Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/6PYHTPLOKPA_a6iVYvGQByWG7yU.roa
File: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (raw, json)
Hash identifier: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=
Subject key identifier: E8:F6:07:4C:F2:CE:28:F0:3F:6B:A8:95:62:F1:90:07:25:86:EF:25
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 0194266BC2E53CB224CABA22C728EEFB36D7
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/6PYHTPLOKPA_a6iVYvGQByWG7yU.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8998
IP address blocks: 91.203.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c2:e5:3c:b2:24:ca:ba:22:c7:28:ee:fb:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8f6074cf2ce28f03f6ba89562f190072586ef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:09:a7:47:3c:23:90:16:c6:65:e0:26:b1:
27:35:45:e2:ab:30:19:1b:e8:f2:1f:b7:d7:96:1f:
05:42:9e:e0:69:c4:e2:da:c7:be:b2:e8:9b:28:83:
bb:1a:b0:59:25:d2:d4:bd:29:a1:e1:2c:2a:c0:d2:
b1:ab:1e:43:94:16:04:f0:84:d7:5e:9c:59:98:ce:
95:cb:28:7b:51:cf:73:53:d9:c8:e6:c8:2a:77:ff:
7e:57:e9:7f:24:30:38:8d:05:93:3e:dd:cd:56:a9:
af:75:9d:74:ea:49:2a:a8:67:ea:cf:b8:f8:f0:1b:
50:22:bb:9c:ce:53:77:c1:57:28:72:d0:79:44:86:
d2:ec:e1:3d:8e:0c:e1:6d:ef:24:4d:b0:01:d7:7c:
c1:f5:ff:12:c9:62:79:c4:af:49:6c:85:ba:0d:08:
22:08:3f:cb:40:9d:31:69:d4:0d:e2:47:a6:3a:cf:
ce:ab:bd:db:cd:d0:d7:16:3b:56:b9:5b:5c:34:51:
05:71:f1:7b:02:69:99:80:6e:ad:16:0c:3d:1b:7c:
fc:16:d2:12:36:1a:8c:fd:16:c4:56:0f:04:4a:71:
12:e9:44:28:97:c4:bc:e1:c3:90:55:4a:8f:b3:1a:
98:19:f7:30:40:ea:7b:1e:78:d5:9c:af:76:e2:55:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:07:4C:F2:CE:28:F0:3F:6B:A8:95:62:F1:90:07:25:86:EF:25
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/6PYHTPLOKPA_a6iVYvGQByWG7yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7f:7d:1d:1e:31:85:15:91:60:46:f9:c2:ef:4e:7b:86:89:
df:70:bc:24:15:96:93:63:b4:48:97:ca:b3:ae:da:c2:75:e6:
86:3a:8b:5c:6f:fb:93:8d:2b:9c:fd:20:60:ee:22:37:be:50:
6d:3a:f6:5a:42:07:c9:c4:ca:fa:6e:c6:98:a9:2b:9b:4c:a1:
65:53:63:d8:d3:dc:81:12:63:32:76:d3:4d:08:25:38:fa:62:
a8:62:53:64:07:9d:3e:ed:91:de:81:05:11:fc:30:27:6e:13:
78:08:b7:8c:5b:c4:df:04:eb:d7:77:47:6b:2c:0c:c6:c8:53:
91:16:e2:67:70:00:df:06:6e:23:70:ea:32:58:c9:a2:62:ac:
fb:d4:e5:8c:75:84:47:e0:87:4f:c3:a3:2b:d3:e0:6a:cc:a0:
d4:b2:2a:f9:e4:d8:12:e8:7f:af:6b:83:93:46:d0:28:77:35:
92:02:21:83:10:5e:b3:16:da:4c:f8:47:d4:dc:7e:c1:0b:4d:
21:38:5d:94:99:22:b0:11:97:0f:aa:ed:72:03:5c:04:d7:a1:
d9:2f:56:41:2d:68:26:ed:01:a8:34:ac:1f:40:48:a4:61:1f:
ae:1c:a1:2a:53:2f:e6:2d:ac:11:f2:4e:85:af:67:59:e1:bf:
5e:d3:1d:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8LlPLIkyroixyju+zbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDJmYzRkMjNmZDljMjQyMGM0MDQ5MTg3MTgwOGVjNTQy
NGE2NzAwHhcNMjUwMTAyMDk0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGY2MDc0Y2YyY2UyOGYwM2Y2YmE4OTU2MmYxOTAwNzI1ODZlZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKAJp0c8I5AWxmXgJrEnNUXiqzAZ
G+jyH7fXlh8FQp7gacTi2se+suibKIO7GrBZJdLUvSmh4SwqwNKxqx5DlBYE8ITX
XpxZmM6Vyyh7Uc9zU9nI5sgqd/9+V+l/JDA4jQWTPt3NVqmvdZ106kkqqGfqz7j4
8BtQIruczlN3wVcoctB5RIbS7OE9jgzhbe8kTbAB13zB9f8SyWJ5xK9JbIW6DQgi
CD/LQJ0xadQN4kemOs/Oq73bzdDXFjtWuVtcNFEFcfF7AmmZgG6tFgw9G3z8FtIS
NhqM/RbEVg8ESnES6UQol8S84cOQVUqPsxqYGfcwQOp7HnjVnK924lXvvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOj2B0zyzijwP2uolWLxkAclhu8lMB8GA1UdIwQY
MBaAFE3S/E0j/ZwkIMQEkYcYCOxUJKZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmIt
ZWI4YjFlY2M0NzQxLzEvNlBZSFRQTE9LUEFfYTZpVll2R1FCeVdHN3lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmItZWI4YjFlY2M0NzQx
LzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8smMA0G
CSqGSIb3DQEBCwUAA4IBAQB/f30dHjGFFZFgRvnC7057honfcLwkFZaTY7RIl8qz
rtrCdeaGOotcb/uTjSuc/SBg7iI3vlBtOvZaQgfJxMr6bsaYqSubTKFlU2PY09yB
EmMydtNNCCU4+mKoYlNkB50+7ZHegQUR/DAnbhN4CLeMW8TfBOvXd0drLAzGyFOR
FuJncADfBm4jcOoyWMmiYqz71OWMdYRH4IdPw6Mr0+BqzKDUsir55NgS6H+va4OT
RtAodzWSAiGDEF6zFtpM+EfU3H7BC00hOF2UmSKwEZcPqu1yA1wE16HZL1ZBLWgm
7QGoNKwfQEikYR+uHKEqUy/mLawR8k6Fr2dZ4b9e0x2r
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net