Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6FpuencPyT-8dQzh1FNVf1eR8lY.roa
File: 6FpuencPyT-8dQzh1FNVf1eR8lY.roa (raw, json)
Hash identifier: i3uXmEOiS1faR7DuwXdtVn0K+eXljrYJ1u8N91iyajQ=
Subject key identifier: E8:5A:6E:7A:77:0F:C9:3F:BC:75:0C:E1:D4:53:55:7F:57:91:F2:56
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194A9DB921825B05D1BD2E0D66DAA4333EF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6FpuencPyT-8dQzh1FNVf1eR8lY.roa
Signing time: Mon 27 Jan 2025 22:22:06 +0000
ROA not before: Mon 27 Jan 2025 22:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.100.0/24 maxlen: 32
185.144.101.0/24 maxlen: 32
185.144.102.0/24 maxlen: 32
185.144.103.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.100.0/24 maxlen: 32
194.36.101.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
195.85.71.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:db:92:18:25:b0:5d:1b:d2:e0:d6:6d:aa:43:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 27 22:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e85a6e7a770fc93fbc750ce1d453557f5791f256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:33:06:b0:3d:e3:ae:37:f1:9f:a7:4f:4e:
82:d8:b7:3f:4f:1d:4c:7b:55:95:94:15:40:ca:cc:
cb:63:ae:d5:54:27:31:18:85:eb:23:ad:d1:69:c3:
a0:6a:5e:6f:51:61:09:02:69:d5:48:3a:bb:a7:4f:
1d:d6:4b:61:8b:2b:71:3c:8c:0f:1a:d9:72:22:31:
eb:7a:17:8b:12:b5:78:b3:a2:d1:74:29:a1:d9:1e:
e6:b8:3f:ca:c3:0b:1a:ac:dc:ec:38:35:f4:24:cc:
9b:17:25:ca:99:f5:38:c9:c0:dd:39:0c:d4:dc:7d:
d3:25:05:2b:fe:eb:3b:34:82:11:28:c5:f2:2d:7e:
54:7e:a0:07:5a:08:69:7b:98:22:4f:bd:be:c6:ab:
6c:c4:2e:2b:bb:1a:41:ed:65:03:b1:50:e2:eb:04:
62:f6:bf:be:de:25:f2:73:36:44:04:09:b1:40:15:
fe:e6:e4:c7:10:c5:a3:42:b0:a8:85:52:d0:0b:84:
96:da:23:6b:16:57:9b:67:a7:84:91:1a:18:68:85:
14:db:34:62:87:38:63:7f:0d:25:69:ea:e3:af:0b:
d1:c6:9e:57:7f:20:09:ed:ed:eb:9f:10:6a:b8:ea:
9a:e5:cb:ca:5d:2f:d4:51:41:88:e4:35:2a:39:6a:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:6E:7A:77:0F:C9:3F:BC:75:0C:E1:D4:53:55:7F:57:91:F2:56
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6FpuencPyT-8dQzh1FNVf1eR8lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
128.0.119.0/24
185.117.20.0/22
185.144.100.0/22
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.208.0/22
194.36.100.0/22
194.124.64.0/22
195.85.68.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:44:14:32:38:80:a9:4b:b1:86:6c:aa:30:35:72:40:d2:9e:
bd:2c:b5:96:6a:4c:84:17:b6:42:7d:c6:da:ce:9c:66:ca:7a:
87:4b:b5:25:2c:65:74:7d:de:7f:a0:23:1a:f5:35:37:71:90:
8a:5c:d7:04:b4:e2:5c:ca:24:b9:66:3c:9e:05:20:f6:1c:2f:
9e:2d:50:2c:d2:05:31:92:c8:bb:30:5c:a6:e4:eb:ce:4c:74:
4e:2b:d7:23:b8:c7:b3:7e:b1:94:81:f9:e5:76:80:15:3b:9a:
4b:75:3d:16:02:71:05:16:c3:06:26:71:f1:d7:68:de:9a:de:
86:8c:f6:6c:9b:4b:73:c2:c3:09:fb:3e:ee:ca:56:47:a0:8d:
b7:68:68:bb:f6:f9:f6:37:af:f7:30:7e:ee:bf:41:af:43:b7:
3a:77:5d:2f:c9:59:93:c3:fa:4e:79:9f:79:2f:e4:5a:01:e5:
28:8a:c0:12:b5:e8:ca:1d:23:5a:5c:bf:42:3a:c6:a2:ed:60:
83:62:de:6a:ed:3b:9a:88:b0:40:a5:f1:f2:33:79:2b:df:b0:
98:99:9e:78:f3:b7:5c:16:fc:db:87:6b:3e:f5:6b:ce:a4:5b:
ee:9e:dd:d7:7b:e9:5d:4b:cf:29:be:05:42:45:e5:fd:8d:84:
7a:5d:6b:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:13 2025 by rpki-client