Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/6rV9eDtLqjrWZLXprUqcr99pZaA.roa
File: 6rV9eDtLqjrWZLXprUqcr99pZaA.roa (raw, json)
Hash identifier: dlsrhoQ5PwXdAjp/9r3Vgwhl3pAOBofCxgLlYlDOE18=
Subject key identifier: EA:B5:7D:78:3B:4B:AA:3A:D6:64:B5:E9:AD:4A:9C:AF:DF:69:65:A0
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019422FB553F9926FFDB2408D08769FC36CA
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/6rV9eDtLqjrWZLXprUqcr99pZaA.roa
Signing time: Wed 01 Jan 2025 17:48:04 +0000
ROA not before: Wed 01 Jan 2025 17:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200918
IP address blocks: 185.126.196.0/22 maxlen: 22
185.186.36.0/24 maxlen: 24
185.186.37.0/24 maxlen: 24
185.186.38.0/24 maxlen: 24
185.186.39.0/24 maxlen: 24
2a06:bfc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:55:3f:99:26:ff:db:24:08:d0:87:69:fc:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab57d783b4baa3ad664b5e9ad4a9cafdf6965a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:f0:32:dd:5f:ca:32:f1:07:81:8d:2f:7d:
ad:dc:3f:8d:5a:1a:50:ad:7f:a3:31:c7:38:71:a8:
2d:3f:ab:6c:14:be:97:6a:20:fb:f4:40:71:35:02:
ea:2d:bc:5e:ed:8a:9e:7e:52:c9:da:c3:92:6a:22:
54:54:e9:91:44:c3:a8:39:c1:bb:66:2e:3b:0b:a4:
72:a3:06:59:4c:87:19:58:9f:28:5f:8b:da:61:a6:
86:cb:2a:eb:fc:c4:83:bb:f7:63:c2:dc:00:6f:ef:
fd:55:cb:07:3a:6d:90:f0:03:d2:50:42:8a:8d:50:
5c:d3:47:d9:c5:99:a6:56:f3:76:b9:f9:70:5c:bb:
f8:2a:9c:e2:10:6d:b1:88:e5:05:a1:31:69:bb:f4:
42:a6:7f:1f:0e:da:0c:31:81:60:a9:22:66:e8:17:
07:4d:68:3e:d2:96:5c:bc:69:6f:53:09:e3:c0:11:
3d:7d:e8:2d:31:36:9f:12:30:0b:21:b9:3f:0f:a4:
0b:03:b5:39:6e:22:4e:3a:55:b2:45:3e:51:7c:3f:
d0:42:c3:95:45:c7:89:cf:ea:79:3a:3a:08:aa:ab:
94:0d:cd:23:d9:6e:6d:ae:a3:fe:e2:ac:c1:56:2a:
38:81:e6:e2:93:a0:d4:d4:e2:56:f0:4a:04:29:36:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:7D:78:3B:4B:AA:3A:D6:64:B5:E9:AD:4A:9C:AF:DF:69:65:A0
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/6rV9eDtLqjrWZLXprUqcr99pZaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.196.0/22
185.186.36.0/22
IPv6:
2a06:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:10:d6:1e:79:0e:97:eb:db:b1:79:92:6c:d6:e5:42:d2:49:
13:03:84:ad:19:23:72:77:a6:3b:3f:ec:04:3f:c8:e6:39:27:
30:05:c2:32:77:ae:71:79:61:ba:b1:5f:29:87:07:87:7f:86:
2b:f9:e5:35:0c:f5:fa:86:aa:93:d3:c5:c4:05:ed:58:ac:28:
35:30:35:04:19:a1:aa:bf:35:b0:1e:33:63:00:ba:f9:ab:74:
4e:6d:e5:81:f2:c8:c7:0e:01:41:16:4b:ed:39:be:91:31:51:
da:2c:a3:9d:ab:ea:5e:3c:4e:d2:ed:22:55:bc:f4:d1:91:de:
ca:19:93:84:bf:0f:f2:d5:91:66:46:fd:9d:d5:5c:e0:18:af:
28:18:21:b9:11:7c:1c:7a:83:c0:bc:67:c1:36:83:d1:ed:67:
83:df:d0:f5:e3:12:68:d5:ba:8f:f4:09:d1:40:ee:53:a6:bf:
2e:5f:3c:7a:8a:f0:18:ad:f9:0d:11:8f:de:0e:9d:3b:45:ce:
a8:da:8e:a6:d9:f7:81:91:84:c3:b9:ee:18:9d:f1:ff:3a:c4:
72:fc:57:f4:af:a4:10:e7:37:fc:a9:f2:d6:12:d9:41:9d:de:
14:05:a7:9a:f0:ee:a6:27:06:45:a6:a7:cc:45:31:5d:7d:8b:
c8:b7:cd:d1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQi+1U/mSb/2yQI0Idp/DbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1
ODJiNmMwHhcNMjUwMTAxMTc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWI1N2Q3ODNiNGJhYTNhZDY2NGI1ZTlhZDRhOWNhZmRmNjk2NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt3wMt1fyjLxB4GNL32t3D+NWhpQ
rX+jMcc4cagtP6tsFL6XaiD79EBxNQLqLbxe7YqeflLJ2sOSaiJUVOmRRMOoOcG7
Zi47C6RyowZZTIcZWJ8oX4vaYaaGyyrr/MSDu/djwtwAb+/9VcsHOm2Q8APSUEKK
jVBc00fZxZmmVvN2uflwXLv4KpziEG2xiOUFoTFpu/RCpn8fDtoMMYFgqSJm6BcH
TWg+0pZcvGlvUwnjwBE9fegtMTafEjALIbk/D6QLA7U5biJOOlWyRT5RfD/QQsOV
RceJz+p5OjoIqquUDc0j2W5trqP+4qzBVio4gebik6DU1OJW8EoEKTaWNwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOq1fXg7S6o61mS16a1KnK/faWWgMB8GA1UdIwQY
MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt
Mzc2ZjRiNGQ5ZGE2LzEvNnJWOWVEdExxanJXWkxYcHJVcWNyOTlwWmFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2
LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuX7EAwQC
ubokMA0EAgACMAcDBQMqBr/AMA0GCSqGSIb3DQEBCwUAA4IBAQC6ENYeeQ6X69ux
eZJs1uVC0kkTA4StGSNyd6Y7P+wEP8jmOScwBcIyd65xeWG6sV8phweHf4Yr+eU1
DPX6hqqT08XEBe1YrCg1MDUEGaGqvzWwHjNjALr5q3RObeWB8sjHDgFBFkvtOb6R
MVHaLKOdq+pePE7S7SJVvPTRkd7KGZOEvw/y1ZFmRv2d1VzgGK8oGCG5EXwceoPA
vGfBNoPR7WeD39D14xJo1bqP9AnRQO5Tpr8uXzx6ivAYrfkNEY/eDp07Rc6o2o6m
2feBkYTDue4YnfH/OsRy/Ff0r6QQ5zf8qfLWEtlBnd4UBaea8O6mJwZFpqfMRTFd
fYvIt83R
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:09 2025 by rpki-client