Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/6aWypq7nWRiosh_nIqJnKLs1pxw.roa
File: 6aWypq7nWRiosh_nIqJnKLs1pxw.roa (raw, json)
Hash identifier: tpWJ0sD1vHlVdon22MmaR3JFJrj0NiWbUasZSY0pJLQ=
Subject key identifier: E9:A5:B2:A6:AE:E7:59:18:A8:B2:1F:E7:22:A2:67:28:BB:35:A7:1C
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 39BDC766
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/6aWypq7nWRiosh_nIqJnKLs1pxw.roa
Signing time: Mon 20 Jun 2022 13:23:44 +0000
ROA not before: Mon 20 Jun 2022 13:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43289
IP address blocks: 178.175.128.0/19 maxlen: 24
178.17.160.0/20 maxlen: 32
178.175.159.0/24 maxlen: 24
178.175.158.0/24 maxlen: 24
178.175.174.0/23 maxlen: 24
178.175.178.0/23 maxlen: 24
103.197.148.0/22 maxlen: 24
178.175.176.0/23 maxlen: 24
2a00:1dc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968738662 (0x39bdc766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jun 20 13:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9a5b2a6aee75918a8b21fe722a26728bb35a71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:48:31:d0:bc:ec:56:9d:a7:d5:20:a1:03:
f0:2e:82:bb:60:3c:4a:20:6b:88:c5:db:3f:ac:2d:
17:2f:b7:ce:fa:b7:3c:2c:58:0a:2d:08:b7:d1:5a:
48:8a:9e:af:b8:7d:75:24:8d:74:df:28:f4:59:60:
8b:cd:aa:b0:a4:1c:f2:60:0e:d0:3c:97:89:aa:ea:
2e:56:8d:86:36:59:a3:46:56:ac:b9:c7:98:15:07:
d2:3c:61:8e:cb:d5:5d:76:85:65:34:ef:c5:43:fd:
a4:69:df:1a:68:6a:9d:68:00:44:d3:7e:e4:fb:c8:
81:d2:57:4c:19:72:1d:d1:21:d3:08:bf:c1:c9:b7:
20:fe:83:fe:04:b3:5e:13:5b:ac:db:30:03:0c:db:
a3:f4:7d:1b:18:d5:66:6d:15:8b:56:77:89:9d:f2:
45:42:8e:6f:73:6f:e1:29:9b:32:d3:06:f6:3a:89:
20:79:c6:19:04:ab:c9:5e:b8:cd:6c:cd:0f:62:e5:
1b:d0:71:0d:03:59:77:d3:ca:56:4e:50:08:4b:87:
56:4a:12:86:6c:58:17:7c:da:76:b0:e3:76:f6:e4:
69:61:4d:a5:9b:4d:71:61:a9:93:22:ec:2e:fc:15:
6e:1b:1e:b3:ac:c2:5e:66:61:4b:f3:50:93:c6:4e:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:B2:A6:AE:E7:59:18:A8:B2:1F:E7:22:A2:67:28:BB:35:A7:1C
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/6aWypq7nWRiosh_nIqJnKLs1pxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.148.0/22
178.17.160.0/20
178.175.128.0/19
178.175.174.0-178.175.179.255
IPv6:
2a00:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
75:f7:34:8c:8c:c2:ec:75:84:02:48:3c:5d:c5:f5:cf:3c:c6:
d9:75:47:27:b8:2f:b6:11:67:6a:96:ce:f3:28:8e:cc:27:3c:
d9:a7:ae:64:9d:a9:45:86:bc:3e:93:1d:d1:91:8c:59:22:e6:
f5:e5:68:10:8e:23:b6:08:34:a7:f3:1d:ec:5c:5c:72:c8:63:
6f:02:e3:5e:3f:74:28:8a:c8:77:80:38:a2:f2:6e:5f:fb:ae:
2a:b5:1a:65:65:80:ac:97:fd:1f:cd:2f:2f:71:00:d1:79:48:
1a:9d:44:e5:6b:50:77:94:d1:b5:2f:2a:e1:e5:e2:ad:ac:3f:
88:0e:d1:ab:b7:7f:a0:a4:54:eb:d9:f0:06:76:f7:6e:f9:e1:
fb:95:9c:13:dc:14:1d:88:65:4e:c1:80:14:48:88:7c:29:4c:
8c:c0:bf:5e:17:68:b3:18:43:33:7d:6f:f4:69:04:4b:be:71:
b1:5b:13:13:17:a5:b0:47:54:70:b5:fa:5c:71:99:c3:85:11:
4d:36:2c:a3:53:68:eb:96:00:8a:20:26:88:70:c5:0e:2c:e2:
05:3e:7a:21:54:c0:23:d4:c1:18:72:00:35:4d:08:49:0b:df:
b0:5a:38:1e:bd:ff:76:cb:67:9f:08:2b:ef:fd:ab:8e:58:e0:
af:f7:64:34
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIEOb3HZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTFiOTE1MDQ5ODMwOTE1MDZhMWE5NDQ0NTdhNDU1OGI5NGRhYjdmMB4XDTIyMDYy
MDEzMjM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTlhNWIyYTZhZWU3
NTkxOGE4YjIxZmU3MjJhMjY3MjhiYjM1YTcxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANAjSDHQvOxWnafVIKED8C6Cu2A8SiBriMXbP6wtFy+3zvq3
PCxYCi0It9FaSIqer7h9dSSNdN8o9Flgi82qsKQc8mAO0DyXiarqLlaNhjZZo0ZW
rLnHmBUH0jxhjsvVXXaFZTTvxUP9pGnfGmhqnWgARNN+5PvIgdJXTBlyHdEh0wi/
wcm3IP6D/gSzXhNbrNswAwzbo/R9GxjVZm0Vi1Z3iZ3yRUKOb3Nv4SmbMtMG9jqJ
IHnGGQSryV64zWzND2LlG9BxDQNZd9PKVk5QCEuHVkoShmxYF3zadrDjdvbkaWFN
pZtNcWGpkyLsLvwVbhses6zCXmZhS/NQk8ZO5LkCAwEAAaOCAjIwggIuMB0GA1Ud
DgQWBBTppbKmrudZGKiyH+ciomcouzWnHDAfBgNVHSMEGDAWgBS5G5FQSYMJFQah
qURFekVYuU2rfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VSdVJVRW1EQ1JVR29hbEVSWHBGV0xsTnEzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8x
LzZhV3lwcTduV1Jpb3NoX25JcUpuS0xzMXB4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzRlMTdmLWY5ZjQtNDc4OS05MmI3LTlkZDZlODhmY2M4ZC8xL3VSdVJVRW1EQ1JV
R29hbEVSWHBGV0xsTnEzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBI
BggrBgEFBQcBBwEB/wQ5MDcwJgQCAAEwIAMEAmfFlAMEBLIRoAMEBbKvgDAMAwQB
sq+uAwQCsq+wMA0EAgACMAcDBQMqAB3AMA0GCSqGSIb3DQEBCwUAA4IBAQB19zSM
jMLsdYQCSDxdxfXPPMbZdUcnuC+2EWdqls7zKI7MJzzZp65knalFhrw+kx3RkYxZ
Iub15WgQjiO2CDSn8x3sXFxyyGNvAuNeP3Qoish3gDii8m5f+64qtRplZYCsl/0f
zS8vcQDReUganUTla1B3lNG1Lyrh5eKtrD+IDtGrt3+gpFTr2fAGdvdu+eH7lZwT
3BQdiGVOwYAUSIh8KUyMwL9eF2izGEMzfW/0aQRLvnGxWxMTF6WwR1RwtfpccZnD
hRFNNiyjU2jrlgCKICaIcMUOLOIFPnohVMAj1MEYcgA1TQhJC9+wWjgevf92y2ef
CCvv/auOWOCv92Q0
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:29 2025 by rpki-client