Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/6NZRnUE5rHquhh6nv9A14s2aRkA.roa
File: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (raw, json)
Hash identifier: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=
Subject key identifier: E8:D6:51:9D:41:39:AC:7A:AE:86:1E:A7:BF:D0:35:E2:CD:9A:46:40
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 01942823BBCACB71443FB5C086B8F02939E2
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/6NZRnUE5rHquhh6nv9A14s2aRkA.roa
Signing time: Thu 02 Jan 2025 17:50:17 +0000
ROA not before: Thu 02 Jan 2025 17:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199803
IP address blocks: 185.45.200.0/22 maxlen: 22
2a01:7fe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:bb:ca:cb:71:44:3f:b5:c0:86:b8:f0:29:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Jan 2 17:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d6519d4139ac7aae861ea7bfd035e2cd9a4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:f2:ba:82:72:33:f0:8f:72:4a:34:ee:79:
12:51:bf:48:ff:2f:74:e4:4f:09:0f:2c:50:75:b7:
be:a1:02:4c:fc:9f:21:a8:2a:51:62:24:27:6b:1d:
b6:03:0f:b0:a1:c5:8f:64:27:ac:6e:fd:c9:db:28:
13:45:fa:21:30:67:df:93:f5:3b:e1:4b:45:eb:07:
da:2a:3f:80:ee:ed:88:66:9a:d9:70:5a:b9:54:46:
6d:12:71:97:24:b9:05:5a:e3:59:44:b4:6b:c0:48:
91:8f:63:43:af:9f:d0:e7:03:af:54:a1:be:f9:19:
e4:ac:2f:49:3d:d2:ff:cc:94:dc:d1:bc:20:bc:71:
ee:78:93:b6:33:16:79:30:cb:c6:28:eb:8a:f1:c2:
ad:7e:d3:f3:ca:e3:d5:05:35:ba:c1:c0:73:f4:4c:
d5:fc:4b:6c:d0:03:e1:67:e3:3b:51:61:55:a6:77:
28:46:af:06:93:32:22:8c:46:ad:d3:8b:4d:ac:9e:
be:4c:80:a4:cd:d4:5d:c3:55:76:60:a6:56:40:7e:
14:c6:34:d8:11:07:48:ef:6a:55:b2:93:a7:95:91:
3f:40:4e:7d:95:8d:8e:bc:14:34:db:e2:83:d4:c9:
f3:50:98:3f:9f:b5:d0:a2:f7:41:95:8d:77:22:2b:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:51:9D:41:39:AC:7A:AE:86:1E:A7:BF:D0:35:E2:CD:9A:46:40
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/6NZRnUE5rHquhh6nv9A14s2aRkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.200.0/22
IPv6:
2a01:7fe0::/32
Signature Algorithm: sha256WithRSAEncryption
16:fd:d4:64:43:53:eb:9c:48:f6:a1:19:3c:97:a5:0a:50:11:
9c:37:a9:1e:b9:34:af:6b:33:d4:4d:4d:bc:d8:be:43:c3:4f:
ad:b4:46:67:1b:59:c9:e4:b4:3b:ea:7c:7a:02:93:eb:28:dc:
be:4a:32:d1:14:65:10:d8:3c:50:2f:4e:53:76:04:1d:7f:0b:
bd:99:72:08:db:5d:72:5f:74:d0:5e:72:fe:d1:39:82:8b:bb:
72:f5:c9:3b:7b:1a:9e:f1:2b:2b:8f:fd:37:61:43:50:06:30:
eb:51:d4:83:7a:5c:cd:50:26:f0:6d:f0:7c:bb:5d:0c:59:cc:
54:29:4a:49:90:6c:03:d4:f7:36:d3:59:34:00:da:9c:5a:90:
a7:1b:90:0d:db:a2:25:ee:d5:f2:af:a9:d6:0f:61:7a:6d:56:
72:42:13:1f:03:ad:c5:16:23:45:13:63:9b:f8:76:7f:00:4e:
36:6e:67:86:c4:ec:c6:54:74:4b:f7:1c:60:e7:94:0f:dd:12:
13:a1:f1:1e:66:62:ca:f5:9f:5f:53:e4:ac:86:54:a0:7c:cf:
eb:7f:64:a0:7f:a5:6d:4a:4d:c0:a9:78:fc:ed:01:9b:4e:fe:
bf:c4:77:a4:a3:de:50:5f:3d:0b:74:42:52:a1:40:ed:02:1e:
a1:13:d8:d3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoI7vKy3FEP7XAhrjwKTniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjFlMzFjMDlmZTgyNmZlNGQ3OTJlN2ZhODg1NWUwYWQz
OTM0MmEwHhcNMjUwMTAyMTc1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQ2NTE5ZDQxMzlhYzdhYWU4NjFlYTdiZmQwMzVlMmNkOWE0NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8PyuoJyM/CPcko07nkSUb9I/y90
5E8JDyxQdbe+oQJM/J8hqCpRYiQnax22Aw+wocWPZCesbv3J2ygTRfohMGffk/U7
4UtF6wfaKj+A7u2IZprZcFq5VEZtEnGXJLkFWuNZRLRrwEiRj2NDr5/Q5wOvVKG+
+RnkrC9JPdL/zJTc0bwgvHHueJO2MxZ5MMvGKOuK8cKtftPzyuPVBTW6wcBz9EzV
/Ets0APhZ+M7UWFVpncoRq8GkzIijEat04tNrJ6+TICkzdRdw1V2YKZWQH4UxjTY
EQdI72pVspOnlZE/QE59lY2OvBQ02+KD1MnzUJg/n7XQovdBlY13Iita+QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOjWUZ1BOax6roYep7/QNeLNmkZAMB8GA1UdIwQY
MBaAFGGx4xwJ/oJv5NeS5/qIVeCtOTQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAt
NjE5MWI5ZDBjZGEzLzEvNk5aUm5VRTVySHF1aGg2bnY5QTE0czJhUmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAtNjE5MWI5ZDBjZGEz
LzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS3IMA0E
AgACMAcDBQAqAX/gMA0GCSqGSIb3DQEBCwUAA4IBAQAW/dRkQ1PrnEj2oRk8l6UK
UBGcN6keuTSvazPUTU282L5Dw0+ttEZnG1nJ5LQ76nx6ApPrKNy+SjLRFGUQ2DxQ
L05TdgQdfwu9mXII211yX3TQXnL+0TmCi7ty9ck7exqe8Ssrj/03YUNQBjDrUdSD
elzNUCbwbfB8u10MWcxUKUpJkGwD1Pc201k0ANqcWpCnG5AN26Il7tXyr6nWD2F6
bVZyQhMfA63FFiNFE2Ob+HZ/AE42bmeGxOzGVHRL9xxg55QP3RITofEeZmLK9Z9f
U+SshlSgfM/rf2Sgf6VtSk3AqXj87QGbTv6/xHeko95QXz0LdEJSoUDtAh6hE9jT
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:02 2025 by rpki-client