Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/6xUnoc1wAnSrf2dpU2UTzibFAZU.roa
File: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (raw, json)
Hash identifier: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=
Subject key identifier: EB:15:27:A1:CD:70:02:74:AB:7F:67:69:53:65:13:CE:26:C5:01:95
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 01941F8C0B7F7C14BCFA2923F81CCF2A85A3
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/6xUnoc1wAnSrf2dpU2UTzibFAZU.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 185.28.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:7f:7c:14:bc:fa:29:23:f8:1c:cf:2a:85:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb1527a1cd700274ab7f6769536513ce26c50195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:3e:2d:76:81:24:1b:ab:0a:02:c7:f5:ed:
52:d5:d8:b7:d1:25:a5:13:18:da:63:71:b9:3e:b8:
55:d6:f1:ea:ac:ef:b8:3e:a1:2a:5b:71:15:44:f0:
f8:81:b4:57:59:66:a9:cf:39:23:d2:a0:cd:cf:3b:
7e:d0:48:4f:2d:64:76:be:8f:ad:00:41:0f:ed:de:
4f:ce:d6:61:6d:1f:89:f5:f4:82:84:be:ad:3a:50:
3c:77:1e:b4:08:82:69:85:1a:2b:c8:31:ab:f1:8b:
4e:34:08:d3:4b:7f:ba:83:b6:49:6a:af:f8:76:4b:
e9:1d:da:59:fb:66:af:0d:55:87:0b:87:5d:84:d0:
d3:14:75:b9:10:b9:f0:39:c5:fd:c7:a9:d2:5a:64:
4d:df:6d:b1:0f:4d:8c:f7:80:9a:ca:3a:39:f9:98:
20:49:11:ff:44:32:41:29:9c:1a:2c:a0:34:bf:81:
2f:35:68:04:a7:23:a3:dc:23:0f:bd:ab:e5:7f:e5:
d4:3e:7d:22:35:07:c3:a8:e6:2e:62:f4:cf:fd:7c:
a3:96:c4:e1:39:a6:49:25:3c:42:c0:e9:ce:7e:b8:
cb:9f:04:c9:a5:1d:d6:eb:e2:fc:67:2f:ed:fd:78:
28:37:5d:f8:49:7d:82:1a:34:31:2e:1b:07:5b:37:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:27:A1:CD:70:02:74:AB:7F:67:69:53:65:13:CE:26:C5:01:95
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/6xUnoc1wAnSrf2dpU2UTzibFAZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:81:cf:da:21:7a:54:01:2a:3a:63:1a:0e:20:9a:b6:e9:7b:
c4:5d:f5:1c:05:9f:92:b4:72:40:0e:ba:d1:83:f4:74:a2:34:
fb:90:99:63:5c:54:ac:ae:6a:52:47:d3:9a:bf:63:98:54:1b:
f8:f8:31:1a:b4:9a:8d:5d:f0:23:16:34:c9:8c:32:72:a8:80:
2e:2c:6d:d5:51:3b:5f:ab:be:27:e3:da:5b:10:46:5f:65:ee:
77:fd:be:8d:c6:cf:82:75:5e:43:03:9b:5d:62:7a:95:63:17:
65:14:51:37:85:aa:28:14:f7:d8:cb:74:f1:5d:d0:24:e2:56:
2e:2b:f7:d4:b0:c1:1a:df:cd:2f:40:99:59:10:99:87:79:6a:
76:6d:7d:58:70:8d:10:78:24:07:00:22:11:92:78:b2:fe:04:
8c:74:a6:aa:11:01:a8:e8:38:b9:fd:e3:5e:da:7c:69:c5:ef:
46:36:8e:01:52:cf:6e:3f:a5:ee:bb:29:d4:6c:f5:d0:a5:a2:
41:73:c8:86:3b:99:77:01:e3:ae:89:0a:89:6e:53:ea:73:fc:
10:56:ca:57:86:2a:30:c9:a3:95:01:03:ff:a2:41:b7:8f:8e:
33:57:a0:87:a5:c0:f9:9d:f0:29:38:12:62:c9:a7:1d:4f:c1:
a7:f9:33:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjAt/fBS8+ikj+BzPKoWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDMyYTNlMThiODRlZTNjNTRlMzRmYTY3ZGM2OGVmMTlk
MmI3YjMwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjE1MjdhMWNkNzAwMjc0YWI3ZjY3Njk1MzY1MTNjZTI2YzUwMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu4+LXaBJBurCgLH9e1S1di30SWl
ExjaY3G5PrhV1vHqrO+4PqEqW3EVRPD4gbRXWWapzzkj0qDNzzt+0EhPLWR2vo+t
AEEP7d5PztZhbR+J9fSChL6tOlA8dx60CIJphRoryDGr8YtONAjTS3+6g7ZJaq/4
dkvpHdpZ+2avDVWHC4ddhNDTFHW5ELnwOcX9x6nSWmRN322xD02M94Cayjo5+Zgg
SRH/RDJBKZwaLKA0v4EvNWgEpyOj3CMPvavlf+XUPn0iNQfDqOYuYvTP/XyjlsTh
OaZJJTxCwOnOfrjLnwTJpR3W6+L8Zy/t/XgoN134SX2CGjQxLhsHWzf/nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsVJ6HNcAJ0q39naVNlE84mxQGVMB8GA1UdIwQY
MBaAFOTTKj4YuE7jxU40+mfcaO8Z0rezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQt
ODdjMmU4ZjM5MTRlLzEvNnhVbm9jMXdBblNyZjJkcFUyVVR6aWJGQVpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQtODdjMmU4ZjM5MTRl
LzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRx3MA0G
CSqGSIb3DQEBCwUAA4IBAQC5gc/aIXpUASo6YxoOIJq26XvEXfUcBZ+StHJADrrR
g/R0ojT7kJljXFSsrmpSR9Oav2OYVBv4+DEatJqNXfAjFjTJjDJyqIAuLG3VUTtf
q74n49pbEEZfZe53/b6Nxs+CdV5DA5tdYnqVYxdlFFE3haooFPfYy3TxXdAk4lYu
K/fUsMEa380vQJlZEJmHeWp2bX1YcI0QeCQHACIRkniy/gSMdKaqEQGo6Di5/eNe
2nxpxe9GNo4BUs9uP6XuuynUbPXQpaJBc8iGO5l3AeOuiQqJblPqc/wQVspXhiow
yaOVAQP/okG3j44zV6CHpcD5nfApOBJiyacdT8Gn+TPb
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:10 2025 by rpki-client