Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/6q2XvWJDNyZHxwhNEFaixSgzMO0.roa
File: 6q2XvWJDNyZHxwhNEFaixSgzMO0.roa (raw, json)
Hash identifier: SodjqclNB5A2qS0eo5CdNTzrUFgVRNH441CvrbgX6vE=
Subject key identifier: EA:AD:97:BD:62:43:37:26:47:C7:08:4D:10:56:A2:C5:28:33:30:ED
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 0194ACAD0084848753FFF8A1152F8C6F93EF
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/6q2XvWJDNyZHxwhNEFaixSgzMO0.roa
Signing time: Tue 28 Jan 2025 11:30:06 +0000
ROA not before: Tue 28 Jan 2025 11:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 193.203.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:ad:00:84:84:87:53:ff:f8:a1:15:2f:8c:6f:93:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Jan 28 11:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaad97bd6243372647c7084d1056a2c5283330ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:f7:4b:62:da:62:ea:90:3b:a3:7a:02:19:
aa:c7:0f:d5:50:92:45:2a:6a:e6:f5:e6:a7:46:af:
1a:1a:3a:05:a9:95:d8:33:a6:19:95:00:97:ed:fd:
58:fc:2f:6e:0f:49:18:4f:79:c3:6d:05:4f:72:ec:
8f:16:95:b3:44:06:ae:69:0e:17:a6:de:ce:14:ed:
fa:47:0d:80:c2:11:e8:cb:45:24:66:67:df:64:f0:
6c:95:74:b6:f7:af:ad:d3:5e:bb:d5:d3:4f:a0:5c:
de:f3:d3:e2:6d:79:19:bf:0b:3e:1f:68:4f:f5:0a:
a9:49:87:ea:74:b7:a0:cc:ef:46:aa:16:b6:a4:29:
37:4a:8b:a3:c1:c0:a0:d2:92:89:d7:39:7e:63:74:
42:9c:1b:d0:70:11:4d:1c:a3:2b:77:22:ee:3f:7f:
d1:5e:fb:87:61:22:17:42:ca:2e:a2:1b:8b:ba:c4:
f9:f1:4f:57:a3:a8:38:a1:e4:34:f9:05:38:f7:f9:
03:2b:45:5a:53:83:39:bf:49:b7:c8:6a:90:76:8d:
5e:ca:3d:c2:ed:58:6d:f9:98:0e:10:5e:86:9f:58:
7f:16:08:1a:99:2a:19:cd:97:07:b1:f8:98:e8:d0:
fb:8b:24:2f:39:56:5b:7b:48:b8:96:55:db:25:c4:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:97:BD:62:43:37:26:47:C7:08:4D:10:56:A2:C5:28:33:30:ED
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/6q2XvWJDNyZHxwhNEFaixSgzMO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ac:6b:24:0d:08:19:e4:26:20:d0:9e:44:a4:20:a4:4e:01:
bb:69:4e:e2:86:31:b4:31:9f:2f:c6:44:53:a9:df:79:52:fd:
6d:48:7b:1a:39:52:9c:eb:88:24:5d:cc:c8:46:45:d6:b3:d6:
61:2f:6e:da:7a:c0:4e:cc:4f:ea:7f:36:86:a2:bf:00:21:fb:
21:20:01:79:c0:13:a8:45:e7:d2:3f:82:e0:f6:98:dc:aa:30:
67:78:1f:e9:20:5a:91:f5:04:8f:5b:53:18:3e:2f:71:bf:53:
4a:3c:c3:ae:e0:4f:1a:bc:0e:fb:65:c0:5c:3e:e1:2a:00:97:
2c:b4:c3:cb:0a:d6:d8:52:b2:bc:68:b9:ac:ab:82:58:a8:f2:
cb:cb:80:2d:18:6b:32:67:5d:8c:4e:9e:73:71:93:80:8b:db:
2c:0f:f7:bf:dc:89:61:50:08:e3:30:03:f3:90:b4:ac:d0:c6:
7b:45:be:67:55:50:e4:d9:88:20:d0:e4:59:1c:6c:57:bb:1d:
8e:2f:6d:ac:06:17:98:ca:a1:f7:dd:15:9d:16:44:db:6c:44:
44:1d:61:a4:5e:4c:f8:d5:8b:f9:88:2a:31:64:ab:48:85:80:
25:07:41:75:8f:74:2f:61:84:de:fa:c5:8d:f1:ec:56:8b:6f:
08:df:f3:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSsrQCEhIdT//ihFS+Mb5PvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2
OWU0ZmMwHhcNMjUwMTI4MTEzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFkOTdiZDYyNDMzNzI2NDdjNzA4NGQxMDU2YTJjNTI4MzMzMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBP3S2LaYuqQO6N6Ahmqxw/VUJJF
Kmrm9eanRq8aGjoFqZXYM6YZlQCX7f1Y/C9uD0kYT3nDbQVPcuyPFpWzRAauaQ4X
pt7OFO36Rw2AwhHoy0UkZmffZPBslXS296+t01671dNPoFze89PibXkZvws+H2hP
9QqpSYfqdLegzO9Gqha2pCk3SoujwcCg0pKJ1zl+Y3RCnBvQcBFNHKMrdyLuP3/R
XvuHYSIXQsouohuLusT58U9Xo6g4oeQ0+QU49/kDK0VaU4M5v0m3yGqQdo1eyj3C
7Vht+ZgOEF6Gn1h/FggamSoZzZcHsfiY6ND7iyQvOVZbe0i4llXbJcRIPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqtl71iQzcmR8cITRBWosUoMzDtMB8GA1UdIwQY
MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt
MDlkYmQwOGNiZTJkLzEvNnEyWHZXSkROeVpIeHdoTkVGYWl4U2d6TU8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk
LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwctvMA0G
CSqGSIb3DQEBCwUAA4IBAQAsrGskDQgZ5CYg0J5EpCCkTgG7aU7ihjG0MZ8vxkRT
qd95Uv1tSHsaOVKc64gkXczIRkXWs9ZhL27aesBOzE/qfzaGor8AIfshIAF5wBOo
RefSP4Lg9pjcqjBneB/pIFqR9QSPW1MYPi9xv1NKPMOu4E8avA77ZcBcPuEqAJcs
tMPLCtbYUrK8aLmsq4JYqPLLy4AtGGsyZ12MTp5zcZOAi9ssD/e/3IlhUAjjMAPz
kLSs0MZ7Rb5nVVDk2Ygg0ORZHGxXux2OL22sBheYyqH33RWdFkTbbEREHWGkXkz4
1Yv5iCoxZKtIhYAlB0F1j3QvYYTe+sWN8exWi28I3/N/
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:21:00 2025 by rpki-client