Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6OE9SiBXfj4CrhXl1IhIqgML0B4.roa
File: 6OE9SiBXfj4CrhXl1IhIqgML0B4.roa (raw, json)
Hash identifier: I+4fgDm8h6Gl2QM6feCA3XQ/vqIKkpArxBydFon12po=
Subject key identifier: E8:E1:3D:4A:20:57:7E:3E:02:AE:15:E5:D4:88:48:AA:03:0B:D0:1E
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239EBA97F6F082DCBAC82D718A0F49
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6OE9SiBXfj4CrhXl1IhIqgML0B4.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210392
IP address blocks: 185.180.128.0/22 maxlen: 24
2a0a:a480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9e:ba:97:f6:f0:82:dc:ba:c8:2d:71:8a:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8e13d4a20577e3e02ae15e5d48848aa030bd01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:64:9b:71:07:9e:92:3f:9c:a2:01:a0:ad:
1d:a2:d2:de:ee:70:28:84:a2:4f:49:87:e5:4a:e6:
d7:a7:e6:7a:7b:cc:e0:d2:f9:e2:a9:ce:b0:5e:6c:
f7:dd:37:a2:91:8e:b3:fd:86:35:5d:44:61:9b:09:
39:ec:e2:6e:2c:e3:22:d8:1c:31:89:a2:ee:52:f9:
43:27:44:8c:09:61:65:12:15:74:1d:34:df:fb:95:
bd:e2:dc:e7:46:0d:f4:59:1a:ce:3b:b9:e1:fd:d8:
6b:07:bc:5b:da:34:06:8a:ca:c8:61:2a:cb:fb:f6:
15:5f:13:c0:66:45:7b:36:0f:bc:52:1f:54:9e:2f:
3b:9d:a2:be:e8:4b:cc:29:06:05:db:d5:ed:5e:9a:
b2:bf:1e:5c:bf:62:85:47:3d:bd:eb:80:e0:42:93:
ce:1a:aa:f7:8d:f9:5d:15:95:03:1d:eb:6d:ce:63:
7c:4b:6c:39:71:0b:07:3a:e8:24:e4:0f:00:fe:bd:
22:6f:9c:24:48:21:23:51:47:17:85:cd:75:14:59:
6d:13:80:89:87:a9:65:e2:2b:0f:47:af:7d:7d:88:
f7:3b:48:1e:97:ec:b7:e9:b7:1b:c9:33:b1:02:74:
8b:d4:c6:b1:84:09:67:0e:dd:96:d7:8c:35:ab:75:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:3D:4A:20:57:7E:3E:02:AE:15:E5:D4:88:48:AA:03:0B:D0:1E
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6OE9SiBXfj4CrhXl1IhIqgML0B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.128.0/22
IPv6:
2a0a:a480::/29
Signature Algorithm: sha256WithRSAEncryption
b1:87:f0:a2:8c:e2:22:a3:1d:b0:a3:ba:35:30:fc:c5:b3:5f:
45:c9:e0:cd:a6:b0:35:2e:77:d5:53:ad:4f:1b:a2:60:88:da:
d2:a8:5c:01:50:8d:5f:3c:48:f9:b7:24:ae:d5:d3:d1:0c:97:
44:52:77:49:2d:73:49:0a:7a:40:e0:a1:91:e3:da:0e:e9:61:
cd:99:24:d3:bf:de:ce:f3:89:0b:0e:bc:75:85:18:62:68:20:
17:76:fa:28:90:18:06:ad:45:f0:c2:c5:d6:b3:a0:a3:48:68:
94:f9:53:f8:0a:4e:3f:74:84:a3:f3:d7:18:d9:ea:22:58:7a:
02:1c:32:49:5c:97:49:09:35:aa:82:e0:4f:d6:74:01:2f:ac:
31:c8:7c:49:40:ce:48:05:a4:63:54:92:da:60:17:a5:02:57:
45:8d:1a:5f:f6:3e:ac:88:5d:08:5c:dc:e4:eb:95:45:d1:fc:
31:cd:43:c2:4c:c5:58:1e:47:7a:0a:b6:e8:0e:df:ca:b7:92:
6d:2e:b8:0c:6e:90:76:2c:07:20:86:13:8b:6f:c1:be:d3:3a:
56:9b:86:5d:67:82:d0:8c:be:4c:13:cf:0c:6e:6a:f1:db:97:
08:08:17:1c:28:a0:16:85:13:b0:30:3b:ab:21:54:3f:d9:cb:
17:b5:3a:5b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoI566l/bwgty6yC1xig9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjUwMTAyMTc1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGUxM2Q0YTIwNTc3ZTNlMDJhZTE1ZTVkNDg4NDhhYTAzMGJkMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XBkm3EHnpI/nKIBoK0dotLe7nAo
hKJPSYflSubXp+Z6e8zg0vniqc6wXmz33TeikY6z/YY1XURhmwk57OJuLOMi2Bwx
iaLuUvlDJ0SMCWFlEhV0HTTf+5W94tznRg30WRrOO7nh/dhrB7xb2jQGisrIYSrL
+/YVXxPAZkV7Ng+8Uh9Uni87naK+6EvMKQYF29XtXpqyvx5cv2KFRz2964DgQpPO
Gqr3jfldFZUDHettzmN8S2w5cQsHOugk5A8A/r0ib5wkSCEjUUcXhc11FFltE4CJ
h6ll4isPR699fYj3O0gel+y36bcbyTOxAnSL1MaxhAlnDt2W14w1q3X5MQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOjhPUogV34+Aq4V5dSISKoDC9AeMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvNk9FOVNpQlhmajRDcmhYbDFJaElxZ01MMEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubSAMA0E
AgACMAcDBQMqCqSAMA0GCSqGSIb3DQEBCwUAA4IBAQCxh/CijOIiox2wo7o1MPzF
s19FyeDNprA1LnfVU61PG6JgiNrSqFwBUI1fPEj5tySu1dPRDJdEUndJLXNJCnpA
4KGR49oO6WHNmSTTv97O84kLDrx1hRhiaCAXdvookBgGrUXwwsXWs6CjSGiU+VP4
Ck4/dISj89cY2eoiWHoCHDJJXJdJCTWqguBP1nQBL6wxyHxJQM5IBaRjVJLaYBel
AldFjRpf9j6siF0IXNzk65VF0fwxzUPCTMVYHkd6CrboDt/Kt5JtLrgMbpB2LAcg
hhOLb8G+0zpWm4ZdZ4LQjL5ME88Mbmrx25cICBccKKAWhROwMDurIVQ/2csXtTpb
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:39:48 2025 by rpki-client