Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/wX6gokr_VF3OJgD1lfPvVE2e4bw.roa
File: wX6gokr_VF3OJgD1lfPvVE2e4bw.roa (raw, json)
Hash identifier: wX5alwOpcNAPUrzP1uccLUF5vfowsjqHG1E3no10HZ4=
Subject key identifier: C1:7E:A0:A2:4A:FF:54:5D:CE:26:00:F5:95:F3:EF:54:4D:9E:E1:BC
Certificate issuer: /CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Certificate serial: 06ABEDC5
Authority key identifier: EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/wX6gokr_VF3OJgD1lfPvVE2e4bw.roa
Signing time: Sat 01 Jan 2022 03:56:12 +0000
ROA not before: Sat 01 Jan 2022 03:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 195.85.201.0/24 maxlen: 24
195.85.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111930821 (0x6abedc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacebaddc0210ec6f24905d1f9cebcb3e0c012c8
Validity
Not Before: Jan 1 03:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c17ea0a24aff545dce2600f595f3ef544d9ee1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1e:76:ce:30:53:b7:9b:d1:47:c0:de:ec:95:
11:fd:e5:c7:25:4e:b9:2c:69:87:07:27:8a:bf:db:
ca:2b:bd:46:96:01:17:d4:bc:c6:ca:55:db:b3:86:
26:3e:aa:f2:37:10:38:ea:f9:55:3a:3a:e4:c0:83:
34:85:c0:22:5a:1d:2d:8c:c4:a9:8f:3e:a2:ad:d7:
c6:6d:3d:09:d1:a3:0c:70:20:f7:a8:f0:ef:df:cc:
f1:5b:ef:e7:34:7f:77:cf:68:45:74:3f:6c:b5:72:
97:c9:40:94:58:05:4e:eb:dd:e8:37:f0:3e:50:a5:
89:29:40:3b:fd:6f:c4:90:aa:ae:fb:03:d9:68:45:
ea:2e:61:57:ca:36:99:51:fd:69:00:2c:86:0b:78:
67:20:93:7f:a4:57:c3:82:a0:95:08:29:69:bd:c6:
cc:8b:1f:71:34:7e:2d:46:92:a9:8e:10:c5:41:23:
ce:9a:04:75:36:43:8c:b7:24:12:d7:34:71:3b:bb:
6d:e5:de:ba:f5:b8:5c:6e:15:35:70:c6:93:3b:c3:
57:39:2b:3e:e9:2d:17:15:b4:27:2f:ea:16:98:8e:
e2:80:9c:69:03:1b:40:63:ab:87:74:d6:b9:81:9c:
45:65:1a:45:a4:72:3a:3e:44:d2:9e:22:99:a2:8c:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:A0:A2:4A:FF:54:5D:CE:26:00:F5:95:F3:EF:54:4D:9E:E1:BC
X509v3 Authority Key Identifier:
keyid:EA:CE:BA:DD:C0:21:0E:C6:F2:49:05:D1:F9:CE:BC:B3:E0:C0:12:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s663cAhDsbySQXR-c68s-DAEsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/wX6gokr_VF3OJgD1lfPvVE2e4bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e5f09-4ea9-465f-9300-baf26cb394d8/1/6s663cAhDsbySQXR-c68s-DAEsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.201.0/24
195.85.205.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:3c:83:6c:38:19:80:82:d8:c3:00:6c:f0:17:e7:15:ff:49:
94:f5:16:58:83:99:33:2f:56:5d:6c:af:f2:03:5d:c3:8d:cc:
d8:f9:de:6e:73:f6:66:22:8f:0c:2c:48:f3:e6:01:96:a5:83:
d3:2e:b9:a2:ed:23:61:de:15:bb:69:88:88:ef:38:a4:ef:bc:
34:64:f0:5e:50:fd:e0:5f:42:26:1c:2c:d8:4e:86:9d:ea:ad:
22:aa:a3:29:db:0e:03:f9:6f:85:bc:ee:4f:b3:5a:05:c1:7c:
ca:7d:c9:a0:c8:90:70:fb:04:54:26:7b:ab:0b:51:59:54:af:
26:49:79:ff:e2:44:d4:c6:21:9b:81:1a:f4:41:8e:d7:15:9f:
16:04:48:2a:bf:a9:57:b2:6b:c0:59:a3:5a:4b:5d:61:f8:df:
c0:29:94:96:f1:40:85:e8:ba:d3:74:7b:54:9f:46:68:a0:82:
46:9d:60:29:af:99:f2:49:2d:bf:5d:7b:3f:a4:c8:8c:33:c9:
f1:31:aa:5f:1e:d5:b9:8f:45:44:d3:44:c3:f5:05:90:22:63:
91:31:63:f3:2d:43:6e:4f:67:f1:9a:88:17:b8:a3:45:65:ae:
5f:76:28:11:eb:ab:f3:13:23:b3:0c:51:5c:df:29:ad:20:62:
91:d4:3a:27
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBqvtxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWNlYmFkZGMwMjEwZWM2ZjI0OTA1ZDFmOWNlYmNiM2UwYzAxMmM4MB4XDTIyMDEw
MTAzNTYxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzE3ZWEwYTI0YWZm
NTQ1ZGNlMjYwMGY1OTVmM2VmNTQ0ZDllZTFiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPgeds4wU7eb0UfA3uyVEf3lxyVOuSxphwcnir/byiu9RpYB
F9S8xspV27OGJj6q8jcQOOr5VTo65MCDNIXAIlodLYzEqY8+oq3Xxm09CdGjDHAg
96jw79/M8Vvv5zR/d89oRXQ/bLVyl8lAlFgFTuvd6DfwPlCliSlAO/1vxJCqrvsD
2WhF6i5hV8o2mVH9aQAshgt4ZyCTf6RXw4KglQgpab3GzIsfcTR+LUaSqY4QxUEj
zpoEdTZDjLckEtc0cTu7beXeuvW4XG4VNXDGkzvDVzkrPuktFxW0Jy/qFpiO4oCc
aQMbQGOrh3TWuYGcRWUaRaRyOj5E0p4imaKMDaUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTBfqCiSv9UXc4mAPWV8+9UTZ7hvDAfBgNVHSMEGDAWgBTqzrrdwCEOxvJJ
BdH5zryz4MASyDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZzNjYzY0FoRHNieVNRWFItYzY4cy1EQUVzZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvMmU1ZjA5LTRlYTktNDY1Zi05MzAwLWJhZjI2Y2IzOTRkOC8x
L3dYNmdva3JfVkYzT0pnRDFsZlB2VkUyZTRidy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
MmU1ZjA5LTRlYTktNDY1Zi05MzAwLWJhZjI2Y2IzOTRkOC8xLzZzNjYzY0FoRHNi
eVNRWFItYzY4cy1EQUVzZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMNVyQMEAMNVzTANBgkqhkiG9w0B
AQsFAAOCAQEAwTyDbDgZgILYwwBs8BfnFf9JlPUWWIOZMy9WXWyv8gNdw43M2Pne
bnP2ZiKPDCxI8+YBlqWD0y65ou0jYd4Vu2mIiO84pO+8NGTwXlD94F9CJhws2E6G
neqtIqqjKdsOA/lvhbzuT7NaBcF8yn3JoMiQcPsEVCZ7qwtRWVSvJkl5/+JE1MYh
m4Ea9EGO1xWfFgRIKr+pV7JrwFmjWktdYfjfwCmUlvFAhei603R7VJ9GaKCCRp1g
Ka+Z8kktv117P6TIjDPJ8TGqXx7VuY9FRNNEw/UFkCJjkTFj8y1Dbk9n8ZqIF7ij
RWWuX3YoEeur8xMjswxRXN8prSBikdQ6Jw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:01 2025 by rpki-client