Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/6wrj7DW5ggI5pH9RO6V7masLX7c.roa
File: 6wrj7DW5ggI5pH9RO6V7masLX7c.roa (raw, json)
Hash identifier: lN9DdR+RFxN8GyggLtwurXIUseodqXQWbHz9KENrRcg=
Subject key identifier: EB:0A:E3:EC:35:B9:82:02:39:A4:7F:51:3B:A5:7B:99:AB:0B:5F:B7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE2F512FFD6B55385DA9C2B747961
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/6wrj7DW5ggI5pH9RO6V7masLX7c.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206499
IP address blocks: 185.133.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e2:f5:12:ff:d6:b5:53:85:da:9c:2b:74:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0ae3ec35b9820239a47f513ba57b99ab0b5fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:3a:20:3c:79:6e:4d:b7:b3:fa:f2:c3:e2:
f9:d8:e2:db:a7:a4:09:64:34:5f:48:b6:99:67:fd:
4c:e0:73:7a:49:aa:07:68:34:bf:ff:5a:7f:63:fd:
9f:36:7e:b6:37:ce:72:20:67:c8:59:98:a3:f9:48:
94:bd:e8:55:5d:d5:04:b1:15:e7:7c:ed:8c:4b:e6:
dc:ef:d8:e5:75:be:6a:ef:b8:0a:1c:3d:47:26:b2:
8a:bd:d7:d0:88:19:08:64:9f:8b:35:e9:b7:14:c0:
92:d8:a6:a1:06:d8:41:39:cb:fb:de:9c:6e:62:2f:
4f:0c:c0:9f:29:c4:6e:fb:0f:43:f3:11:e1:5b:b4:
0b:01:2d:b5:bc:ba:a9:fc:d9:ee:a5:8e:89:04:0a:
21:2a:10:dc:bf:ee:da:40:e6:d6:bd:6c:71:25:e6:
66:7c:77:73:66:5c:2a:2f:b3:48:61:df:d9:df:46:
ae:7e:c6:81:7f:9a:8f:c3:58:bf:90:de:c9:fe:2f:
67:5f:a4:74:eb:d6:39:78:af:c0:7c:54:bb:58:9c:
a9:25:47:f3:68:61:89:ab:82:66:8f:7e:3c:f5:88:
fd:aa:88:3a:aa:78:eb:44:8b:ad:83:b0:86:62:68:
be:d2:51:63:35:da:ac:7d:ff:2b:c4:28:83:1a:b2:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:E3:EC:35:B9:82:02:39:A4:7F:51:3B:A5:7B:99:AB:0B:5F:B7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/6wrj7DW5ggI5pH9RO6V7masLX7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9d:23:56:bd:0b:5e:aa:f4:c8:a1:00:2f:27:1a:16:63:24:
c6:5f:74:39:04:61:18:53:0f:c1:e0:9d:c5:8f:b0:e3:bd:e7:
d8:69:b1:d6:31:a6:4e:f6:56:60:e7:f1:63:1c:63:6d:9c:dd:
4c:b9:02:d1:4d:a5:51:fe:c2:c5:e7:75:09:99:9d:b2:0f:9a:
49:5b:45:92:77:04:a8:a7:7e:b0:32:6d:a2:1c:45:79:ef:b3:
95:19:44:82:71:1d:db:82:95:a2:b9:0c:e0:69:1a:69:ff:71:
54:f0:27:d1:76:28:db:6d:9b:1c:54:19:6f:30:09:8f:f1:5a:
fa:02:39:b8:69:ed:5f:02:57:26:8d:9a:1f:4e:a0:aa:16:cf:
c2:2b:13:b3:11:64:9a:aa:2c:25:f5:ba:63:73:b6:86:08:af:
21:25:7c:3e:c9:ec:a7:3b:4a:68:56:47:fb:46:78:f4:af:99:
92:80:3e:5e:66:66:e8:b9:49:f5:15:27:23:f8:15:a5:a8:e1:
e0:de:5d:04:d6:57:9a:42:79:7b:84:81:05:ce:c4:51:f2:e6:
48:4f:e5:8a:71:ba:c0:3f:a7:a4:7b:c2:c6:05:37:c7:36:d8:
36:78:ce:87:16:f5:12:82:85:88:42:8b:98:cf:31:70:db:6e:
13:a2:eb:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/eL1Ev/WtVOF2pwrdHlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjBhZTNlYzM1Yjk4MjAyMzlhNDdmNTEzYmE1N2I5OWFiMGI1ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RM6IDx5bk23s/ryw+L52OLbp6QJ
ZDRfSLaZZ/1M4HN6SaoHaDS//1p/Y/2fNn62N85yIGfIWZij+UiUvehVXdUEsRXn
fO2MS+bc79jldb5q77gKHD1HJrKKvdfQiBkIZJ+LNem3FMCS2KahBthBOcv73pxu
Yi9PDMCfKcRu+w9D8xHhW7QLAS21vLqp/NnupY6JBAohKhDcv+7aQObWvWxxJeZm
fHdzZlwqL7NIYd/Z30aufsaBf5qPw1i/kN7J/i9nX6R069Y5eK/AfFS7WJypJUfz
aGGJq4Jmj3489Yj9qog6qnjrRIutg7CGYmi+0lFjNdqsff8rxCiDGrJqlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsK4+w1uYICOaR/UTule5mrC1+3MB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvNndyajdEVzVnZ0k1cEg5Uk82VjdtYXNMWDdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXQMA0G
CSqGSIb3DQEBCwUAA4IBAQB6nSNWvQteqvTIoQAvJxoWYyTGX3Q5BGEYUw/B4J3F
j7DjvefYabHWMaZO9lZg5/FjHGNtnN1MuQLRTaVR/sLF53UJmZ2yD5pJW0WSdwSo
p36wMm2iHEV577OVGUSCcR3bgpWiuQzgaRpp/3FU8CfRdijbbZscVBlvMAmP8Vr6
Ajm4ae1fAlcmjZofTqCqFs/CKxOzEWSaqiwl9bpjc7aGCK8hJXw+yeynO0poVkf7
Rnj0r5mSgD5eZmbouUn1FScj+BWlqOHg3l0E1leaQnl7hIEFzsRR8uZIT+WKcbrA
P6eke8LGBTfHNtg2eM6HFvUSgoWIQouYzzFw224Touuk
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:26 2025 by rpki-client