Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/6DW1a6m05hh-gzCp-p2Th_jROrQ.roa
File: 6DW1a6m05hh-gzCp-p2Th_jROrQ.roa (raw, json)
Hash identifier: DVwz9dCE2VA6PR9eWz/ZL0YuKXs4l+SQG40TAFfVI+w=
Subject key identifier: E8:35:B5:6B:A9:B4:E6:18:7E:83:30:A9:FA:9D:93:87:F8:D1:3A:B4
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 019427B63244FB466B7E78A17C748879CFAF
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/6DW1a6m05hh-gzCp-p2Th_jROrQ.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 37.77.160.0/21 maxlen: 24
45.156.60.0/23 maxlen: 24
45.156.62.0/23 maxlen: 23
46.31.104.0/21 maxlen: 24
81.29.176.0/22 maxlen: 23
85.208.76.0/22 maxlen: 24
185.25.234.0/23 maxlen: 23
185.37.116.0/22 maxlen: 23
185.47.138.0/24 maxlen: 24
185.59.20.0/22 maxlen: 23
185.186.12.0/22 maxlen: 23
185.246.95.0/24 maxlen: 24
195.177.114.0/24 maxlen: 24
2a02:2420::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:32:44:fb:46:6b:7e:78:a1:7c:74:88:79:cf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e835b56ba9b4e6187e8330a9fa9d9387f8d13ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:74:ba:39:c8:46:4b:ac:83:bb:6b:7b:80:
00:0e:95:67:03:e7:1e:83:ed:d9:ce:c0:af:35:ce:
8b:0f:2e:c5:6a:d3:32:69:98:95:49:8e:32:3b:fa:
8b:0e:cb:ca:a0:f4:3b:7a:ad:2b:0a:09:ce:8c:c3:
29:de:31:e6:ce:be:01:3e:8a:66:9a:ec:2c:59:b2:
44:27:28:ac:6a:7b:3f:0a:6a:03:30:5b:bf:9a:90:
e9:e0:7a:43:11:d2:2a:fa:6f:ed:a2:d8:92:73:d8:
39:eb:a3:d6:f0:5f:a9:89:a4:25:21:3a:c9:8d:da:
c5:1f:ee:4b:df:8d:f1:6d:f1:ca:01:0a:91:1c:f4:
bf:99:1e:c6:a7:37:0b:2a:01:6b:3a:6f:c5:8e:e1:
96:cd:27:a1:fe:53:a9:0a:0e:9b:a7:5e:63:af:a2:
1a:5d:b4:84:55:e2:99:2b:61:b8:dd:44:f4:c1:02:
06:48:07:d6:8c:1c:1a:3d:a1:48:5b:ca:60:27:57:
1c:75:d8:89:dd:c7:7c:33:ad:21:a0:88:ce:00:69:
6c:8d:09:bd:34:12:8d:0a:6e:c7:bf:07:89:f5:b7:
8a:b1:da:7d:39:de:7a:7d:ba:7f:22:c8:e6:dc:6f:
65:a3:fd:52:13:27:c5:2c:a5:cb:4e:36:c9:cc:20:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:B5:6B:A9:B4:E6:18:7E:83:30:A9:FA:9D:93:87:F8:D1:3A:B4
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/6DW1a6m05hh-gzCp-p2Th_jROrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.160.0/21
45.156.60.0/22
46.31.104.0/21
81.29.176.0/22
85.208.76.0/22
185.25.234.0/23
185.37.116.0/22
185.47.138.0/24
185.59.20.0/22
185.186.12.0/22
185.246.95.0/24
195.177.114.0/24
IPv6:
2a02:2420::/32
Signature Algorithm: sha256WithRSAEncryption
93:2f:b3:d6:c4:84:91:a9:f3:eb:ed:78:44:98:4b:1d:ae:d3:
04:f6:98:66:26:1d:e1:ae:ee:78:bc:08:ec:43:eb:2f:8b:df:
99:ee:7c:f7:be:a0:de:ad:4e:76:95:36:b0:c1:00:8d:ef:d9:
05:c5:33:93:dd:17:e7:b2:c6:3b:2d:7d:25:fe:c1:07:9d:8f:
56:e5:ce:67:f3:de:e8:32:58:f0:4d:14:e0:11:57:0b:14:c4:
62:d3:fd:5b:5e:cf:74:a9:47:00:d0:ae:8e:ea:ce:ef:c9:e1:
6e:c6:a2:66:7f:35:56:6f:ba:12:25:83:76:73:29:9d:42:f2:
56:e3:21:48:00:10:1f:ec:30:78:fb:29:2f:e6:a0:33:2e:0b:
56:6b:9f:e0:23:55:91:c3:f7:a2:0a:b7:35:98:01:2e:f0:16:
66:99:2f:88:f9:80:d3:73:be:e2:bd:ca:73:bb:da:8d:64:a9:
fd:51:80:b5:08:65:bc:be:48:69:69:fb:39:4e:60:98:fc:0e:
9f:32:a4:4c:85:b4:9b:56:22:af:b2:29:67:6c:80:c2:5c:0b:
82:b3:94:63:fa:27:73:5d:3d:43:b2:9a:44:ef:81:a1:47:a1:
ac:60:16:9d:f3:c8:5c:ff:91:66:31:0d:07:e5:69:1b:58:e3:
74:35:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:45 2025 by rpki-client