Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/6lFGZqM7FuT2XCumb4Ozgv8oBSc.roa
File: 6lFGZqM7FuT2XCumb4Ozgv8oBSc.roa (raw, json)
Hash identifier: J9Ne+tt8OITbsrnmLv7ZW41H82xXSGz7uHN24xVQwho=
Subject key identifier: EA:51:46:66:A3:3B:16:E4:F6:5C:2B:A6:6F:83:B3:82:FF:28:05:27
Certificate issuer: /CN=680121b199b291de7763d8c1caa7b3cdc3561810
Certificate serial: 018CC6B7F8B3E9A5DA4C4431F46A77876DE0
Authority key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/6lFGZqM7FuT2XCumb4Ozgv8oBSc.roa
Signing time: Mon 01 Jan 2024 20:29:54 +0000
ROA not before: Mon 01 Jan 2024 20:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138997
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f8:b3:e9:a5:da:4c:44:31:f4:6a:77:87:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Validity
Not Before: Jan 1 20:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea514666a33b16e4f65c2ba66f83b382ff280527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:6f:ff:04:a6:3b:fe:06:94:cb:c0:8a:cc:
10:78:3c:70:e3:9a:55:f4:d2:ff:11:15:54:d1:fa:
cb:80:93:5d:48:1b:22:f6:c1:8c:aa:5e:9a:16:2c:
23:e9:fa:83:26:c3:cb:e3:5f:6b:2b:bc:b3:01:9f:
6c:c4:e3:5c:35:c3:f8:c7:e4:f1:02:68:ca:76:1b:
41:14:b0:b0:db:eb:1c:ba:f3:ff:a1:3f:5f:cd:b8:
82:48:79:63:c4:95:e1:02:2f:98:fe:55:b3:0c:50:
70:f1:f5:05:ee:31:12:14:e0:29:44:5b:0f:73:f7:
f0:c1:f7:da:55:69:8f:f9:8c:f1:6c:14:6f:c5:f9:
79:26:d0:50:60:1a:ee:d3:f4:ad:70:a6:57:98:23:
5c:71:8d:8a:68:04:39:c0:1b:bd:4f:aa:9b:c0:e0:
9c:5f:9a:55:ce:65:24:ea:d1:d4:f9:ee:2c:1c:31:
a3:fe:d8:64:2d:44:1d:76:29:a1:30:df:74:83:cd:
99:64:84:3a:97:2c:8a:4c:49:ea:7c:ca:a9:26:24:
40:6d:70:77:ee:78:ea:b9:4c:38:c9:8d:ee:27:46:
f8:db:f5:a3:04:d5:6a:b6:94:d0:88:aa:f8:8e:f8:
4f:ed:09:c1:32:21:41:df:66:03:4e:7a:6a:40:cf:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:46:66:A3:3B:16:E4:F6:5C:2B:A6:6F:83:B3:82:FF:28:05:27
X509v3 Authority Key Identifier:
keyid:68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/6lFGZqM7FuT2XCumb4Ozgv8oBSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1f:7b:cd:6b:61:e5:77:d4:28:a8:5b:5a:27:8e:c4:c9:9d:
7a:f0:df:78:e2:b8:51:c0:f4:8f:61:6b:e7:c8:5a:b1:0a:0d:
0b:6b:64:16:73:5b:d2:92:11:9e:dc:4b:c5:62:8e:ab:41:dc:
52:e3:31:ec:de:d3:c9:e4:f9:6b:5c:f6:8b:f7:0a:e1:ef:be:
23:18:b1:fe:89:80:0c:70:cb:97:c8:88:4f:ea:80:ce:7f:a4:
6b:2a:ef:82:d8:e6:d2:f8:a7:fe:0a:a5:ea:81:63:26:1f:64:
65:9d:a6:31:cc:a7:d3:fc:ae:0c:2e:d9:ab:51:24:a4:03:14:
06:26:e8:9e:08:65:90:11:02:08:86:b9:44:5e:80:8e:46:77:
af:42:9b:85:90:45:f4:61:47:4c:20:31:39:c3:c8:4a:75:7c:
80:7a:3f:42:71:9d:d0:8c:3d:b7:c2:2f:32:0f:a5:47:b2:74:
00:3d:17:ef:b7:2d:1a:61:84:30:c8:d6:09:84:c8:70:35:1d:
93:94:86:2b:c8:6d:8a:36:47:46:67:de:84:15:69:1f:f2:57:
39:99:06:59:3d:79:bc:82:7c:79:ee:65:30:99:dd:1e:97:f7:
e0:1a:53:b5:c0:05:2c:16:3c:c7:c2:08:e5:2b:ad:97:d6:d3:
a9:ac:14:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt/iz6aXaTEQx9Gp3h23gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MDEyMWIxOTliMjkxZGU3NzYzZDhjMWNhYTdiM2NkYzM1
NjE4MTAwHhcNMjQwMTAxMjAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTUxNDY2NmEzM2IxNmU0ZjY1YzJiYTY2ZjgzYjM4MmZmMjgwNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCxv/wSmO/4GlMvAiswQeDxw45pV
9NL/ERVU0frLgJNdSBsi9sGMql6aFiwj6fqDJsPL419rK7yzAZ9sxONcNcP4x+Tx
AmjKdhtBFLCw2+scuvP/oT9fzbiCSHljxJXhAi+Y/lWzDFBw8fUF7jESFOApRFsP
c/fwwffaVWmP+YzxbBRvxfl5JtBQYBru0/StcKZXmCNccY2KaAQ5wBu9T6qbwOCc
X5pVzmUk6tHU+e4sHDGj/thkLUQddimhMN90g82ZZIQ6lyyKTEnqfMqpJiRAbXB3
7njquUw4yY3uJ0b42/WjBNVqtpTQiKr4jvhP7QnBMiFB32YDTnpqQM/EYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpRRmajOxbk9lwrpm+Ds4L/KAUnMB8GA1UdIwQY
MBaAFGgBIbGZspHed2PYwcqns83DVhgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUFFaHNabXlrZDUzWTlqQnlxZXp6Y05XR0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yZGNlZTctYjBjNS00MWM4LWEzNmMt
YmFkZDFjZDJkY2VjLzEvNmxGR1pxTTdGdVQyWEN1bWI0T3pndjhvQlNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yZGNlZTctYjBjNS00MWM4LWEzNmMtYmFkZDFjZDJkY2Vj
LzEvYUFFaHNabXlrZDUzWTlqQnlxZXp6Y05XR0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYDiMA0G
CSqGSIb3DQEBCwUAA4IBAQAOH3vNa2Hld9QoqFtaJ47EyZ168N944rhRwPSPYWvn
yFqxCg0La2QWc1vSkhGe3EvFYo6rQdxS4zHs3tPJ5PlrXPaL9wrh774jGLH+iYAM
cMuXyIhP6oDOf6RrKu+C2ObS+Kf+CqXqgWMmH2RlnaYxzKfT/K4MLtmrUSSkAxQG
JuieCGWQEQIIhrlEXoCORnevQpuFkEX0YUdMIDE5w8hKdXyAej9CcZ3QjD23wi8y
D6VHsnQAPRfvty0aYYQwyNYJhMhwNR2TlIYryG2KNkdGZ96EFWkf8lc5mQZZPXm8
gnx57mUwmd0el/fgGlO1wAUsFjzHwgjlK62X1tOprBS1
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:39:20 2025 by rpki-client