Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6MdUNqRMWea9PKmc_WT3iZ9N22o.roa
File: 6MdUNqRMWea9PKmc_WT3iZ9N22o.roa (raw, json)
Hash identifier: wivxUxDPbOo9mWne2LbQ0uVkx4aX8KYYIMOgxfeHngs=
Subject key identifier: E8:C7:54:36:A4:4C:59:E6:BD:3C:A9:9C:FD:64:F7:89:9F:4D:DB:6A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F86D4124E6710F2B4683ADD0AA49E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6MdUNqRMWea9PKmc_WT3iZ9N22o.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 195.178.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:86:d4:12:4e:67:10:f2:b4:68:3a:dd:0a:a4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c75436a44c59e6bd3ca99cfd64f7899f4ddb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:a8:bc:7d:7e:5c:10:e1:19:1d:e2:58:8d:
7e:e0:66:64:5d:e8:bb:7f:69:b4:c3:60:52:dd:56:
06:d2:fd:e6:e8:e8:e0:9e:20:b0:d6:2e:b3:7e:a7:
bd:84:10:9d:48:fa:45:ee:da:da:f7:cd:c5:71:c0:
1d:dc:3d:f2:39:8a:37:e6:03:5a:41:3a:e3:43:fc:
45:4b:42:2d:35:b2:0f:95:be:52:8b:20:f9:1e:66:
3e:76:b0:08:b8:0a:1c:f3:82:30:80:2a:ff:ff:a9:
6f:52:32:f9:75:8b:79:93:10:bb:ab:e9:a0:e2:5b:
b1:94:3c:a2:36:e2:b6:40:3d:2c:53:a8:90:c8:92:
b1:0a:40:71:9d:f7:fe:2b:53:b1:b2:c5:5b:86:c5:
f3:22:de:0a:6e:60:0d:a0:82:e6:94:45:55:c0:4f:
a4:49:50:52:9f:de:14:8b:76:e7:10:e7:79:e7:d4:
25:11:e5:79:4e:97:78:da:9a:5c:34:60:f9:fe:16:
c6:ce:8f:9f:26:2e:37:ea:f8:5c:07:fd:49:ac:e1:
a0:61:a4:06:98:fd:a5:8b:96:02:b2:bc:b0:3a:38:
0f:73:09:2d:41:1c:95:7d:0b:8d:8a:8d:64:2c:3a:
74:2a:09:10:1c:b9:9a:8a:d6:6a:eb:02:9f:06:0a:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:54:36:A4:4C:59:E6:BD:3C:A9:9C:FD:64:F7:89:9F:4D:DB:6A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6MdUNqRMWea9PKmc_WT3iZ9N22o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
82:4f:cf:80:d9:ce:2b:39:e0:a3:99:d5:4f:fa:97:de:a3:e1:
3e:e1:15:5d:1f:a2:ed:06:4b:58:5b:03:0b:e4:02:22:ff:f0:
bb:81:b3:40:33:4d:b6:05:46:c2:29:18:f4:a3:54:55:7c:ab:
96:4e:8a:40:dc:b5:31:d4:ed:77:66:80:77:b9:0d:d0:30:d6:
cc:9c:c9:2b:dd:54:cc:cb:34:ee:82:80:a1:f2:dc:1f:80:3b:
14:6e:6e:9f:28:33:37:c0:8f:26:c3:bf:72:e9:cd:97:bf:5d:
5e:99:3c:e8:64:c1:e4:df:89:b1:fb:1f:3e:a6:bd:43:42:5c:
6d:d4:ec:fc:fe:e6:77:5a:f3:b8:87:2c:2f:2c:17:02:60:f4:
9f:eb:cf:bd:c6:c4:dd:45:82:c2:f0:cf:cd:50:13:f9:65:e4:
f1:cf:bc:58:4a:54:d8:65:8d:6c:47:c5:37:7b:49:df:81:1a:
5d:29:88:e9:4b:c5:d2:e3:00:2b:fe:4b:21:cf:ae:1f:b4:39:
7b:4d:7e:02:94:43:77:ed:a7:26:90:12:18:26:75:6a:62:0e:
fe:d8:da:88:9b:cc:24:25:90:77:da:b1:1b:da:38:ce:c2:53:
36:33:e6:e6:b0:af:3b:ae:7b:95:66:75:85:76:b3:95:b8:9f:
16:12:dd:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj4bUEk5nEPK0aDrdCqSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUwMTAyMDU0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGM3NTQzNmE0NGM1OWU2YmQzY2E5OWNmZDY0Zjc4OTlmNGRkYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LCovH1+XBDhGR3iWI1+4GZkXei7
f2m0w2BS3VYG0v3m6OjgniCw1i6zfqe9hBCdSPpF7tra983FccAd3D3yOYo35gNa
QTrjQ/xFS0ItNbIPlb5SiyD5HmY+drAIuAoc84IwgCr//6lvUjL5dYt5kxC7q+mg
4luxlDyiNuK2QD0sU6iQyJKxCkBxnff+K1OxssVbhsXzIt4KbmANoILmlEVVwE+k
SVBSn94Ui3bnEOd559QlEeV5Tpd42ppcNGD5/hbGzo+fJi436vhcB/1JrOGgYaQG
mP2li5YCsrywOjgPcwktQRyVfQuNio1kLDp0KgkQHLmaitZq6wKfBgr/UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjHVDakTFnmvTypnP1k94mfTdtqMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvNk1kVU5xUk1XZWE5UEttY19XVDNpWjlOMjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw7KIMA0G
CSqGSIb3DQEBCwUAA4IBAQCCT8+A2c4rOeCjmdVP+pfeo+E+4RVdH6LtBktYWwML
5AIi//C7gbNAM022BUbCKRj0o1RVfKuWTopA3LUx1O13ZoB3uQ3QMNbMnMkr3VTM
yzTugoCh8twfgDsUbm6fKDM3wI8mw79y6c2Xv11emTzoZMHk34mx+x8+pr1DQlxt
1Oz8/uZ3WvO4hywvLBcCYPSf68+9xsTdRYLC8M/NUBP5ZeTxz7xYSlTYZY1sR8U3
e0nfgRpdKYjpS8XS4wAr/kshz64ftDl7TX4ClEN37acmkBIYJnVqYg7+2NqIm8wk
JZB32rEb2jjOwlM2M+bmsK87rnuVZnWFdrOVuJ8WEt0s
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:45 2025 by rpki-client