Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/v6hueYNyF9uNlLtlUb0AzeNT4cA.roa
File: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (raw, json)
Hash identifier: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=
Subject key identifier: BF:A8:6E:79:83:72:17:DB:8D:94:BB:65:51:BD:00:CD:E3:53:E1:C0
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 019427469445AD34B5B066344856FC4A0951
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/v6hueYNyF9uNlLtlUb0AzeNT4cA.roa
Signing time: Thu 02 Jan 2025 13:48:44 +0000
ROA not before: Thu 02 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.57.244.0/24 maxlen: 24
185.57.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:94:45:ad:34:b5:b0:66:34:48:56:fc:4a:09:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jan 2 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfa86e79837217db8d94bb6551bd00cde353e1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:54:a0:06:14:c5:fd:77:6c:7a:67:0b:03:
8e:bd:ee:a3:b3:ec:0f:f2:12:ce:56:33:26:ef:0b:
50:94:60:cd:d2:99:ca:25:08:56:b3:b7:d7:63:a7:
69:e1:a2:bd:ff:a0:2c:9b:f2:28:bb:82:1a:d6:ce:
2d:ea:d5:68:6a:e2:ae:46:d6:f5:07:46:3f:e7:09:
49:59:ac:b7:66:75:08:f9:db:c6:73:43:69:cb:20:
df:eb:b4:06:34:93:6c:97:95:cc:c4:cd:5d:50:b1:
89:75:50:ab:e8:16:8e:30:c6:d8:34:dd:e4:f6:7b:
8d:23:9a:15:b6:c9:2a:83:6e:c9:2f:26:37:67:07:
91:26:01:cb:ac:7a:4b:9f:e1:9c:b3:ef:38:61:69:
65:51:a9:85:6e:e3:45:17:7b:40:66:e9:eb:8f:b5:
a2:91:96:db:36:c2:42:50:72:2f:26:c7:dd:0c:a5:
00:f9:10:11:98:d3:fe:0c:66:15:99:a0:29:37:11:
93:5c:a2:25:20:ed:92:e7:5e:f0:48:47:ac:09:ab:
b4:67:4e:00:66:39:40:f7:91:86:05:fa:bf:13:b5:
28:41:c7:b2:c3:94:38:cc:d1:5c:da:14:09:bf:d6:
8b:6b:47:d3:ca:19:70:85:fa:92:42:41:0b:21:cc:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:6E:79:83:72:17:DB:8D:94:BB:65:51:BD:00:CD:E3:53:E1:C0
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/v6hueYNyF9uNlLtlUb0AzeNT4cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.244.0/23
Signature Algorithm: sha256WithRSAEncryption
90:82:a0:fb:9f:9d:b0:22:72:23:fd:ed:c0:5c:c5:15:c5:a2:
73:d8:56:ef:81:15:df:c9:84:32:e9:1c:c0:92:66:7a:9b:24:
0c:d9:9f:15:0d:d0:1d:62:44:3b:32:f1:1e:57:6c:3f:08:eb:
1f:f5:95:dd:51:bf:24:5a:ff:ab:0b:a2:41:65:39:a3:da:e3:
05:1e:89:14:a3:92:ba:71:d0:3a:d1:74:a6:90:e4:93:1f:77:
5d:84:f2:fc:35:52:81:27:1e:7f:3f:ab:a9:a2:db:db:f7:10:
3d:34:f8:25:4d:75:c0:08:6f:02:c1:fe:ad:b5:35:7d:e2:6f:
dd:f0:39:25:11:02:d0:35:e4:81:6f:46:22:c3:a9:b9:37:e1:
54:8f:9a:d0:5f:b7:07:3c:75:dc:a4:a4:bb:fa:f8:78:91:e7:
f0:71:68:0c:c6:41:fa:e0:13:1e:7d:bb:8c:4d:02:18:62:af:
6e:31:42:b3:5a:13:ec:7b:eb:7d:7e:18:84:32:fa:f2:08:5c:
cf:d7:83:6c:c2:47:19:a1:09:16:33:58:88:d1:28:df:e2:54:
9d:ee:cb:b1:5e:21:a5:a9:3b:61:33:26:f4:89:33:55:f8:25:
63:04:c0:00:dc:9a:bf:d2:c8:ee:ab:e5:5d:f9:f9:18:2f:23:
f8:26:1e:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRpRFrTS1sGY0SFb8SglRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTRhYzYyMjRmZTE5NDQ0MjBkYzNhOThkZDYzYWJhZTRh
ZjdlMDAwHhcNMjUwMTAyMTM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmE4NmU3OTgzNzIxN2RiOGQ5NGJiNjU1MWJkMDBjZGUzNTNlMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovhUoAYUxf13bHpnCwOOve6js+wP
8hLOVjMm7wtQlGDN0pnKJQhWs7fXY6dp4aK9/6Asm/Iou4Ia1s4t6tVoauKuRtb1
B0Y/5wlJWay3ZnUI+dvGc0NpyyDf67QGNJNsl5XMxM1dULGJdVCr6BaOMMbYNN3k
9nuNI5oVtskqg27JLyY3ZweRJgHLrHpLn+Gcs+84YWllUamFbuNFF3tAZunrj7Wi
kZbbNsJCUHIvJsfdDKUA+RARmNP+DGYVmaApNxGTXKIlIO2S517wSEesCau0Z04A
ZjlA95GGBfq/E7UoQceyw5Q4zNFc2hQJv9aLa0fTyhlwhfqSQkELIcwRWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+obnmDchfbjZS7ZVG9AM3jU+HAMB8GA1UdIwQY
MBaAFOLkrGIk/hlEQg3DqY3WOrrkr34AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWIt
YmE0ZDA2ZGYwYmU1LzEvdjZodWVZTnlGOXVObEx0bFViMEF6ZU5UNGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWItYmE0ZDA2ZGYwYmU1
LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTn0MA0G
CSqGSIb3DQEBCwUAA4IBAQCQgqD7n52wInIj/e3AXMUVxaJz2FbvgRXfyYQy6RzA
kmZ6myQM2Z8VDdAdYkQ7MvEeV2w/COsf9ZXdUb8kWv+rC6JBZTmj2uMFHokUo5K6
cdA60XSmkOSTH3ddhPL8NVKBJx5/P6upotvb9xA9NPglTXXACG8Cwf6ttTV94m/d
8DklEQLQNeSBb0Yiw6m5N+FUj5rQX7cHPHXcpKS7+vh4kefwcWgMxkH64BMefbuM
TQIYYq9uMUKzWhPse+t9fhiEMvryCFzP14NswkcZoQkWM1iI0Sjf4lSd7suxXiGl
qTthMyb0iTNV+CVjBMAA3Jq/0sjuq+Vd+fkYLyP4Jh6v
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:14:59 2025 by rpki-client