Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/6WQb5IfEcmi8IGr1CAroWUugggw.roa
File: 6WQb5IfEcmi8IGr1CAroWUugggw.roa (raw, json)
Hash identifier: 78TxDoiI8fKuOYB3qGNUnx5CpOTH0A22O+E/X6Q7E4Y=
Subject key identifier: E9:64:1B:E4:87:C4:72:68:BC:20:6A:F5:08:0A:E8:59:4B:A0:82:0C
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018204DEDA6010BC0F10097082297DFFFB64
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/6WQb5IfEcmi8IGr1CAroWUugggw.roa
Signing time: Sat 16 Jul 2022 02:38:09 +0000
ROA not before: Sat 16 Jul 2022 02:38:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:de:da:60:10:bc:0f:10:09:70:82:29:7d:ff:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 16 02:38:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9641be487c47268bc206af5080ae8594ba0820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:57:45:b6:b0:bc:1e:b7:0d:ad:7e:f1:0a:
0e:48:c0:96:67:f1:e4:e0:38:35:84:29:7f:cd:7b:
aa:61:84:cd:82:d8:75:6f:0e:07:dd:80:8b:18:95:
36:bd:54:2b:2b:a6:42:e2:bd:9b:b5:e6:43:10:6f:
78:8e:9c:2e:14:96:e8:d7:5a:ac:60:c6:b9:46:d9:
fa:36:00:37:f0:10:36:38:2d:f0:8e:3f:ed:a6:44:
6f:0a:28:b1:d8:50:25:60:a7:2d:4a:81:b4:f1:2f:
98:20:e5:4f:64:f5:9a:c1:c9:20:10:f7:09:50:97:
76:7f:ff:15:c3:0d:ef:51:2d:58:b7:f8:90:ea:e4:
ee:02:5b:48:1d:2e:a6:3b:1d:2f:14:f3:68:50:c8:
6e:50:42:51:2b:00:be:40:ca:66:26:bf:21:58:81:
aa:08:43:8d:9f:52:89:85:5d:d6:58:5a:95:24:23:
db:6e:a1:c2:fe:41:56:69:cf:2e:be:d8:cd:95:96:
0a:b0:b1:9c:c5:f1:9a:80:f4:7a:06:a0:08:90:63:
01:2c:51:d5:09:aa:fa:67:5e:69:b0:57:fe:da:63:
3f:d4:c9:35:a3:9e:b6:f3:aa:82:89:40:82:d9:7b:
99:e3:d0:8a:52:f9:60:18:bf:b6:8b:a3:93:e8:7b:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:1B:E4:87:C4:72:68:BC:20:6A:F5:08:0A:E8:59:4B:A0:82:0C
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/6WQb5IfEcmi8IGr1CAroWUugggw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:61:58:2c:6c:b4:23:9c:94:65:93:2f:56:3f:f1:12:d3:70:
2c:11:9c:f8:79:0b:c6:cc:a3:e9:40:67:77:fb:cd:5c:9c:0f:
89:ea:b7:ff:7a:53:0e:74:41:6e:ec:01:6d:e4:be:e0:c1:c5:
3d:8b:9e:3c:40:c3:1d:cc:db:9b:4f:7c:b6:67:8d:97:cd:0a:
c0:0c:38:57:cd:a6:46:ec:22:1a:fe:26:5c:ef:81:48:4f:d8:
9d:b1:6e:d4:a6:0e:aa:25:f7:f3:5e:ce:80:02:eb:bc:e8:51:
91:f0:49:49:c3:fd:73:5b:9a:91:cc:72:91:28:56:10:f7:6f:
de:c8:c6:3b:b3:f3:46:22:36:69:f6:98:af:fb:e3:8c:ba:6d:
80:8a:24:7f:a8:5c:7c:a0:15:39:42:02:68:11:b8:5a:35:a2:
50:02:7a:57:67:ec:6e:76:4e:17:74:57:19:77:fa:8f:f7:54:
a9:fe:7d:80:1b:57:20:25:3f:68:04:b1:70:a0:f3:72:d7:2a:
b9:ab:97:3f:bc:6e:aa:0b:97:a4:8f:0b:24:6b:af:6f:b5:95:
04:8b:f7:24:da:e9:8e:55:16:37:7c:76:5d:d3:37:79:e1:cc:
29:f1:66:df:1a:1d:17:60:86:93:59:12:de:34:ee:9d:64:8e:
0b:de:45:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIE3tpgELwPEAlwgil9//tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMjAzYzE0MTllYzZhMjFlNjYxMjcyMDNmNTFjMWZhNzRk
YzA0NGYwHhcNMjIwNzE2MDIzODA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTY0MWJlNDg3YzQ3MjY4YmMyMDZhZjUwODBhZTg1OTRiYTA4MjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0pXRbawvB63Da1+8QoOSMCWZ/Hk
4Dg1hCl/zXuqYYTNgth1bw4H3YCLGJU2vVQrK6ZC4r2bteZDEG94jpwuFJbo11qs
YMa5Rtn6NgA38BA2OC3wjj/tpkRvCiix2FAlYKctSoG08S+YIOVPZPWawckgEPcJ
UJd2f/8Vww3vUS1Yt/iQ6uTuAltIHS6mOx0vFPNoUMhuUEJRKwC+QMpmJr8hWIGq
CEONn1KJhV3WWFqVJCPbbqHC/kFWac8uvtjNlZYKsLGcxfGagPR6BqAIkGMBLFHV
Car6Z15psFf+2mM/1Mk1o56286qCiUCC2XuZ49CKUvlgGL+2i6OT6Hu03wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlkG+SHxHJovCBq9QgK6FlLoIIMMB8GA1UdIwQY
MBaAFH8gPBQZ7Goh5mEnID9Rwfp03ARPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnlBOEZCbnNhaUhtWVNjZ1AxSEItblRjQkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOTA0NjktZTYzOC00YTU3LTkyY2Ut
NTM0ZTczY2MzYjdjLzEvNldRYjVJZkVjbWk4SUdyMUNBcm9XVXVnZ2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jOTA0NjktZTYzOC00YTU3LTkyY2UtNTM0ZTczY2MzYjdj
LzEvZnlBOEZCbnNhaUhtWVNjZ1AxSEItblRjQkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6eMA0G
CSqGSIb3DQEBCwUAA4IBAQC2YVgsbLQjnJRlky9WP/ES03AsEZz4eQvGzKPpQGd3
+81cnA+J6rf/elMOdEFu7AFt5L7gwcU9i548QMMdzNubT3y2Z42XzQrADDhXzaZG
7CIa/iZc74FIT9idsW7Upg6qJffzXs6AAuu86FGR8ElJw/1zW5qRzHKRKFYQ92/e
yMY7s/NGIjZp9piv++OMum2AiiR/qFx8oBU5QgJoEbhaNaJQAnpXZ+xudk4XdFcZ
d/qP91Sp/n2AG1cgJT9oBLFwoPNy1yq5q5c/vG6qC5ekjwska69vtZUEi/ck2umO
VRY3fHZd0zd54cwp8WbfGh0XYIaTWRLeNO6dZI4L3kUa
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:53:19 2025 by rpki-client