Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/x6Fr-1VeTypvMg38CuYZL6Aoelo.roa
File: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (raw, json)
Hash identifier: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=
Subject key identifier: C7:A1:6B:FB:55:5E:4F:2A:6F:32:0D:FC:0A:E6:19:2F:A0:28:7A:5A
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019541E468267180B88405F1FBD610601403
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/x6Fr-1VeTypvMg38CuYZL6Aoelo.roa
Signing time: Wed 26 Feb 2025 10:54:02 +0000
ROA not before: Wed 26 Feb 2025 10:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204229
IP address blocks: 185.241.116.0/23 maxlen: 23
185.241.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:e4:68:26:71:80:b8:84:05:f1:fb:d6:10:60:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Feb 26 10:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7a16bfb555e4f2a6f320dfc0ae6192fa0287a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:7f:a9:75:f4:17:90:e3:a0:8e:52:b0:4a:
2e:f1:42:6c:e2:78:15:f4:80:cb:54:93:f4:3e:9b:
50:de:67:c0:66:12:c9:d5:96:a5:7a:cb:ee:94:1b:
df:f4:24:97:6c:3d:ec:1a:d0:48:7e:10:3c:27:81:
38:45:7c:eb:b0:fb:69:73:e2:a1:f5:23:0b:37:9a:
d5:e8:e7:b3:b3:2e:78:fd:09:ce:fe:5a:c1:8f:5e:
a7:ae:1e:dd:8d:f3:81:c4:d5:99:7b:87:9b:65:59:
5f:4b:37:fb:9a:77:81:d7:7d:56:ed:05:f6:a5:d1:
52:5f:64:0f:e6:e3:37:a0:e8:d9:eb:3b:e2:40:80:
bf:21:c8:6f:41:11:f9:91:f3:52:65:9d:7d:8d:3e:
28:65:17:cc:8c:3f:b7:c4:fa:38:47:f6:10:3d:5b:
08:2d:69:ed:47:26:5d:e3:99:39:12:d5:10:5d:f9:
91:18:e1:0a:e4:78:95:fe:c9:08:4b:41:72:4f:b0:
03:2c:e2:b2:58:72:da:77:6c:1a:ee:46:68:8b:79:
28:2b:fe:1b:9b:b1:2f:df:b8:0b:1f:16:69:d1:8c:
04:7b:0f:41:70:c7:42:13:b2:cf:0f:64:c0:94:5b:
99:cc:1a:1b:d2:1f:7f:72:2a:b7:ee:47:58:c7:8e:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:6B:FB:55:5E:4F:2A:6F:32:0D:FC:0A:E6:19:2F:A0:28:7A:5A
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/x6Fr-1VeTypvMg38CuYZL6Aoelo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d6:7d:32:9d:cd:40:53:61:48:37:a8:83:49:65:24:e5:96:
21:c1:f5:5c:03:49:6c:be:61:53:69:b4:77:22:fd:e4:7e:1a:
12:be:91:38:bf:f3:00:4f:63:0f:ec:b4:52:03:60:98:98:f9:
5b:df:b5:e9:57:e1:de:ab:04:27:3e:80:f3:e7:57:89:30:d2:
aa:8e:0c:b0:1f:6c:5f:1d:aa:bc:76:52:8d:12:75:4e:74:32:
01:17:6d:13:d4:ce:1c:df:3e:cf:ab:57:c4:69:0b:f1:2f:61:
2e:31:6f:23:bf:e9:8d:0c:f3:f8:f8:d4:de:bc:c5:81:f4:33:
86:19:73:9b:72:2b:fb:60:85:4a:9e:30:a5:3b:fa:5e:ff:cb:
79:51:2d:ef:2d:87:b9:06:54:10:2c:81:80:1b:89:0a:eb:cd:
9b:c1:82:67:ee:fd:1a:3b:a9:d9:36:ca:5b:2e:8a:4a:b3:f4:
41:d2:94:5e:a6:a1:89:93:fb:33:22:ff:b5:a4:fb:41:5f:79:
a0:1a:46:0a:e4:bc:d1:f0:af:f0:fc:10:c6:7f:9c:b2:38:67:
48:91:46:ec:16:16:3c:d7:b9:20:e5:9d:6d:a0:bd:5b:1e:fa:
e7:1e:be:cb:d1:22:ac:8c:d5:0f:13:df:14:00:60:36:f6:40:
ad:10:38:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVB5GgmcYC4hAXx+9YQYBQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjUwMjI2MTA1NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2ExNmJmYjU1NWU0ZjJhNmYzMjBkZmMwYWU2MTkyZmEwMjg3YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tB/qXX0F5DjoI5SsEou8UJs4ngV
9IDLVJP0PptQ3mfAZhLJ1ZalesvulBvf9CSXbD3sGtBIfhA8J4E4RXzrsPtpc+Kh
9SMLN5rV6Oezsy54/QnO/lrBj16nrh7djfOBxNWZe4ebZVlfSzf7mneB131W7QX2
pdFSX2QP5uM3oOjZ6zviQIC/IchvQRH5kfNSZZ19jT4oZRfMjD+3xPo4R/YQPVsI
LWntRyZd45k5EtUQXfmRGOEK5HiV/skIS0FyT7ADLOKyWHLad2wa7kZoi3koK/4b
m7Ev37gLHxZp0YwEew9BcMdCE7LPD2TAlFuZzBob0h9/ciq37kdYx46q1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMeha/tVXk8qbzIN/ArmGS+gKHpaMB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEveDZGci0xVmVUeXB2TWczOEN1WVpMNkFvZWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufF0MA0G
CSqGSIb3DQEBCwUAA4IBAQA71n0ync1AU2FIN6iDSWUk5ZYhwfVcA0lsvmFTabR3
Iv3kfhoSvpE4v/MAT2MP7LRSA2CYmPlb37XpV+HeqwQnPoDz51eJMNKqjgywH2xf
Haq8dlKNEnVOdDIBF20T1M4c3z7Pq1fEaQvxL2EuMW8jv+mNDPP4+NTevMWB9DOG
GXObciv7YIVKnjClO/pe/8t5US3vLYe5BlQQLIGAG4kK682bwYJn7v0aO6nZNspb
LopKs/RB0pRepqGJk/szIv+1pPtBX3mgGkYK5LzR8K/w/BDGf5yyOGdIkUbsFhY8
17kg5Z1toL1bHvrnHr7L0SKsjNUPE98UAGA29kCtEDhV
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:24 2025 by rpki-client