Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/6LgX5MehzRAabFx-kl7-VX8WvGI.roa
File: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (raw, json)
Hash identifier: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=
Subject key identifier: E8:B8:17:E4:C7:A1:CD:10:1A:6C:5C:7E:92:5E:FE:55:7F:16:BC:62
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019427B4ABD0649E0737280ABB7B9494F134
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/6LgX5MehzRAabFx-kl7-VX8WvGI.roa
Signing time: Thu 02 Jan 2025 15:48:59 +0000
ROA not before: Thu 02 Jan 2025 15:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 185.197.165.0/24 maxlen: 24
185.197.166.0/24 maxlen: 24
185.197.167.0/24 maxlen: 24
2a0a:7bc0::/32 maxlen: 32
2a0a:7bc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:ab:d0:64:9e:07:37:28:0a:bb:7b:94:94:f1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jan 2 15:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b817e4c7a1cd101a6c5c7e925efe557f16bc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:f8:f6:12:f0:db:13:33:7c:02:1d:6a:e7:
2d:12:86:07:ae:8c:78:79:91:08:f5:98:41:cc:f0:
b3:92:96:35:02:5b:a8:5b:3d:96:cb:1e:c4:1d:13:
6b:53:fb:79:98:0a:cb:0d:0c:51:b9:c2:e5:6c:2f:
0a:9f:71:a3:6c:b8:9e:25:88:59:eb:97:91:59:57:
f0:ab:06:40:48:f6:c1:6d:34:d8:1f:90:9b:24:d6:
15:5e:7d:9e:cc:0b:33:dd:ed:fa:ab:e3:52:f6:87:
5d:9e:cb:75:c9:ee:76:91:cb:8e:1a:1e:08:6c:09:
2c:7b:5e:18:b4:30:74:eb:6c:f7:24:27:f9:80:1d:
3e:84:8a:34:9a:eb:f7:81:50:cc:ef:97:f7:fd:94:
04:50:0c:00:e8:d8:8e:43:75:71:3e:28:67:e7:eb:
a6:39:7e:37:d7:e1:86:3b:a5:e4:07:23:02:1c:44:
5f:e3:53:d3:12:a2:6c:25:d2:d0:6e:7a:c1:f7:d7:
51:5f:c3:92:41:48:15:b1:a2:b0:09:4a:df:88:65:
cc:21:9c:3f:b6:b2:bf:dd:44:6d:b4:80:b3:28:ae:
45:b4:b7:f1:ea:b0:cd:0f:de:11:d6:3a:91:af:a3:
03:69:fd:e5:3e:a7:06:1d:ee:10:20:ab:aa:78:a4:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:17:E4:C7:A1:CD:10:1A:6C:5C:7E:92:5E:FE:55:7F:16:BC:62
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/6LgX5MehzRAabFx-kl7-VX8WvGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.165.0-185.197.167.255
IPv6:
2a0a:7bc0::/32
2a0a:7bc7::/32
Signature Algorithm: sha256WithRSAEncryption
c0:b1:19:e2:ce:24:31:f5:04:9f:39:0d:4b:3e:ab:ae:53:7a:
42:bf:bd:09:df:22:4c:97:3b:b2:d5:15:8f:a8:33:5d:00:b3:
2e:9f:29:6f:9f:0b:a7:41:c8:dd:c9:2b:a0:d0:76:3c:29:74:
7d:21:64:e9:99:39:74:04:f0:10:25:d9:32:68:2b:d9:c7:4a:
be:69:b2:0d:19:dd:d5:ba:1c:30:f7:08:40:0f:ed:cb:fe:14:
3e:af:fe:da:99:43:8c:27:0b:a6:03:bd:36:b1:86:45:48:4c:
69:92:8e:11:7d:c6:96:12:c7:02:c4:d2:e1:8e:d3:3c:53:e2:
2b:b6:ef:15:3d:4d:5d:1f:6d:c6:68:7b:6c:18:35:0c:b8:f7:
6f:78:49:70:ed:f3:fd:b4:86:b5:2a:7e:fe:ea:2c:58:cd:b7:
8f:ad:11:9a:93:aa:d9:52:54:34:d3:fd:a5:ab:37:38:e3:22:
da:52:1e:56:52:df:01:e3:5f:38:85:5a:df:ba:40:b2:18:5c:
a4:a9:81:f9:62:f9:c9:17:40:2c:42:bc:f5:5d:1b:46:fc:17:
d5:2a:f0:69:3d:c2:f2:aa:bf:a6:b9:91:72:ee:01:84:ee:96:
ce:fe:e0:2c:a4:5c:b7:99:ea:3d:f1:60:56:52:cb:0e:f1:bd:
25:47:f9:bf
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQntKvQZJ4HNygKu3uUlPE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjUwMTAyMTU0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI4MTdlNGM3YTFjZDEwMWE2YzVjN2U5MjVlZmU1NTdmMTZiYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcj49hLw2xMzfAIdauctEoYHrox4
eZEI9ZhBzPCzkpY1AluoWz2Wyx7EHRNrU/t5mArLDQxRucLlbC8Kn3GjbLieJYhZ
65eRWVfwqwZASPbBbTTYH5CbJNYVXn2ezAsz3e36q+NS9oddnst1ye52kcuOGh4I
bAkse14YtDB062z3JCf5gB0+hIo0muv3gVDM75f3/ZQEUAwA6NiOQ3VxPihn5+um
OX431+GGO6XkByMCHERf41PTEqJsJdLQbnrB99dRX8OSQUgVsaKwCUrfiGXMIZw/
trK/3URttICzKK5FtLfx6rDND94R1jqRr6MDaf3lPqcGHe4QIKuqeKTliwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOi4F+THoc0QGmxcfpJe/lV/FrxiMB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvNkxnWDVNZWh6UkFhYkZ4LWtsNy1WWDhXdkdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAUBAIAATAOMAwDBAC5xaUD
BAO5xaAwFAQCAAIwDgMFACoKe8ADBQAqCnvHMA0GCSqGSIb3DQEBCwUAA4IBAQDA
sRniziQx9QSfOQ1LPquuU3pCv70J3yJMlzuy1RWPqDNdALMunylvnwunQcjdySug
0HY8KXR9IWTpmTl0BPAQJdkyaCvZx0q+abINGd3Vuhww9whAD+3L/hQ+r/7amUOM
JwumA702sYZFSExpko4RfcaWEscCxNLhjtM8U+Irtu8VPU1dH23GaHtsGDUMuPdv
eElw7fP9tIa1Kn7+6ixYzbePrRGak6rZUlQ00/2lqzc44yLaUh5WUt8B4184hVrf
ukCyGFykqYH5YvnJF0AsQrz1XRtG/BfVKvBpPcLyqr+muZFy7gGE7pbO/uAspFy3
meo98WBWUssO8b0lR/m/
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:58 2025 by rpki-client