Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa
File: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (raw, json)
Hash identifier: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=
Subject key identifier: 6A:1F:C6:A9:30:D5:11:67:BF:9B:FD:97:B4:0D:C2:48:AE:16:08:15
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 019423D6F2A5A36E04819265DD633C5BE801
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39448
IP address blocks: 80.68.176.0/24 maxlen: 24
178.238.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f2:a5:a3:6e:04:81:92:65:dd:63:3c:5b:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a1fc6a930d51167bf9bfd97b40dc248ae160815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:c1:37:ca:f6:39:3e:7e:50:4f:e1:d6:32:
d2:d2:63:dd:15:4e:f6:f3:fa:94:c8:5c:7d:7c:09:
d8:95:6f:de:2e:7d:ae:73:7d:f6:99:2f:39:a6:ea:
66:05:8f:12:a5:0c:24:0f:09:e4:72:8b:27:f4:89:
1e:89:c6:58:a8:7c:30:6c:95:71:87:71:ad:0e:68:
c5:e4:14:76:64:c0:dd:b2:69:3d:9f:39:f2:68:f8:
27:1e:01:3b:db:38:35:46:3b:84:67:8e:bd:5f:b8:
22:9e:84:6a:89:af:d7:81:79:c3:c3:30:e7:81:b6:
4c:0a:58:ff:0e:ed:fd:02:50:c3:b4:d2:3a:2f:76:
0b:ef:73:92:c5:48:56:0b:35:50:46:81:9e:5f:f4:
37:72:46:0e:96:f4:f8:dd:37:85:f3:92:c0:52:41:
ad:84:8d:6f:cb:16:43:c5:d3:38:3b:b7:55:b0:de:
f1:e3:6e:39:fb:9a:07:a0:0b:f4:d6:ec:d0:fd:4e:
ed:df:02:d9:c2:d0:24:86:7b:95:9e:76:c1:41:27:
8f:8c:60:f0:7c:b7:79:dc:5f:28:f1:3d:54:30:1d:
59:77:d3:82:07:37:5b:b3:e7:b4:72:71:87:32:90:
d7:20:00:ee:af:9c:6b:1e:11:22:08:13:49:14:24:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:C6:A9:30:D5:11:67:BF:9B:FD:97:B4:0D:C2:48:AE:16:08:15
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.176.0/24
178.238.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:43:06:7d:be:a1:09:38:0a:b2:51:4b:02:93:70:e7:59:28:
a6:a0:20:68:a1:e9:80:98:2d:0b:64:47:c8:76:b1:f0:7a:95:
52:dc:da:66:7b:1c:f7:4e:4d:fd:ce:73:6d:ef:d0:fa:c8:14:
c8:00:67:1d:10:60:d4:b4:ef:6a:89:72:bf:c8:31:a2:57:f4:
1d:ce:b7:90:e1:f0:d9:8c:ff:dc:f1:37:f6:ee:c7:bd:fe:4c:
3a:dc:a5:e9:83:f5:a8:0c:db:25:b7:ee:c2:85:e4:55:5d:0a:
b9:df:c3:aa:6c:cd:b0:7f:6a:49:43:ed:dc:84:db:94:21:d6:
c0:b2:1e:55:c6:36:a9:39:54:f2:09:c6:0c:bd:a9:aa:53:26:
15:67:52:1c:31:b0:65:07:7a:d2:1b:2b:d3:7f:2d:f0:ba:bb:
8a:ac:0a:01:23:0c:0f:09:1f:b6:f2:39:bc:f6:1b:b9:3c:9e:
d1:61:7d:23:84:6e:59:2e:5b:d3:3c:b1:f9:9b:2a:24:5a:85:
16:5f:ae:08:48:85:6c:30:7d:e6:61:7a:48:9d:36:0a:f6:b7:
42:43:80:c0:98:c9:09:19:e1:8f:7a:10:4c:c0:8f:26:dc:37:
c3:03:17:84:74:0b:61:4d:f9:df:0f:1e:f2:8a:24:59:72:2b:
74:b8:00:54
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1vKlo24EgZJl3WM8W+gBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjUwMTAxMjE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTFmYzZhOTMwZDUxMTY3YmY5YmZkOTdiNDBkYzI0OGFlMTYwODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9fBN8r2OT5+UE/h1jLS0mPdFU72
8/qUyFx9fAnYlW/eLn2uc332mS85pupmBY8SpQwkDwnkcosn9IkeicZYqHwwbJVx
h3GtDmjF5BR2ZMDdsmk9nznyaPgnHgE72zg1RjuEZ469X7ginoRqia/XgXnDwzDn
gbZMClj/Du39AlDDtNI6L3YL73OSxUhWCzVQRoGeX/Q3ckYOlvT43TeF85LAUkGt
hI1vyxZDxdM4O7dVsN7x4245+5oHoAv01uzQ/U7t3wLZwtAkhnuVnnbBQSePjGDw
fLd53F8o8T1UMB1Zd9OCBzdbs+e0cnGHMpDXIADur5xrHhEiCBNJFCSXqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGofxqkw1RFnv5v9l7QNwkiuFggVMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvYWhfR3FURFZFV2VfbV8yWHRBM0NTSzRXQ0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUESwAwQA
su4yMA0GCSqGSIb3DQEBCwUAA4IBAQCKQwZ9vqEJOAqyUUsCk3DnWSimoCBooemA
mC0LZEfIdrHwepVS3Npmexz3Tk39znNt79D6yBTIAGcdEGDUtO9qiXK/yDGiV/Qd
zreQ4fDZjP/c8Tf27se9/kw63KXpg/WoDNslt+7CheRVXQq538OqbM2wf2pJQ+3c
hNuUIdbAsh5VxjapOVTyCcYMvamqUyYVZ1IcMbBlB3rSGyvTfy3wuruKrAoBIwwP
CR+28jm89hu5PJ7RYX0jhG5ZLlvTPLH5myokWoUWX64ISIVsMH3mYXpInTYK9rdC
Q4DAmMkJGeGPehBMwI8m3DfDAxeEdAthTfnfDx7yiiRZcit0uABU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net