:03:93:eb:47:0c:d7:8e:98:a8:c5:f1:
1d:8c:40:55:e8:e2:c3:de:f3:61:cd:62:bf:d3:f2:01:ee:a2:
a9:4a:a7:13:62:81:39:d5:60:50:eb:7b:d4:5d:30:cc:c0:49:
ad:7c:0f:74:29:a1:48:7c:c5:e8:ef:dd:50:af:20:a8:b6:4e:
d5:76:f6:97:3f:fa:5f:4c:d9:97:73:49:d8:04:bd:bc:36:02:
a9:71:d8:ed:0e:03:2f:73:56:87:b4:95:15:65:bf:3d:fa:8c:
b7:1c:29:53:0b:c1:67:61:2f:43:15:c0:80:72:e4:62:86:de:
85:39:6e:85:e6:43:d2:4b:78:17:69:5b:9f:28:d5:ba:14:64:
0e:33:18:ca:19:cf:9d:c4:99:82:94:60:d0:5d:03:27:86:d8:
01:05:ea:4a:ce:2a:3a:a2:ca:24:3a:24:2b:da:98:52:eb:0a:
82:81:d1:af
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZUYF7ia7V4/84HUCROdstkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YThhNjkwMDlhZDJlODkwOTg2YmRkNzZjNjMzYzFiMzFm
MDZmM2EwHhcNMjUwMjE4MDgwNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODUzYjAzZTQ3MGJhMzlkNTBkYzNmYTM0MGM1NzJlNDNjZWUwYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JOlUdGWkuZq6hWxoLRUGXzzBzsK
5fYXrk57cgHLswfnq+pezWjqPKJCd27btpQ1yeN6nlU71WcABsupLZJ1yHJkOClv
aJb9ErmmL7jUwEOH64bPHjuwLl1HrATZIpTZ/1uNv0fxVych6CNehMBx1tKcaAjo
aFu3YLcV1a/54RFlRv7u0sGMA0k/AEgK6XN6DSFh6Jj61QtokINR6biYsvUOCVTY
hWzjKjKVD0QI1HdB3NJu5VuXHasvraiJ8B8q2JS4YqzAXohSKyVPiL/m2Bw9bf3q
U8IqKGZIGGO2TF0rl/GyIZOx9+2eml8IFXCoKT6jAWtSo3c/CFuxI+rdNwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOhTsD5HC6OdUNw/o0DFcuQ87go6MB8GA1UdIwQY
MBaAFKWoppAJrS6JCYa912xjPBsx8G86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYt
YjEyZWJmMzQ1YmMzLzEvNkZPd1BrY0xvNTFRM0QtalFNVnk1RHp1Q2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYtYjEyZWJmMzQ1YmMz
LzEvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuRwsMBgE
AgACMBIwEAMFBioT90ADBwAqE/dAAAQwDQYJKoZIhvcNAQELBQADggEBAABUoDu5
YT5eYvLsOVGBDoKNjYDRjvGXnb+rzYGHrqkj74a2SFIp6t0qzrPmseIUjMNh+icZ
6+jCmxgwSX2qNBXOgxOra0+OJAFMBeJcj3gDk+tHDNeOmKjF8R2MQFXo4sPe82HN
Yr/T8gHuoqlKpxNigTnVYFDre9RdMMzASa18D3QpoUh8xejv3VCvIKi2TtV29pc/
+l9M2ZdzSdgEvbw2Aqlx2O0OAy9zVoe0lRVlvz36jLccKVMLwWdhL0MVwIBy5GKG
3oU5boXmQ9JLeBdpW58o1boUZA4zGMoZz53EmYKUYNBdAyeG2AEF6krOKjqiyiQ6
JCvamFLrCoKB0a8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net