Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa
File: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (raw, json)
Hash identifier: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=
Subject key identifier: E8:14:98:A6:4E:51:9C:DB:2E:D0:D3:FE:F0:28:89:E0:0D:FE:78:80
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01941F8C6C27504F7A076511CD4E70FDC476
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204013
IP address blocks: 94.126.50.0/24 maxlen: 24
94.126.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6c:27:50:4f:7a:07:65:11:cd:4e:70:fd:c4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81498a64e519cdb2ed0d3fef02889e00dfe7880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:e3:21:42:22:78:18:d6:f7:ae:6e:13:fc:
47:69:d6:cf:a6:c6:b4:30:a6:30:f1:13:1d:31:98:
80:01:67:14:7b:fc:f9:b1:4f:85:70:2d:ff:63:fe:
2f:62:2f:a0:34:08:4c:9c:53:68:01:c8:55:0e:93:
b6:b2:85:d6:af:62:f9:a3:fa:85:92:eb:0a:1a:80:
c8:81:a7:58:22:d8:ee:f9:34:70:44:bb:50:65:e2:
98:22:36:75:a4:80:9b:20:d3:20:2d:84:cc:59:9a:
e7:6a:a3:45:93:d2:d9:bb:a2:23:da:9e:7b:85:7d:
35:6d:3f:80:b3:88:ff:47:2f:4e:ac:34:5e:35:de:
3d:a7:b7:4f:2b:c2:23:55:67:b4:30:87:0e:b8:8c:
33:6c:af:89:e1:40:cb:36:2e:6d:41:63:bd:1d:e5:
82:90:c0:89:45:30:cf:bf:0d:9f:79:b2:02:83:11:
cf:9f:c2:2d:86:e3:6b:46:e3:dd:27:5f:38:c2:ea:
c2:fa:29:67:da:41:d4:55:90:89:a0:a6:d9:20:8d:
ee:8a:7a:8f:c1:23:6f:27:26:d4:7f:e4:e6:2a:5d:
e5:0e:76:ca:7a:fe:63:e1:04:fb:7c:2d:38:38:1f:
68:e4:a6:c5:55:7b:a5:a4:3a:58:40:d6:0f:f7:5d:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:14:98:A6:4E:51:9C:DB:2E:D0:D3:FE:F0:28:89:E0:0D:FE:78:80
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.50.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:74:7a:05:60:23:e8:ee:af:6a:b2:a1:da:ba:af:2d:54:dc:
cb:c9:90:28:48:ba:de:40:00:9b:68:62:91:49:92:fe:cb:cb:
e5:23:e1:a6:d5:d8:5d:5d:9d:d0:6b:e2:41:9f:f8:2b:e0:91:
42:4c:f7:c6:fa:4c:9e:67:b2:cb:4f:6b:67:f4:06:13:f8:06:
a2:74:76:37:55:dc:eb:94:4a:81:34:59:2c:2f:56:6b:57:64:
44:d8:f9:6b:6f:ee:38:b9:b0:77:39:67:fc:65:37:e9:51:55:
89:9f:12:6d:a6:ed:73:14:39:32:04:77:cc:88:98:a3:11:2b:
4f:8c:c5:03:c7:9f:04:e1:10:5e:0e:13:1b:44:c7:0a:1b:ac:
ff:cb:6a:5a:c0:9e:72:df:96:0a:d6:ad:24:ef:53:c3:1e:3b:
f6:2c:f3:c4:d3:3e:a6:e0:2e:c6:b2:30:0a:2f:d7:82:3f:0f:
69:50:c4:11:5d:be:8b:92:71:3c:40:51:83:49:dc:bc:a5:90:
51:70:5c:3d:bd:a5:f9:45:0e:25:b7:1d:1a:31:c8:c1:a3:a8:
93:55:36:a9:18:60:35:11:bc:35:c0:3d:c8:26:65:84:24:86:
86:62:55:ad:c7:c4:81:ff:1b:ab:92:13:88:99:23:72:1a:87:
e2:f7:c8:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjGwnUE96B2URzU5w/cR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjUwMTAxMDE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODE0OThhNjRlNTE5Y2RiMmVkMGQzZmVmMDI4ODllMDBkZmU3ODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CrjIUIieBjW965uE/xHadbPpsa0
MKYw8RMdMZiAAWcUe/z5sU+FcC3/Y/4vYi+gNAhMnFNoAchVDpO2soXWr2L5o/qF
kusKGoDIgadYItju+TRwRLtQZeKYIjZ1pICbINMgLYTMWZrnaqNFk9LZu6Ij2p57
hX01bT+As4j/Ry9OrDReNd49p7dPK8IjVWe0MIcOuIwzbK+J4UDLNi5tQWO9HeWC
kMCJRTDPvw2febICgxHPn8IthuNrRuPdJ184wurC+iln2kHUVZCJoKbZII3uinqP
wSNvJybUf+TmKl3lDnbKev5j4QT7fC04OB9o5KbFVXulpDpYQNYP911akwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgUmKZOUZzbLtDT/vAoieAN/niAMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvNkJTWXBrNVJuTnN1ME5QLThDaUo0QTMtZUlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXn4yMA0G
CSqGSIb3DQEBCwUAA4IBAQDTdHoFYCPo7q9qsqHauq8tVNzLyZAoSLreQACbaGKR
SZL+y8vlI+Gm1dhdXZ3Qa+JBn/gr4JFCTPfG+kyeZ7LLT2tn9AYT+AaidHY3Vdzr
lEqBNFksL1ZrV2RE2Plrb+44ubB3OWf8ZTfpUVWJnxJtpu1zFDkyBHfMiJijEStP
jMUDx58E4RBeDhMbRMcKG6z/y2pawJ5y35YK1q0k71PDHjv2LPPE0z6m4C7GsjAK
L9eCPw9pUMQRXb6LknE8QFGDSdy8pZBRcFw9vaX5RQ4ltx0aMcjBo6iTVTapGGA1
Ebw1wD3IJmWEJIaGYlWtx8SB/xurkhOImSNyGofi98h7
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:50 2025 by rpki-client