Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/6s1rAoY1cgsZglE9s92pMrhjc5Q.roa
File: 6s1rAoY1cgsZglE9s92pMrhjc5Q.roa (raw, json)
Hash identifier: nkfFdPk5iNJ2P8OJWCdmalFNk/kh9hrsJictlP+YVtY=
Subject key identifier: EA:CD:6B:02:86:35:72:0B:19:82:51:3D:B3:DD:A9:32:B8:63:73:94
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 019423699DFE72D0EDA7EDC635588660C0ED
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/6s1rAoY1cgsZglE9s92pMrhjc5Q.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35374
IP address blocks: 86.110.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9d:fe:72:d0:ed:a7:ed:c6:35:58:86:60:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eacd6b028635720b1982513db3dda932b8637394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:97:95:56:55:61:b6:4e:a9:06:7a:80:b0:
dd:91:05:25:02:93:ad:b3:e9:66:d4:03:ba:1f:3f:
6f:0c:9d:e5:e3:54:d9:b6:49:bc:06:f0:7a:e8:17:
66:3a:09:ae:29:f6:d2:4a:81:69:d9:27:e8:3c:b5:
ee:24:69:5f:67:b9:d2:ee:d1:c3:c1:04:b7:f7:72:
1e:f7:d6:d8:9c:e6:68:16:03:42:45:3f:13:d4:7c:
ac:15:e6:ce:83:da:f2:83:45:62:15:a2:54:05:9c:
59:07:99:fb:be:6b:55:48:c4:14:d4:86:b1:9e:4c:
d2:a8:b4:9a:7b:a2:8b:ce:24:da:91:eb:f4:31:a4:
45:ae:30:e7:8c:d9:84:d3:12:df:c2:4e:3a:ff:51:
59:3f:8b:87:56:4d:7c:5f:f6:29:ec:29:bf:cc:fc:
07:e6:3c:81:70:78:12:26:e4:0d:f8:0a:a9:81:d1:
d9:5f:d7:d5:12:40:b9:d7:61:1b:70:3d:ae:d0:95:
fb:8f:ca:fc:1f:e0:58:eb:10:30:4b:76:45:55:8a:
ab:26:2e:e9:f6:1c:a3:0c:3c:b8:3b:41:df:39:3f:
13:46:0d:ce:cf:d5:0e:f4:c7:f5:89:eb:aa:c2:87:
02:ca:a3:5f:7d:52:ed:4e:b7:33:90:be:a8:cc:e3:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:6B:02:86:35:72:0B:19:82:51:3D:B3:DD:A9:32:B8:63:73:94
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/6s1rAoY1cgsZglE9s92pMrhjc5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:e7:70:df:6b:3b:92:32:80:6c:1e:65:10:d6:58:a0:d4:d3:
d6:2b:d9:c2:0a:28:67:1f:4f:5e:18:ad:04:63:44:94:6b:14:
4c:3a:0d:de:f3:af:42:0b:22:06:2e:71:c7:f4:99:58:5c:a3:
02:a4:f7:03:de:33:be:a4:b4:7b:0b:66:b1:b2:82:d9:98:34:
6b:d5:90:2f:e6:26:cd:74:20:63:35:ab:f3:90:e5:95:cd:ab:
25:8c:8c:87:d2:93:53:d3:a3:05:b4:d9:cd:2f:7c:30:12:10:
39:1b:0e:71:ec:14:50:58:9a:78:a9:c6:c5:94:f3:f0:a4:f8:
40:7d:8c:d2:f4:90:93:34:c3:e1:15:f4:85:64:a5:b0:62:6c:
e6:47:86:9a:70:2d:0a:93:62:8e:76:c8:8c:8d:cf:80:9f:fb:
74:23:de:66:c6:bc:2b:60:7c:97:9a:56:b6:c5:12:f3:68:6a:
7b:d0:6e:50:e1:51:0d:73:d6:22:c2:39:d9:6c:ae:da:27:e8:
88:1b:21:16:a4:51:22:0c:32:79:85:7d:84:6e:3c:dd:8e:6e:
56:be:77:a5:cc:3b:71:51:61:8e:d7:1f:73:af:45:b5:24:f9:
cb:3d:35:d9:1b:13:53:13:7f:0e:9f:04:1b:2b:31:f8:0c:dc:
69:34:a8:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaZ3+ctDtp+3GNViGYMDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjUwMTAxMTk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWNkNmIwMjg2MzU3MjBiMTk4MjUxM2RiM2RkYTkzMmI4NjM3Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxGXlVZVYbZOqQZ6gLDdkQUlApOt
s+lm1AO6Hz9vDJ3l41TZtkm8BvB66BdmOgmuKfbSSoFp2SfoPLXuJGlfZ7nS7tHD
wQS393Ie99bYnOZoFgNCRT8T1HysFebOg9ryg0ViFaJUBZxZB5n7vmtVSMQU1Iax
nkzSqLSae6KLziTakev0MaRFrjDnjNmE0xLfwk46/1FZP4uHVk18X/Yp7Cm/zPwH
5jyBcHgSJuQN+AqpgdHZX9fVEkC512EbcD2u0JX7j8r8H+BY6xAwS3ZFVYqrJi7p
9hyjDDy4O0HfOT8TRg3Oz9UO9Mf1ieuqwocCyqNffVLtTrczkL6ozOOa8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrNawKGNXILGYJRPbPdqTK4Y3OUMB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvNnMxckFvWTFjZ3NaZ2xFOXM5MnBNcmhqYzVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm7QMA0G
CSqGSIb3DQEBCwUAA4IBAQB753DfazuSMoBsHmUQ1lig1NPWK9nCCihnH09eGK0E
Y0SUaxRMOg3e869CCyIGLnHH9JlYXKMCpPcD3jO+pLR7C2axsoLZmDRr1ZAv5ibN
dCBjNavzkOWVzasljIyH0pNT06MFtNnNL3wwEhA5Gw5x7BRQWJp4qcbFlPPwpPhA
fYzS9JCTNMPhFfSFZKWwYmzmR4aacC0Kk2KOdsiMjc+An/t0I95mxrwrYHyXmla2
xRLzaGp70G5Q4VENc9YiwjnZbK7aJ+iIGyEWpFEiDDJ5hX2Ebjzdjm5WvnelzDtx
UWGO1x9zr0W1JPnLPTXZGxNTE38OnwQbKzH4DNxpNKgM
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:41 2025 by rpki-client