Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/6WH-2thvqB-e2s9Fz_imyr6m69I.roa
File: 6WH-2thvqB-e2s9Fz_imyr6m69I.roa (raw, json)
Hash identifier: Nnq4pPKoMxr3q0BGYwBu9twzf/NwTHTZGOPMM7rzxSk=
Subject key identifier: E9:61:FE:DA:D8:6F:A8:1F:9E:DA:CF:45:CF:F8:A6:CA:BE:A6:EB:D2
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 019426D9D29D848FEE6ED9029966B0E0BDC4
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/6WH-2thvqB-e2s9Fz_imyr6m69I.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 185.130.28.0/22 maxlen: 24
185.130.29.0/24 maxlen: 24
185.130.30.0/24 maxlen: 24
193.163.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d2:9d:84:8f:ee:6e:d9:02:99:66:b0:e0:bd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e961fedad86fa81f9edacf45cff8a6cabea6ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:75:24:ee:86:e6:53:c2:1b:c3:ba:5e:8e:
a4:77:af:03:df:b4:3a:e5:7d:17:50:76:ea:42:21:
90:9e:e5:0a:47:5b:c7:97:95:82:8b:c4:e1:5f:ad:
38:b3:76:1c:92:aa:f6:8e:9b:40:7d:0b:1f:63:9b:
62:3d:9e:89:98:fd:f0:8f:92:da:3b:5b:1a:fb:29:
b3:fc:be:b3:7b:1f:2d:f9:0a:a6:1e:9e:e7:48:d6:
38:b6:20:c9:d4:91:2c:5e:17:6b:e0:5d:65:09:80:
1e:51:04:43:59:01:5b:17:15:64:9d:a5:82:81:d3:
fc:56:7d:4c:41:be:83:d7:ce:60:f7:6b:e4:b0:e1:
f8:7d:af:6b:2f:20:e8:7e:7c:be:6f:80:be:56:aa:
d1:11:46:ca:01:37:d2:3a:c9:f2:d7:98:5f:d9:32:
9a:ef:77:af:4a:bf:9f:96:32:28:fc:dc:6f:b5:74:
16:4d:90:db:98:e8:8b:5e:a7:72:bd:ac:d8:6a:18:
1d:51:75:1c:06:89:df:34:05:c4:26:d5:a4:d2:98:
13:44:4d:f9:6a:2b:92:87:2a:86:89:bf:37:95:4a:
12:6f:16:3f:d8:0d:03:fb:11:5b:35:5e:69:f0:6e:
33:43:34:09:d5:6b:d4:13:a3:cd:f5:71:75:29:fe:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:61:FE:DA:D8:6F:A8:1F:9E:DA:CF:45:CF:F8:A6:CA:BE:A6:EB:D2
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/6WH-2thvqB-e2s9Fz_imyr6m69I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.28.0/22
193.163.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a6:95:3b:a1:88:b9:9b:b0:33:5a:28:ae:40:49:db:14:26:
c1:67:e3:c1:1c:36:39:00:00:76:94:0c:2d:b9:4c:9c:99:65:
a1:5e:4f:23:7f:f7:4b:d8:70:2c:82:57:3a:0d:fc:8a:66:9c:
89:8e:1a:99:6b:97:99:1c:d9:c3:35:86:df:c0:66:1a:62:9f:
d5:c3:9a:03:8a:48:ed:97:b7:13:af:1b:82:2e:68:4b:ac:60:
92:04:07:e2:e3:17:19:99:85:c7:9e:cb:e4:5b:14:8f:c5:61:
bc:da:44:41:38:df:58:8e:ad:a8:57:b2:ca:18:87:f5:32:22:
9f:34:b8:bf:4f:12:17:50:93:fe:72:49:88:25:92:5d:4b:0b:
96:93:2f:cc:e5:b0:4a:18:69:82:5c:d9:9b:e7:ce:2a:bc:57:
b0:6b:43:b6:39:6d:d1:34:9d:04:1c:23:30:e5:dd:aa:9a:d3:
05:58:34:3f:da:a5:47:69:53:c0:67:a8:1b:b1:44:9a:85:c0:
15:d4:73:9c:b3:a7:c4:81:87:8d:f0:3d:0d:ed:c7:9d:1a:e8:
8e:01:19:1c:98:0b:81:f2:28:af:dc:ac:36:0b:91:f3:38:b0:
5c:da:c8:83:29:2f:66:64:ae:b3:be:f9:d1:29:36:6f:c4:8d:
91:49:ff:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2dKdhI/ubtkCmWaw4L3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTQ5OTJiYTQ4OGE4NzJjODljYmRmNDJjYTRkZjg5NWU2
MDljNTMwHhcNMjUwMTAyMTE0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTYxZmVkYWQ4NmZhODFmOWVkYWNmNDVjZmY4YTZjYWJlYTZlYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8J1JO6G5lPCG8O6Xo6kd68D37Q6
5X0XUHbqQiGQnuUKR1vHl5WCi8ThX604s3Yckqr2jptAfQsfY5tiPZ6JmP3wj5La
O1sa+ymz/L6zex8t+QqmHp7nSNY4tiDJ1JEsXhdr4F1lCYAeUQRDWQFbFxVknaWC
gdP8Vn1MQb6D185g92vksOH4fa9rLyDofny+b4C+VqrREUbKATfSOsny15hf2TKa
73evSr+fljIo/NxvtXQWTZDbmOiLXqdyvazYahgdUXUcBonfNAXEJtWk0pgTRE35
aiuShyqGib83lUoSbxY/2A0D+xFbNV5p8G4zQzQJ1WvUE6PN9XF1Kf4QPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOlh/trYb6gfntrPRc/4psq+puvSMB8GA1UdIwQY
MBaAFLdUmSukiKhyyJy99Cyk34leYJxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFTWks2U0lxSExJbkwzMExLVGZpVjVnbkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80YTgzOWUtYzg2YS00OWVlLTk4OWUt
N2M0MmM0OTRlZjhkLzEvNldILTJ0aHZxQi1lMnM5RnpfaW15cjZtNjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80YTgzOWUtYzg2YS00OWVlLTk4OWUtN2M0MmM0OTRlZjhk
LzEvdDFTWks2U0lxSExJbkwzMExLVGZpVjVnbkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYIcAwQA
waN+MA0GCSqGSIb3DQEBCwUAA4IBAQCNppU7oYi5m7AzWiiuQEnbFCbBZ+PBHDY5
AAB2lAwtuUycmWWhXk8jf/dL2HAsglc6DfyKZpyJjhqZa5eZHNnDNYbfwGYaYp/V
w5oDikjtl7cTrxuCLmhLrGCSBAfi4xcZmYXHnsvkWxSPxWG82kRBON9Yjq2oV7LK
GIf1MiKfNLi/TxIXUJP+ckmIJZJdSwuWky/M5bBKGGmCXNmb584qvFewa0O2OW3R
NJ0EHCMw5d2qmtMFWDQ/2qVHaVPAZ6gbsUSahcAV1HOcs6fEgYeN8D0N7cedGuiO
ARkcmAuB8iiv3Kw2C5HzOLBc2siDKS9mZK6zvvnRKTZvxI2RSf+z
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:49 2025 by rpki-client