Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/6ePUbi8ws_xD0m0uhGc3HUIIF2s.roa
File: 6ePUbi8ws_xD0m0uhGc3HUIIF2s.roa (raw, json)
Hash identifier: sHZ2DLRt4LvViTtqMZd3VWs29JpXc9ypu3+gynn6Gu4=
Subject key identifier: E9:E3:D4:6E:2F:30:B3:FC:43:D2:6D:2E:84:67:37:1D:42:08:17:6B
Certificate issuer: /CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Certificate serial: 018D65378F5C0083F57E1923765D2165AD0D
Authority key identifier: A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/6ePUbi8ws_xD0m0uhGc3HUIIF2s.roa
Signing time: Thu 01 Feb 2024 15:09:16 +0000
ROA not before: Thu 01 Feb 2024 15:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50941
IP address blocks: 178.18.192.0/24 maxlen: 24
178.18.193.0/24 maxlen: 24
178.18.195.0/24 maxlen: 24
178.18.196.0/24 maxlen: 24
178.18.197.0/24 maxlen: 24
178.18.198.0/24 maxlen: 24
178.18.199.0/24 maxlen: 24
178.18.200.0/24 maxlen: 24
178.18.201.0/24 maxlen: 24
178.18.202.0/24 maxlen: 24
178.18.203.0/24 maxlen: 24
178.18.204.0/24 maxlen: 24
178.18.205.0/24 maxlen: 24
178.18.206.0/24 maxlen: 24
178.18.207.0/24 maxlen: 24
185.21.4.0/24 maxlen: 24
185.21.6.0/24 maxlen: 24
185.21.7.0/24 maxlen: 24
185.88.132.0/24 maxlen: 24
2a00:54a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:37:8f:5c:00:83:f5:7e:19:23:76:5d:21:65:ad:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a114ffd8531b239e6f0f73e6f6de63845145facd
Validity
Not Before: Feb 1 15:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9e3d46e2f30b3fc43d26d2e8467371d4208176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:64:c1:ac:5f:5d:0f:7f:70:39:26:73:7b:
80:d1:91:f2:9e:ae:b0:55:66:8f:66:40:77:33:29:
ee:21:56:a4:98:c5:88:a5:04:fe:ec:36:6c:91:8e:
af:6e:f2:5c:3e:75:2b:86:b2:95:d8:65:e9:43:78:
08:f6:cf:cf:8a:84:cb:ab:ee:7b:f6:ee:df:3f:a1:
37:ce:31:17:78:36:8d:10:98:b9:a7:c7:76:b6:4a:
4f:0e:ca:49:57:5a:ab:f1:82:f6:ea:da:da:81:15:
1a:37:24:6f:73:8e:dc:45:59:44:0f:b8:46:e9:c5:
a1:11:4a:d5:0f:09:3b:d0:d8:25:31:93:dd:d8:f0:
55:a4:1b:79:2d:8c:0f:34:42:5b:c4:4d:b3:9b:8f:
24:70:ff:8f:30:8d:77:d5:b0:c7:97:0c:6c:31:a2:
65:df:05:1a:b9:cd:93:75:53:ad:d0:6e:d8:d2:ca:
76:16:1d:36:64:e0:ca:b4:a6:78:e4:74:84:74:44:
d4:96:51:aa:74:8d:c7:df:be:2f:f3:cf:b8:94:7d:
ee:36:1a:4f:a3:ea:94:4a:e6:4a:53:56:d4:54:6d:
64:91:1e:67:ea:28:b8:9f:f4:19:8c:18:df:31:9f:
8d:68:bf:30:69:0e:2b:63:2b:06:04:8d:cf:45:25:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E3:D4:6E:2F:30:B3:FC:43:D2:6D:2E:84:67:37:1D:42:08:17:6B
X509v3 Authority Key Identifier:
keyid:A1:14:FF:D8:53:1B:23:9E:6F:0F:73:E6:F6:DE:63:84:51:45:FA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRT_2FMbI55vD3Pm9t5jhFFF-s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/6ePUbi8ws_xD0m0uhGc3HUIIF2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf2d83-6f29-432f-82e4-00d4c3b3fbf9/1/oRT_2FMbI55vD3Pm9t5jhFFF-s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.192.0/23
178.18.195.0-178.18.207.255
185.21.4.0/24
185.21.6.0/23
185.88.132.0/24
IPv6:
2a00:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
84:b0:b7:25:bd:0f:2f:01:9c:59:7c:7f:fa:6d:83:0b:4b:42:
e3:1d:84:e2:60:0c:e8:0e:28:76:4d:ee:30:68:a3:8e:48:0e:
eb:1b:5e:a4:f7:18:2e:90:a6:c4:fb:31:4c:7d:e9:01:67:4a:
27:9f:6e:80:60:01:5b:2e:8e:c9:e7:cd:2e:12:13:7c:f5:42:
58:bc:2e:40:95:d7:e1:98:ca:72:e8:b0:78:7a:ae:60:6a:92:
ed:e5:eb:3a:c6:dc:db:ad:52:de:2e:a1:d1:34:a2:19:a9:c3:
37:d2:8e:b6:e0:07:8b:89:d7:75:07:fb:c6:6f:78:a8:9d:16:
a6:e3:3e:46:c7:76:28:1c:75:a2:77:77:d9:cb:b1:33:6e:33:
68:a2:7a:3c:a3:72:8f:23:ff:20:d1:f2:a0:0b:5a:b3:fa:4c:
11:00:0c:b0:c9:a5:ab:a3:c4:c6:80:7f:54:07:8c:20:98:17:
95:78:6b:3f:80:2e:9c:3c:99:cb:d4:0e:5f:36:fb:bf:7c:d2:
40:89:25:6c:25:4c:69:ae:0c:99:41:cc:69:cf:0f:65:c4:04:
e5:9b:e9:36:db:cb:0e:e4:21:3b:fe:b4:97:ed:b9:a1:b2:a3:
26:55:fb:ed:fe:cb:16:65:9c:f7:96:82:42:4a:20:78:04:71:
d1:cf:a4:bb
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAY1lN49cAIP1fhkjdl0hZa0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTRmZmQ4NTMxYjIzOWU2ZjBmNzNlNmY2ZGU2Mzg0NTE0
NWZhY2QwHhcNMjQwMjAxMTUwOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWUzZDQ2ZTJmMzBiM2ZjNDNkMjZkMmU4NDY3MzcxZDQyMDgxNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxVkwaxfXQ9/cDkmc3uA0ZHynq6w
VWaPZkB3MynuIVakmMWIpQT+7DZskY6vbvJcPnUrhrKV2GXpQ3gI9s/PioTLq+57
9u7fP6E3zjEXeDaNEJi5p8d2tkpPDspJV1qr8YL26tragRUaNyRvc47cRVlED7hG
6cWhEUrVDwk70NglMZPd2PBVpBt5LYwPNEJbxE2zm48kcP+PMI131bDHlwxsMaJl
3wUauc2TdVOt0G7Y0sp2Fh02ZODKtKZ45HSEdETUllGqdI3H374v88+4lH3uNhpP
o+qUSuZKU1bUVG1kkR5n6ii4n/QZjBjfMZ+NaL8waQ4rYysGBI3PRSV9HwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFOnj1G4vMLP8Q9JtLoRnNx1CCBdrMB8GA1UdIwQY
MBaAFKEU/9hTGyOebw9z5vbeY4RRRfrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JUXzJGTWJJNTV2RDNQbTl0NWpoRkZGLXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jZjJkODMtNmYyOS00MzJmLTgyZTQt
MDBkNGMzYjNmYmY5LzEvNmVQVWJpOHdzX3hEMG0wdWhHYzNIVUlJRjJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jZjJkODMtNmYyOS00MzJmLTgyZTQtMDBkNGMzYjNmYmY5
LzEvb1JUXzJGTWJJNTV2RDNQbTl0NWpoRkZGLXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQBshLAMAwD
BACyEsMDBASyEsADBAC5FQQDBAG5FQYDBAC5WIQwDQQCAAIwBwMFACoAVKAwDQYJ
KoZIhvcNAQELBQADggEBAISwtyW9Dy8BnFl8f/ptgwtLQuMdhOJgDOgOKHZN7jBo
o45IDusbXqT3GC6QpsT7MUx96QFnSiefboBgAVsujsnnzS4SE3z1Qli8LkCV1+GY
ynLosHh6rmBqku3l6zrG3NutUt4uodE0ohmpwzfSjrbgB4uJ13UH+8ZveKidFqbj
PkbHdigcdaJ3d9nLsTNuM2iiejyjco8j/yDR8qALWrP6TBEADLDJpaujxMaAf1QH
jCCYF5V4az+ALpw8mcvUDl82+7980kCJJWwlTGmuDJlBzGnPD2XEBOWb6Tbbyw7k
ITv+tJftuaGyoyZV++3+yxZlnPeWgkJKIHgEcdHPpLs=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:26 2025 by rpki-client