Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/6--mKTLhcJSvHElJeuoDt_lQE_Q.roa
File: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (raw, json)
Hash identifier: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=
Subject key identifier: EB:EF:A6:29:32:E1:70:94:AF:1C:49:49:7A:EA:03:B7:F9:50:13:F4
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 01942067D111F3494E611D07D23DA6A01675
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/6--mKTLhcJSvHElJeuoDt_lQE_Q.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201346
IP address blocks: 185.77.132.0/24 maxlen: 24
185.77.133.0/24 maxlen: 24
185.77.134.0/24 maxlen: 24
185.77.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d1:11:f3:49:4e:61:1d:07:d2:3d:a6:a0:16:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebefa62932e17094af1c49497aea03b7f95013f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:8a:cf:5c:e8:17:e5:2d:49:5f:2b:36:c3:
96:a6:c9:f4:f6:95:46:4b:30:78:a4:ac:6a:5f:0b:
e5:1d:15:cc:d5:b1:88:97:ca:27:ff:b6:cb:1e:9e:
49:e6:58:72:d7:66:58:14:f8:5f:17:ca:75:19:da:
5c:d8:92:3a:f2:a6:4b:87:f9:1f:45:0d:5a:aa:28:
f6:bc:04:26:38:35:2d:37:4e:ae:0f:88:3f:e3:b0:
d3:00:0c:f2:72:7a:9b:f0:de:53:94:45:36:28:4d:
b4:91:ef:c7:bb:00:a8:bc:1e:7e:e5:93:55:4f:a1:
7b:96:05:97:9c:ba:ed:b1:47:bf:8c:69:c3:af:52:
f7:84:bd:33:9a:6e:9f:d2:c1:5d:f7:7b:5b:ef:3c:
1c:d4:f3:e5:5d:b5:87:6f:65:32:eb:56:6e:0e:0a:
91:dc:96:53:6f:08:26:46:09:ad:00:ae:88:47:72:
80:a2:b5:50:5b:3d:50:7b:db:d7:15:c2:2e:f7:f4:
e3:63:fa:8a:64:14:a0:76:13:c4:ff:19:dd:06:df:
53:e7:8a:b6:05:2c:9e:2d:42:ed:7f:1d:74:96:24:
9b:2d:78:e8:30:fa:9a:b3:77:8c:2c:09:f2:64:e4:
6c:08:81:81:05:4f:c6:bc:3a:08:d6:4b:d3:15:7d:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:A6:29:32:E1:70:94:AF:1C:49:49:7A:EA:03:B7:F9:50:13:F4
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/6--mKTLhcJSvHElJeuoDt_lQE_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
72:7f:80:cf:a2:0a:77:d5:a3:67:ff:4b:06:b7:4a:3a:8c:ee:
01:70:38:0f:f2:82:64:e1:85:9a:25:a2:0b:fb:84:09:dd:8c:
50:72:2b:fa:42:28:e2:77:c2:83:49:b7:21:de:a2:74:b2:bd:
93:6f:cd:90:91:5c:84:0a:5b:ee:06:f9:8d:de:2d:c6:ba:ee:
47:d3:fb:49:e0:8a:a3:8a:ad:1c:48:e0:c3:b2:9f:13:2f:96:
bc:f7:e3:b5:49:2c:5a:a5:ee:58:81:34:44:8c:57:0d:89:f7:
26:95:c9:5a:7a:79:ea:7f:3a:f0:a8:97:05:0d:a8:cc:bc:9d:
ca:ae:3e:e7:2e:7d:d7:ca:19:67:1b:1d:40:fc:c5:65:ad:79:
fb:e5:ab:2d:cc:d0:99:2f:a7:f0:16:43:67:3a:4e:c2:ca:f0:
22:ae:a4:98:48:77:12:88:42:07:d1:e2:04:f9:7d:95:09:71:
df:89:d4:ff:aa:58:52:bd:54:07:0d:28:c2:fc:79:36:74:6c:
a6:b9:4b:63:95:72:e5:16:98:0f:c6:ca:4b:8f:37:be:ff:94:
73:cc:40:7d:a8:fa:d2:77:f8:3c:46:99:c6:b1:f3:7c:c4:71:
0e:ff:2d:d7:5a:b8:d3:47:de:62:02:15:2a:d8:6b:3d:d8:e1:
b5:e1:ec:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9ER80lOYR0H0j2moBZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDU2NTc5YTUxNzJmY2EwOGUwNDNiMDJiYjk3MmZiNzUw
M2FlYWYwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmVmYTYyOTMyZTE3MDk0YWYxYzQ5NDk3YWVhMDNiN2Y5NTAxM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUWKz1zoF+UtSV8rNsOWpsn09pVG
SzB4pKxqXwvlHRXM1bGIl8on/7bLHp5J5lhy12ZYFPhfF8p1Gdpc2JI68qZLh/kf
RQ1aqij2vAQmODUtN06uD4g/47DTAAzycnqb8N5TlEU2KE20ke/HuwCovB5+5ZNV
T6F7lgWXnLrtsUe/jGnDr1L3hL0zmm6f0sFd93tb7zwc1PPlXbWHb2Uy61ZuDgqR
3JZTbwgmRgmtAK6IR3KAorVQWz1Qe9vXFcIu9/TjY/qKZBSgdhPE/xndBt9T54q2
BSyeLULtfx10liSbLXjoMPqas3eMLAnyZORsCIGBBU/GvDoI1kvTFX2KnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvvpiky4XCUrxxJSXrqA7f5UBP0MB8GA1UdIwQY
MBaAFEZFZXmlFy/KCOBDsCu5cvt1A66vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYt
YTM0Yzg1NWI1YWFiLzEvNi0tbUtUTGhjSlN2SEVsSmV1b0R0X2xRRV9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYtYTM0Yzg1NWI1YWFi
LzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU2EMA0G
CSqGSIb3DQEBCwUAA4IBAQByf4DPogp31aNn/0sGt0o6jO4BcDgP8oJk4YWaJaIL
+4QJ3YxQciv6Qijid8KDSbch3qJ0sr2Tb82QkVyEClvuBvmN3i3Guu5H0/tJ4Iqj
iq0cSODDsp8TL5a89+O1SSxape5YgTREjFcNifcmlclaennqfzrwqJcFDajMvJ3K
rj7nLn3XyhlnGx1A/MVlrXn75astzNCZL6fwFkNnOk7CyvAirqSYSHcSiEIH0eIE
+X2VCXHfidT/qlhSvVQHDSjC/Hk2dGymuUtjlXLlFpgPxspLjze+/5RzzEB9qPrS
d/g8RpnGsfN8xHEO/y3XWrjTR95iAhUq2Gs92OG14ewl
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:42 2025 by rpki-client