Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS6939.roa
File: AS6939.roa (raw, json)
Hash identifier: iZY4J3O2MLYKL0akIGCmGpf7/y9QvuDbwv5dwFvM2XQ=
Subject key identifier: 64:9C:33:F2:6B:18:7D:C2:B3:67:C7:E7:23:29:8F:8D:7C:6A:7B:E0
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 75AB9F51DE83D89AF752DDE414C35076C4FE2A57
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS6939.roa
Signing time: Tue 11 Mar 2025 09:35:28 +0000
ROA not before: Tue 11 Mar 2025 09:30:28 +0000
ROA not after: Tue 10 Mar 2026 09:35:28 +0000
asID: 6939
IP address blocks: 83.171.244.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ab:9f:51:de:83:d8:9a:f7:52:dd:e4:14:c3:50:76:c4:fe:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Mar 11 09:30:28 2025 GMT
Not After : Mar 10 09:35:28 2026 GMT
Subject: CN=649C33F26B187DC2B367C7E723298F8D7C6A7BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:ba:08:53:57:ca:c0:d6:e8:a9:db:95:58:
55:94:5a:75:07:6b:c8:be:e8:2f:25:b5:42:40:c1:
55:85:3d:6e:d8:3d:fe:7a:88:8f:4a:b1:12:21:39:
ad:7d:8c:2c:a1:8a:16:50:ac:58:bc:19:69:24:2e:
2b:74:10:54:fd:e3:d2:26:55:ff:e9:0a:3c:d0:da:
05:e6:9f:c6:b4:0a:77:5d:32:93:38:88:36:63:18:
63:aa:dd:c8:da:d3:08:d9:ac:eb:97:15:7d:a2:8e:
d5:f0:e6:ed:87:16:7f:b4:fa:ee:f0:96:c9:8e:f7:
8c:31:2d:7b:10:ea:13:30:74:c8:70:dc:30:25:57:
db:41:20:b7:57:79:f7:67:5f:7e:4c:0f:d6:c3:f3:
78:0a:aa:ce:1b:fe:d6:7b:1b:55:3e:70:04:0d:bd:
5a:8d:e2:05:04:39:7b:3f:a1:2c:76:76:b2:64:9f:
ec:90:60:3e:12:ff:70:c9:ce:f9:eb:f4:22:c9:ef:
9a:8d:4d:3f:cd:6a:c0:3c:65:07:7d:d2:bd:1e:1e:
b3:46:6c:13:ae:9e:72:65:ea:fa:63:4e:c2:cc:ac:
0d:6e:3d:e3:96:18:fa:78:25:ee:0a:0f:67:99:47:
e5:57:bf:41:7f:1b:8e:5a:a1:bf:08:e6:28:c5:fb:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:33:F2:6B:18:7D:C2:B3:67:C7:E7:23:29:8F:8D:7C:6A:7B:E0
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS6939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
85.8.144.0/22
139.28.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:f4:c2:91:2c:a5:f9:5e:2f:43:ca:da:60:c8:e9:6d:8b:17:
f5:c8:be:ee:d6:11:bf:2c:44:ed:2b:92:5b:07:22:17:cf:f2:
ee:70:3e:9d:d0:a0:bc:53:81:18:fc:c5:df:a3:b6:f0:54:fe:
ac:96:b5:b0:5e:d6:26:d7:fd:9d:80:a5:f6:bb:45:d9:af:ce:
81:0a:dc:d1:f2:9a:3a:86:db:a5:91:f3:e1:09:9a:18:a7:20:
38:3d:02:4d:18:43:d6:49:41:1c:9c:22:dd:57:2c:04:1c:6d:
85:86:7c:37:84:43:1d:62:81:9a:2b:11:17:56:44:a8:ca:ab:
89:13:80:16:b5:e2:3e:fa:ab:5a:0b:4b:15:3b:7a:26:f8:3c:
d7:99:2b:29:b9:f8:f9:76:e6:80:72:32:12:9e:7a:70:97:a4:
c1:41:ba:c1:64:1b:dc:c1:ed:ff:43:32:1e:d8:4a:d0:ea:14:
cf:33:5e:3c:37:41:9b:a4:c0:6d:61:43:05:5d:ae:88:c3:6e:
8a:53:f2:43:d2:f7:97:01:3d:6c:85:b3:d2:fb:56:8a:6b:91:
58:9c:55:1f:1f:52:50:4a:a8:55:08:57:00:59:4f:cb:6f:e1:
cd:65:86:f6:86:33:84:e7:81:e2:48:93:15:58:f4:03:e0:c6:
7c:ac:8c:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:28 2025 by rpki-client on console.sobornost.net