Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/00KT0pkGsHJg3rMPte4BXARpxEs.roa
File: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (raw, json)
Hash identifier: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=
Subject key identifier: D3:42:93:D2:99:06:B0:72:60:DE:B3:0F:B5:EE:01:5C:04:69:C4:4B
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019427B5BD7C525BCE4F0286654ACBE881FB
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/00KT0pkGsHJg3rMPte4BXARpxEs.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203052
IP address blocks: 185.146.140.0/22 maxlen: 22
2a07:5100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bd:7c:52:5b:ce:4f:02:86:65:4a:cb:e8:81:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34293d29906b07260deb30fb5ee015c0469c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:8f:97:f0:94:ad:15:27:9c:60:0a:2d:c0:
1b:88:21:42:fa:27:65:db:2c:8e:e8:ee:21:a1:c9:
2e:c1:ae:fc:e6:ab:0c:8b:cc:26:cc:7f:61:0f:3a:
30:26:19:b3:19:c8:aa:e9:3b:48:f5:0e:b3:19:69:
30:cc:8d:13:0b:ea:03:cd:1a:8b:2b:8e:b0:4a:fd:
8a:75:38:11:c5:e2:09:f2:b2:d7:1c:c8:1e:9c:2a:
08:75:bf:73:b2:4e:8f:ea:fc:f6:09:9a:db:fa:7a:
e7:d3:24:48:28:90:85:53:0d:bd:a3:c6:3f:ef:58:
1e:b7:68:55:df:4a:2e:8b:fb:51:ce:9b:d8:3a:a2:
dc:51:98:55:ac:fc:a4:d2:b2:c3:28:ac:96:e1:71:
94:62:07:37:34:70:29:c3:f4:1d:aa:c2:2c:a7:90:
02:e5:d8:bf:33:a9:b7:09:6d:48:64:0e:14:ea:62:
28:30:ed:b0:b4:97:40:49:89:49:1c:d4:dd:14:6f:
8c:3c:56:fd:ee:df:e0:f2:ed:23:24:97:c3:da:17:
19:d8:d9:55:25:8a:82:18:2f:50:01:5a:62:8c:7f:
87:a0:cf:9d:fb:8d:b7:04:26:0d:17:28:05:80:35:
b2:4a:0a:78:a1:d7:40:fd:33:9b:63:d6:bb:a9:00:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:93:D2:99:06:B0:72:60:DE:B3:0F:B5:EE:01:5C:04:69:C4:4B
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/00KT0pkGsHJg3rMPte4BXARpxEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.140.0/22
IPv6:
2a07:5100::/29
Signature Algorithm: sha256WithRSAEncryption
50:ac:f5:fc:88:6f:66:72:67:68:f7:ea:7f:f3:22:1b:24:bc:
20:30:20:69:ad:9c:9b:31:f9:dd:1d:2e:7a:6a:d6:ef:2f:1f:
9a:b5:9e:fc:08:60:59:a4:38:e1:b4:a4:f4:b7:63:bf:dd:9b:
02:7e:29:3d:36:ca:71:04:bd:1c:e6:34:00:44:d2:17:bc:ee:
02:c4:b3:f6:20:aa:15:3e:e3:d6:b2:74:32:ce:02:86:14:55:
b1:57:bd:5b:97:d4:69:70:6a:fe:0e:ec:6a:9a:99:f6:ae:ba:
b5:51:3b:80:6c:dd:52:68:22:42:90:46:71:22:a5:48:e4:74:
e9:0a:76:c9:35:c8:eb:aa:8d:18:7c:65:96:f4:87:91:c5:ca:
52:0d:78:25:3e:7f:a9:01:a3:ce:8c:15:52:9b:dc:0e:0c:48:
c7:95:e5:11:fa:76:3b:2a:d1:52:dc:21:d4:c3:a5:71:f3:00:
45:15:eb:d1:f6:f9:a0:04:f5:27:7f:5f:f3:45:a6:7e:c9:de:
6e:cd:56:47:81:8e:54:68:cf:8f:f3:7d:e1:3a:eb:6b:ce:2d:
49:ef:08:59:b8:f4:71:82:84:7b:87:05:00:52:bb:95:4c:ec:
94:f1:46:76:9e:f6:d4:1c:59:2c:07:0a:3d:9e:26:84:b5:f9:
36:ec:95:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntb18UlvOTwKGZUrL6IH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3
MzMwMWYwHhcNMjUwMTAyMTU1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQyOTNkMjk5MDZiMDcyNjBkZWIzMGZiNWVlMDE1YzA0NjljNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS2Pl/CUrRUnnGAKLcAbiCFC+idl
2yyO6O4hockuwa785qsMi8wmzH9hDzowJhmzGciq6TtI9Q6zGWkwzI0TC+oDzRqL
K46wSv2KdTgRxeIJ8rLXHMgenCoIdb9zsk6P6vz2CZrb+nrn0yRIKJCFUw29o8Y/
71get2hV30oui/tRzpvYOqLcUZhVrPyk0rLDKKyW4XGUYgc3NHApw/QdqsIsp5AC
5di/M6m3CW1IZA4U6mIoMO2wtJdASYlJHNTdFG+MPFb97t/g8u0jJJfD2hcZ2NlV
JYqCGC9QAVpijH+HoM+d+423BCYNFygFgDWySgp4oddA/TObY9a7qQCIzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNNCk9KZBrByYN6zD7XuAVwEacRLMB8GA1UdIwQY
MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt
ZWViZGNiZDNhZWU4LzEvMDBLVDBwa0dzSEpnM3JNUHRlNEJYQVJweEVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4
LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZKMMA0E
AgACMAcDBQMqB1EAMA0GCSqGSIb3DQEBCwUAA4IBAQBQrPX8iG9mcmdo9+p/8yIb
JLwgMCBprZybMfndHS56atbvLx+atZ78CGBZpDjhtKT0t2O/3ZsCfik9NspxBL0c
5jQARNIXvO4CxLP2IKoVPuPWsnQyzgKGFFWxV71bl9RpcGr+Duxqmpn2rrq1UTuA
bN1SaCJCkEZxIqVI5HTpCnbJNcjrqo0YfGWW9IeRxcpSDXglPn+pAaPOjBVSm9wO
DEjHleUR+nY7KtFS3CHUw6Vx8wBFFevR9vmgBPUnf1/zRaZ+yd5uzVZHgY5UaM+P
833hOutrzi1J7whZuPRxgoR7hwUAUruVTOyU8UZ2nvbUHFksBwo9niaEtfk27JVV
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:08 2025 by rpki-client