Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/6G5UyWYOcJqaZDYadc20nbrYpA0.roa
File: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (raw, json)
Hash identifier: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=
Subject key identifier: E8:6E:54:C9:66:0E:70:9A:9A:64:36:1A:75:CD:B4:9D:BA:D8:A4:0D
Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial: 01941F8C5B132A5E90BB0BF11B7A9216BD7F
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/6G5UyWYOcJqaZDYadc20nbrYpA0.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59865
IP address blocks: 89.255.216.0/21 maxlen: 24
89.255.219.0/24 maxlen: 24
89.255.220.0/24 maxlen: 24
89.255.221.0/24 maxlen: 24
89.255.222.0/24 maxlen: 24
89.255.223.0/24 maxlen: 24
185.68.172.0/22 maxlen: 22
185.232.112.0/22 maxlen: 24
185.240.168.0/22 maxlen: 22
2a03:2ca0::/32 maxlen: 48
2a03:2ca0:255::/48 maxlen: 48
2a03:2ca0:3135::/48 maxlen: 48
2a0c:8680::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5b:13:2a:5e:90:bb:0b:f1:1b:7a:92:16:bd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e86e54c9660e709a9a64361a75cdb49dbad8a40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:1a:10:5d:f2:4c:ac:8c:2e:35:6d:cf:6c:
57:48:9d:bb:9a:94:c4:64:0b:2a:34:b2:a5:60:b0:
f6:de:d0:6c:ed:a0:55:b9:74:f7:aa:30:92:92:c1:
8f:29:12:47:c8:9b:cf:fd:b3:92:70:33:d2:c4:64:
4b:91:8f:03:20:c8:1c:05:8f:2c:36:f2:13:99:8a:
8e:aa:2b:78:a6:dd:d4:f2:6d:6f:78:3b:1d:57:3a:
b0:00:71:c6:df:8f:76:60:f9:96:e7:d9:2a:5a:7d:
4f:68:20:81:7f:c3:fe:f2:f1:1d:ea:d0:f7:f9:1d:
b5:4d:ca:1a:1c:86:38:06:c9:89:fa:c6:11:55:ee:
79:40:07:c4:31:82:57:58:1b:5c:8b:02:1e:a0:8a:
66:be:b7:48:9c:15:3d:7b:f0:bd:aa:24:fb:36:28:
95:40:cb:18:1d:75:e0:57:ac:8b:49:82:43:4c:37:
0b:e7:83:64:8a:bd:83:ba:ff:61:8d:9f:a4:9c:a5:
8f:72:ce:af:5a:52:f6:73:d2:71:8f:0f:99:17:dc:
06:62:9b:b4:37:32:6d:43:bd:cc:7f:d0:7d:e6:fd:
1f:80:06:9f:4f:44:08:0f:c5:67:9c:23:bc:c8:f0:
c1:8e:19:0d:88:e4:bd:fd:cb:0d:0d:b5:b1:fc:1a:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:54:C9:66:0E:70:9A:9A:64:36:1A:75:CD:B4:9D:BA:D8:A4:0D
X509v3 Authority Key Identifier:
keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/6G5UyWYOcJqaZDYadc20nbrYpA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.216.0/21
185.68.172.0/22
185.232.112.0/22
185.240.168.0/22
IPv6:
2a03:2ca0::/32
2a0c:8680::/29
Signature Algorithm: sha256WithRSAEncryption
54:da:cc:93:c1:79:cd:b9:14:9e:d4:9a:f4:31:ce:46:9f:59:
7f:68:57:2b:51:af:55:b5:92:2c:f9:6a:0c:dd:a9:d2:1b:42:
2c:9c:cf:e9:30:16:4c:39:47:2e:ab:52:c7:05:7b:b2:7c:f2:
fb:f6:28:af:32:0d:ff:58:1f:6b:92:bf:74:3a:e4:41:e3:7a:
5f:0f:a9:6c:c7:c6:2e:85:86:a3:fc:76:36:95:7d:95:fc:6e:
5d:1b:96:f4:ad:1e:9d:ee:52:43:a2:d6:9e:c6:97:93:ee:86:
33:96:06:0f:f0:b9:b0:9d:81:91:16:fa:23:ae:3e:1e:d0:4b:
9e:04:47:27:6f:d6:ea:b6:76:6e:45:fe:7b:55:11:a9:e3:c7:
5c:8b:63:e1:58:83:1e:90:6f:3d:46:a0:83:84:4c:b9:4a:48:
f9:97:f2:e6:47:20:da:46:f3:f9:fb:7e:df:11:50:b9:6d:6e:
89:11:87:5c:7b:e0:00:05:08:3a:7e:a5:ef:21:23:20:a7:a8:
92:cf:16:4d:09:81:9b:f5:89:7b:47:31:ea:c6:93:2c:b8:93:
7b:76:f9:80:b0:b2:0e:ec:1c:ed:12:97:62:20:c9:4d:36:e0:
9c:90:7e:5b:e7:f9:67:d0:54:ca:0d:47:ac:13:bf:11:13:d5:
f2:6c:0e:e7
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQfjFsTKl6QuwvxG3qSFr1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOWFkMTgyNGJlNTQ2MTYzYjQ4MWZjNDk2NDdhMDUwOGIy
MjZiZjQwHhcNMjUwMTAxMDE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODZlNTRjOTY2MGU3MDlhOWE2NDM2MWE3NWNkYjQ5ZGJhZDhhNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNoaEF3yTKyMLjVtz2xXSJ27mpTE
ZAsqNLKlYLD23tBs7aBVuXT3qjCSksGPKRJHyJvP/bOScDPSxGRLkY8DIMgcBY8s
NvITmYqOqit4pt3U8m1veDsdVzqwAHHG3492YPmW59kqWn1PaCCBf8P+8vEd6tD3
+R21TcoaHIY4BsmJ+sYRVe55QAfEMYJXWBtciwIeoIpmvrdInBU9e/C9qiT7NiiV
QMsYHXXgV6yLSYJDTDcL54Nkir2Duv9hjZ+knKWPcs6vWlL2c9Jxjw+ZF9wGYpu0
NzJtQ73Mf9B95v0fgAafT0QID8VnnCO8yPDBjhkNiOS9/csNDbWx/Brq/QIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFOhuVMlmDnCammQ2GnXNtJ262KQNMB8GA1UdIwQY
MBaAFAGa0YJL5UYWO0gfxJZHoFCLImv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMt
ZThlMTNiYjBlMDg0LzEvNkc1VXlXWU9jSnFhWkRZYWRjMjBuYnJZcEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMtZThlMTNiYjBlMDg0
LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDWf/YAwQC
uUSsAwQCuehwAwQCufCoMBQEAgACMA4DBQAqAyygAwUDKgyGgDANBgkqhkiG9w0B
AQsFAAOCAQEAVNrMk8F5zbkUntSa9DHORp9Zf2hXK1GvVbWSLPlqDN2p0htCLJzP
6TAWTDlHLqtSxwV7snzy+/YorzIN/1gfa5K/dDrkQeN6Xw+pbMfGLoWGo/x2NpV9
lfxuXRuW9K0ene5SQ6LWnsaXk+6GM5YGD/C5sJ2BkRb6I64+HtBLngRHJ2/W6rZ2
bkX+e1URqePHXItj4ViDHpBvPUagg4RMuUpI+Zfy5kcg2kbz+ft+3xFQuW1uiRGH
XHvgAAUIOn6l7yEjIKeoks8WTQmBm/WJe0cx6saTLLiTe3b5gLCyDuwc7RKXYiDJ
TTbgnJB+W+f5Z9BUyg1HrBO/ERPV8mwO5w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:26:28 2025 by rpki-client