Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/6JEzwlY6udZPXuSYOcl2D8ztu1g.roa
File: 6JEzwlY6udZPXuSYOcl2D8ztu1g.roa (raw, json)
Hash identifier: Zw7vU7GsSCKfGzE7Blv45RvL4v1IqktChHOrIEDK3jQ=
Subject key identifier: E8:91:33:C2:56:3A:B9:D6:4F:5E:E4:98:39:C9:76:0F:CC:ED:BB:58
Certificate issuer: /CN=c0dcf1f72ac79a9d029205073414ba5b2f0f60b7
Certificate serial: 0A397284
Authority key identifier: C0:DC:F1:F7:2A:C7:9A:9D:02:92:05:07:34:14:BA:5B:2F:0F:60:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/6JEzwlY6udZPXuSYOcl2D8ztu1g.roa
Signing time: Tue 14 Jun 2022 07:56:44 +0000
ROA not before: Tue 14 Jun 2022 07:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41230
IP address blocks: 185.134.139.0/24 maxlen: 24
185.134.128.0/22 maxlen: 22
2a07:c300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171537028 (0xa397284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0dcf1f72ac79a9d029205073414ba5b2f0f60b7
Validity
Not Before: Jun 14 07:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e89133c2563ab9d64f5ee49839c9760fccedbb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:91:0e:5d:32:4e:95:6f:08:6a:d3:2f:45:
b7:44:06:45:04:92:ef:60:ec:40:ab:e6:de:39:82:
ea:c8:70:75:df:00:b8:cb:5d:75:aa:2e:a3:ab:af:
70:af:29:ba:c1:4c:79:c4:02:46:fc:b3:43:c7:69:
2a:92:ee:5b:ca:86:6d:89:32:2a:78:be:ab:8e:f5:
a4:15:54:c2:89:5a:ac:b7:4a:9b:6e:96:9c:15:31:
a1:2e:6c:1c:b7:cd:c5:67:e9:9a:4a:ae:0f:9c:a1:
92:ac:28:a7:9d:db:1e:82:26:ba:7e:04:9a:0f:b7:
3a:6f:b9:c9:04:84:b1:b5:1b:dc:4d:a9:ed:37:cc:
9e:d5:29:da:00:1d:36:fe:84:1d:17:18:47:75:13:
4b:73:d0:aa:14:80:59:c5:48:aa:96:ab:14:13:ac:
81:85:48:29:2f:40:ba:36:81:91:4a:94:d6:07:00:
03:72:12:85:26:44:0c:d5:3e:ad:ae:4a:5f:05:ad:
03:62:39:11:fc:8e:b9:fc:b5:03:97:7e:37:22:41:
4f:4a:7f:ad:61:8e:21:c8:b7:29:3d:30:2a:5c:e0:
d7:1c:e5:76:0b:24:ef:1a:ae:1f:8f:81:bd:31:4f:
21:99:f6:e9:46:d0:75:ab:a6:a7:40:cd:57:62:97:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:33:C2:56:3A:B9:D6:4F:5E:E4:98:39:C9:76:0F:CC:ED:BB:58
X509v3 Authority Key Identifier:
keyid:C0:DC:F1:F7:2A:C7:9A:9D:02:92:05:07:34:14:BA:5B:2F:0F:60:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/6JEzwlY6udZPXuSYOcl2D8ztu1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8636a8-8bfd-4b1f-937c-5802ec394188/1/wNzx9yrHmp0CkgUHNBS6Wy8PYLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.128.0/22
185.134.139.0/24
IPv6:
2a07:c300::/29
Signature Algorithm: sha256WithRSAEncryption
30:0c:ac:f1:99:d0:e8:ea:b8:a9:a3:aa:e2:58:4f:4f:4b:f7:
b3:6b:97:ff:e7:9b:f2:4e:fb:ef:f6:7a:ac:cc:f7:fd:37:e5:
5d:ac:2d:9c:7c:53:37:30:8a:bc:e3:cc:79:32:9d:7e:79:f9:
e3:b6:c8:4b:8b:0d:10:43:79:47:bd:7e:b3:1e:cd:5a:8a:7c:
38:fb:77:ae:39:f6:e4:9a:6a:76:49:09:5e:d5:a1:52:86:b7:
36:ce:28:59:0b:4d:c6:84:0c:99:17:4e:59:21:8e:09:6d:14:
92:66:2d:03:3b:3a:32:c3:e0:fa:27:51:61:c7:b0:34:fc:f3:
1d:98:9e:02:6b:69:c0:a1:00:dd:87:1b:df:68:a4:64:f8:4e:
d0:a1:97:ea:4b:44:4e:92:23:86:5a:40:cb:28:be:b8:2e:5c:
23:2c:ae:08:22:f8:77:9a:1d:ea:69:79:43:22:e8:79:29:ac:
12:ef:79:94:18:c0:78:dc:4e:24:57:ae:09:99:61:66:88:b8:
d2:06:05:3e:a3:db:3e:a7:f8:e4:b9:ea:be:83:c2:d5:9d:20:
95:0f:7f:6a:35:89:f9:3c:2f:0d:ad:34:c6:a2:24:93:d7:15:
3e:59:f9:2b:fe:52:a4:9c:52:8c:45:6a:0e:28:bd:ba:1f:61:
e0:4f:c4:fd
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECjlyhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MGRjZjFmNzJhYzc5YTlkMDI5MjA1MDczNDE0YmE1YjJmMGY2MGI3MB4XDTIyMDYx
NDA3NTY0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTg5MTMzYzI1NjNh
YjlkNjRmNWVlNDk4MzljOTc2MGZjY2VkYmI1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMt6kQ5dMk6Vbwhq0y9Ft0QGRQSS72DsQKvm3jmC6shwdd8A
uMtddaouo6uvcK8pusFMecQCRvyzQ8dpKpLuW8qGbYkyKni+q471pBVUwolarLdK
m26WnBUxoS5sHLfNxWfpmkquD5yhkqwop53bHoImun4Emg+3Om+5yQSEsbUb3E2p
7TfMntUp2gAdNv6EHRcYR3UTS3PQqhSAWcVIqparFBOsgYVIKS9AujaBkUqU1gcA
A3IShSZEDNU+ra5KXwWtA2I5EfyOufy1A5d+NyJBT0p/rWGOIci3KT0wKlzg1xzl
dgsk7xquH4+BvTFPIZn26UbQdaump0DNV2KXOc0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTokTPCVjq51k9e5Jg5yXYPzO27WDAfBgNVHSMEGDAWgBTA3PH3KseanQKS
BQc0FLpbLw9gtzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dOeng5eXJIbXAwQ2tnVUhOQlM2V3k4UFlMYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvODYzNmE4LThiZmQtNGIxZi05MzdjLTU4MDJlYzM5NDE4OC8x
LzZKRXp3bFk2dWRaUFh1U1lPY2wyRDh6dHUxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
ODYzNmE4LThiZmQtNGIxZi05MzdjLTU4MDJlYzM5NDE4OC8xL3dOeng5eXJIbXAw
Q2tnVUhOQlM2V3k4UFlMYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArmGgAMEALmGizANBAIAAjAHAwUD
KgfDADANBgkqhkiG9w0BAQsFAAOCAQEAMAys8ZnQ6Oq4qaOq4lhPT0v3s2uX/+eb
8k777/Z6rMz3/TflXawtnHxTNzCKvOPMeTKdfnn547bIS4sNEEN5R71+sx7NWop8
OPt3rjn25JpqdkkJXtWhUoa3Ns4oWQtNxoQMmRdOWSGOCW0UkmYtAzs6MsPg+idR
YcewNPzzHZieAmtpwKEA3Ycb32ikZPhO0KGX6ktETpIjhlpAyyi+uC5cIyyuCCL4
d5od6ml5QyLoeSmsEu95lBjAeNxOJFeuCZlhZoi40gYFPqPbPqf45LnqvoPC1Z0g
lQ9/ajWJ+TwvDa00xqIkk9cVPln5K/5SpJxSjEVqDii9uh9h4E/E/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:11 2025 by rpki-client