Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/6U9v2b9_H16oPmmsjyxvxUr0E3s.roa
File: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (raw, json)
Hash identifier: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=
Subject key identifier: E9:4F:6F:D9:BF:7F:1F:5E:A8:3E:69:AC:8F:2C:6F:C5:4A:F4:13:7B
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 0194258F2B778F21B2E954E96E6D10A04FE3
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/6U9v2b9_H16oPmmsjyxvxUr0E3s.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47622
IP address blocks: 5.199.0.0/17 maxlen: 24
91.246.26.0/23 maxlen: 24
185.169.120.0/22 maxlen: 24
212.74.32.0/19 maxlen: 24
2a00:17f8::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2b:77:8f:21:b2:e9:54:e9:6e:6d:10:a0:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e94f6fd9bf7f1f5ea83e69ac8f2c6fc54af4137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:aa:b0:8f:f9:68:e8:4a:41:2f:a2:9f:a7:
59:d9:0c:09:d6:47:43:53:98:ce:65:02:29:13:8c:
0d:8c:7c:1a:0e:05:9f:98:72:6c:9d:86:a9:5a:8e:
e3:ed:50:5b:e7:58:f4:fc:45:0f:02:0f:20:5e:4c:
2a:8d:63:eb:81:2c:25:36:aa:1e:b3:d6:e1:c8:df:
95:53:20:7c:95:0a:91:63:2a:fb:75:9b:75:b1:a2:
2a:17:c9:c9:bb:d7:dc:0e:cb:df:35:8b:cc:e0:12:
ec:45:5d:a3:11:e3:de:a6:f1:b2:59:1a:82:d0:42:
7c:79:60:38:32:33:9a:5c:bb:10:bb:87:45:70:85:
ae:9f:4c:c4:55:cf:98:dd:ad:ba:22:67:3c:89:99:
11:5d:3b:1b:17:52:08:06:cd:4b:21:fb:25:f0:3c:
c0:04:69:89:69:ce:ce:a4:59:83:92:a8:0b:4a:0e:
a7:b7:71:33:8d:3f:34:ae:0e:12:ad:4b:b2:b5:09:
6e:2c:f0:df:fd:78:35:7c:e3:d9:3f:55:e4:76:13:
de:d1:22:35:a4:42:6d:5f:61:f5:2f:f6:6b:0e:eb:
24:2f:66:4b:68:fa:ea:24:c3:46:5d:a3:86:65:9f:
83:eb:90:11:da:49:2c:ec:0c:2a:40:ca:16:88:11:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:6F:D9:BF:7F:1F:5E:A8:3E:69:AC:8F:2C:6F:C5:4A:F4:13:7B
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/6U9v2b9_H16oPmmsjyxvxUr0E3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.0.0/17
91.246.26.0/23
185.169.120.0/22
212.74.32.0/19
IPv6:
2a00:17f8::/32
Signature Algorithm: sha256WithRSAEncryption
0a:b2:dd:c8:70:d4:37:eb:5f:d9:f2:b4:37:83:bc:dd:0c:b0:
f9:0e:63:54:d2:1a:45:7e:dd:3b:a8:7b:60:09:2d:ad:6a:73:
db:c1:50:d9:fc:3d:d7:6c:d8:f2:a6:15:99:e2:f4:47:17:f2:
06:d0:86:99:ff:8d:1e:83:b1:4c:88:83:e3:69:7d:f7:79:6f:
e1:4b:3e:96:90:ef:52:56:cb:5c:0b:28:97:b2:81:a4:09:98:
c0:b6:78:5c:c3:75:0d:24:d4:a1:96:87:55:b8:32:2b:de:46:
95:84:78:fd:8f:cb:63:e0:a8:72:bb:3f:d3:ea:96:d4:2e:03:
61:37:9f:b8:ee:aa:a1:6f:24:71:00:a0:2f:c0:d6:01:7f:72:
2e:9e:fe:58:dd:fd:65:a5:89:98:7a:db:90:80:ab:f8:92:1b:
63:2e:68:c5:74:b1:f9:e5:74:fe:73:86:24:8e:6c:5e:2b:e6:
14:32:c1:d2:3a:f6:b2:57:3d:9c:e2:c9:bf:88:42:f9:14:05:
2b:d2:5b:78:48:87:f6:d9:f4:b1:17:da:d6:cb:fb:07:0e:6f:
b9:e7:f7:6d:15:69:7e:e8:63:49:43:25:90:ba:33:22:7b:3c:
16:4a:eb:fb:ad:01:7a:a6:52:1b:e7:40:9f:97:c8:9a:36:95:
f0:99:10:02
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQljyt3jyGy6VTpbm0QoE/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxY2Y3MzJhOGE3NDM5ZTkyODBmMjNlZjU3ODQ5ODE0YWYx
OTVhZTAwHhcNMjUwMTAyMDU0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTRmNmZkOWJmN2YxZjVlYTgzZTY5YWM4ZjJjNmZjNTRhZjQxMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveqqsI/5aOhKQS+in6dZ2QwJ1kdD
U5jOZQIpE4wNjHwaDgWfmHJsnYapWo7j7VBb51j0/EUPAg8gXkwqjWPrgSwlNqoe
s9bhyN+VUyB8lQqRYyr7dZt1saIqF8nJu9fcDsvfNYvM4BLsRV2jEePepvGyWRqC
0EJ8eWA4MjOaXLsQu4dFcIWun0zEVc+Y3a26Imc8iZkRXTsbF1IIBs1LIfsl8DzA
BGmJac7OpFmDkqgLSg6nt3EzjT80rg4SrUuytQluLPDf/Xg1fOPZP1XkdhPe0SI1
pEJtX2H1L/ZrDuskL2ZLaPrqJMNGXaOGZZ+D65AR2kks7AwqQMoWiBHY9wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOlPb9m/fx9eqD5prI8sb8VK9BN7MB8GA1UdIwQY
MBaAFFHPcyqKdDnpKA8j71eEmBSvGVrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQt
YjA3MWM3ZWZkOTE1LzEvNlU5djJiOV9IMTZvUG1tc2p5eHZ4VXIwRTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85YTY2MzgtYzhmZC00M2NmLWIxYzQtYjA3MWM3ZWZkOTE1
LzEvVWM5ektvcDBPZWtvRHlQdlY0U1lGSzhaV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHBccAAwQB
W/YaAwQCual4AwQF1EogMA0EAgACMAcDBQAqABf4MA0GCSqGSIb3DQEBCwUAA4IB
AQAKst3IcNQ361/Z8rQ3g7zdDLD5DmNU0hpFft07qHtgCS2tanPbwVDZ/D3XbNjy
phWZ4vRHF/IG0IaZ/40eg7FMiIPjaX33eW/hSz6WkO9SVstcCyiXsoGkCZjAtnhc
w3UNJNShlodVuDIr3kaVhHj9j8tj4Khyuz/T6pbULgNhN5+47qqhbyRxAKAvwNYB
f3Iunv5Y3f1lpYmYetuQgKv4khtjLmjFdLH55XT+c4YkjmxeK+YUMsHSOvayVz2c
4sm/iEL5FAUr0lt4SIf22fSxF9rWy/sHDm+55/dtFWl+6GNJQyWQujMiezwWSuv7
rQF6plIb50Cfl8iaNpXwmRAC
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:05 2025 by rpki-client