Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/6cCf3UBvXYdhjRV71IEq6plsMhg.roa
File: 6cCf3UBvXYdhjRV71IEq6plsMhg.roa (raw, json)
Hash identifier: kyB6uLWdG5bJXvtN0W1QEKq5l12sjGKjwmNq82/Ifds=
Subject key identifier: E9:C0:9F:DD:40:6F:5D:87:61:8D:15:7B:D4:81:2A:EA:99:6C:32:18
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018C24A4AF6691B5D308D286C77292B81416
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/6cCf3UBvXYdhjRV71IEq6plsMhg.roa
Signing time: Fri 01 Dec 2023 09:10:21 +0000
ROA not before: Fri 01 Dec 2023 09:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 88.135.104.0/21 maxlen: 24
88.135.100.0/22 maxlen: 24
213.159.136.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:a4:af:66:91:b5:d3:08:d2:86:c7:72:92:b8:14:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Dec 1 09:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c09fdd406f5d87618d157bd4812aea996c3218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:36:92:d2:c5:cb:77:1a:08:a0:d6:2e:45:
6d:27:0a:f1:5a:c8:cf:50:4f:c5:1b:a6:24:d3:ae:
f5:cd:d8:8a:38:fc:65:8d:c5:a7:8b:7c:5e:3c:bb:
0a:2a:64:58:24:e7:a5:c0:08:be:13:83:ed:9c:90:
5f:55:be:7f:37:ae:95:3f:9d:0a:f0:0d:8b:6d:fe:
1c:15:b5:bd:de:6b:69:12:af:da:77:6f:ce:47:af:
5d:ea:28:21:ed:74:20:71:d8:a0:f3:85:4a:55:79:
5e:52:61:5d:eb:bf:28:d6:f6:72:98:4b:87:78:46:
a4:ba:b1:42:a9:ce:ee:d0:7d:7b:ae:0b:b0:10:49:
9a:bc:7b:0f:23:df:ee:1d:97:53:00:ec:4d:37:77:
55:15:06:66:e9:5d:03:10:7d:fd:78:2f:ee:f1:a3:
24:96:cc:0e:9f:54:73:b3:fd:99:c2:cd:fc:c8:bf:
6e:19:89:fc:35:79:56:7e:76:a5:9e:7d:67:f3:00:
71:eb:47:36:43:50:86:20:5b:66:a2:94:b5:24:1b:
26:d5:26:af:1e:45:3d:6c:13:65:c3:6a:c9:c8:4f:
03:10:e1:26:7e:eb:38:d5:b5:98:75:6c:82:3d:25:
62:d3:e4:23:8a:fe:cc:13:d5:54:a7:a5:11:e7:93:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:9F:DD:40:6F:5D:87:61:8D:15:7B:D4:81:2A:EA:99:6C:32:18
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/6cCf3UBvXYdhjRV71IEq6plsMhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.100.0-88.135.111.255
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:3c:6a:0c:f5:63:b5:5e:bb:4b:49:5f:7b:64:a3:4b:31:e5:
e2:01:07:0d:74:81:ad:b3:e6:75:25:81:6f:8e:50:4a:ac:74:
05:cc:bb:c9:59:a9:c1:ee:1a:b1:ca:c9:ec:35:c7:31:4a:55:
3d:d9:f7:4b:7f:14:61:0d:90:fb:27:a7:d3:58:e0:78:cb:b1:
ff:60:32:96:3f:c5:cc:a0:28:1d:c0:93:ef:6a:e8:4f:6b:cb:
7b:7d:aa:a7:46:7e:f8:ff:0a:ed:56:92:c4:b2:d1:0a:cd:eb:
51:2d:b4:1d:b2:79:92:c4:75:be:3a:66:56:1d:0f:74:98:ad:
f3:81:2e:ae:2b:0a:33:a2:74:cd:04:5b:20:40:12:ab:ac:29:
2a:6a:e7:09:b7:d8:93:7e:d0:a2:78:92:65:22:1f:ec:e4:09:
a7:54:61:af:fd:c2:fd:ec:7d:e9:1f:8c:78:eb:8e:1f:f3:0d:
d6:2f:17:f9:06:30:ff:30:f0:1c:11:b9:c3:df:32:6c:df:15:
0c:f3:21:a6:a1:26:0d:29:02:91:2a:76:c8:87:56:0f:34:b1:
28:c8:78:65:24:b5:e7:88:b9:00:5d:22:de:04:26:a6:30:73:
fa:e4:6d:b8:7c:5b:6b:60:38:8e:c1:2e:3a:95:fd:f7:50:79:
05:4c:b8:b8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYwkpK9mkbXTCNKGx3KSuBQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMxMjAxMDkxMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWMwOWZkZDQwNmY1ZDg3NjE4ZDE1N2JkNDgxMmFlYTk5NmMzMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV42ktLFy3caCKDWLkVtJwrxWsjP
UE/FG6Yk0671zdiKOPxljcWni3xePLsKKmRYJOelwAi+E4PtnJBfVb5/N66VP50K
8A2Lbf4cFbW93mtpEq/ad2/OR69d6igh7XQgcdig84VKVXleUmFd678o1vZymEuH
eEakurFCqc7u0H17rguwEEmavHsPI9/uHZdTAOxNN3dVFQZm6V0DEH39eC/u8aMk
lswOn1Rzs/2Zws38yL9uGYn8NXlWfnalnn1n8wBx60c2Q1CGIFtmopS1JBsm1Sav
HkU9bBNlw2rJyE8DEOEmfus41bWYdWyCPSVi0+Qjiv7ME9VUp6UR55PXvwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOnAn91Ab12HYY0Ve9SBKuqZbDIYMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvNmNDZjNVQnZYWWRoalJWNzFJRXE2cGxzTWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJYh2QD
BARYh2ADBASNiBADBAPVn4gwDQYJKoZIhvcNAQELBQADggEBAA88agz1Y7Veu0tJ
X3tko0sx5eIBBw10ga2z5nUlgW+OUEqsdAXMu8lZqcHuGrHKyew1xzFKVT3Z90t/
FGENkPsnp9NY4HjLsf9gMpY/xcygKB3Ak+9q6E9ry3t9qqdGfvj/Cu1WksSy0QrN
61EttB2yeZLEdb46ZlYdD3SYrfOBLq4rCjOidM0EWyBAEqusKSpq5wm32JN+0KJ4
kmUiH+zkCadUYa/9wv3sfekfjHjrjh/zDdYvF/kGMP8w8BwRucPfMmzfFQzzIaah
Jg0pApEqdsiHVg80sSjIeGUkteeIuQBdIt4EJqYwc/rkbbh8W2tgOI7BLjqV/fdQ
eQVMuLg=
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:52:39 2025 by rpki-client