Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6LXnmthHIvZGUQ45P4sMQxqXMdU.roa
File: 6LXnmthHIvZGUQ45P4sMQxqXMdU.roa (raw, json)
Hash identifier: Rj9VVfObc+GIqvd4+AcLgBA+GN+1ueVhJmO1Yc9xMWE=
Subject key identifier: E8:B5:E7:9A:D8:47:22:F6:46:51:0E:39:3F:8B:0C:43:1A:97:31:D5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A504539A1C599DCB439965637DDBA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6LXnmthHIvZGUQ45P4sMQxqXMdU.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208069
IP address blocks: 185.119.254.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:45:39:a1:c5:99:dc:b4:39:96:56:37:dd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b5e79ad84722f646510e393f8b0c431a9731d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:df:cb:4d:a8:76:39:1f:77:5d:7c:80:ae:
da:6e:4c:47:c3:4d:a3:33:16:72:3d:e3:63:07:0c:
d7:9d:c7:4b:9e:3e:4a:79:b0:aa:55:91:72:21:c7:
0d:5a:ea:94:01:eb:e9:cb:37:af:4f:db:d5:ce:78:
ed:e3:ad:d1:a9:26:d2:70:32:74:36:cc:49:17:4e:
37:40:07:b9:68:59:1e:5f:3b:58:78:ff:d4:bb:d8:
14:53:6c:3e:32:2d:6f:a9:3c:63:a5:53:31:43:1a:
15:97:19:94:b2:c2:21:e4:9d:c2:36:4a:f7:0f:1e:
c8:1c:d9:37:8f:87:01:86:d9:a6:9d:da:7c:e3:1c:
0a:b3:dd:89:5a:74:12:c2:30:b8:9e:4d:a2:b0:ce:
a2:7a:86:a8:e2:a9:b7:d1:c9:fb:63:f9:33:52:23:
30:0c:66:5d:70:a2:8a:d7:fb:86:5f:b6:8e:83:cb:
70:a6:d8:54:92:32:e0:57:cf:2a:da:d7:1b:e6:1a:
5c:d5:77:9d:c7:4a:d5:e4:82:3a:f5:70:3e:21:7f:
af:3e:4b:4c:95:d3:a3:68:16:8d:77:6c:d1:57:b6:
8b:fc:08:99:f8:52:1f:66:ca:02:4d:00:7b:75:c3:
96:f9:0e:19:c6:f9:4a:06:65:6d:41:d7:73:ff:1e:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:E7:9A:D8:47:22:F6:46:51:0E:39:3F:8B:0C:43:1A:97:31:D5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/6LXnmthHIvZGUQ45P4sMQxqXMdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1f:e0:36:2c:d0:52:71:9f:4c:e6:d9:a4:63:25:9f:b2:f3:
9d:9f:17:88:a9:6a:1f:f6:e0:54:76:a5:b7:ea:56:c2:b6:0b:
1a:c2:fc:64:23:0f:0a:6b:b2:51:bf:27:9c:37:63:1c:46:f0:
66:da:05:76:fd:42:50:e7:a4:0f:78:a1:27:5d:c7:7d:b1:b4:
e4:8f:a8:c5:b5:4f:ec:07:b2:d0:fc:2c:50:f1:bc:2f:9f:b7:
aa:a0:f1:01:e1:29:68:86:7b:25:8d:52:3e:0d:f4:11:01:3b:
d4:6e:29:4d:33:00:dc:fd:d5:f2:cd:d9:49:7e:5e:d9:8b:9c:
d3:ac:81:e7:8c:f1:c4:c1:1a:e4:69:b7:08:4d:de:f7:c4:69:
81:08:d6:30:fe:81:e2:9d:b9:c0:5d:f4:b3:71:a5:12:c1:da:
e1:62:b7:77:ea:c8:60:95:a6:c5:48:17:1f:2a:f7:2e:14:ec:
2f:63:b6:2a:af:3f:cf:8c:39:84:8d:ad:31:48:64:48:1b:e5:
d5:44:2a:b7:13:df:f8:32:a9:1b:51:95:9b:86:dc:1d:87:1c:
81:7b:7e:cb:fa:12:01:ee:ad:92:b4:4a:03:34:70:53:8f:69:
6e:df:e8:68:b6:d1:73:89:93:73:02:03:de:60:24:78:53:c3:
6b:3d:2f:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjalBFOaHFmdy0OZZWN926MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI1ZTc5YWQ4NDcyMmY2NDY1MTBlMzkzZjhiMGM0MzFhOTczMWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaTfy02odjkfd118gK7abkxHw02j
MxZyPeNjBwzXncdLnj5KebCqVZFyIccNWuqUAevpyzevT9vVznjt463RqSbScDJ0
NsxJF043QAe5aFkeXztYeP/Uu9gUU2w+Mi1vqTxjpVMxQxoVlxmUssIh5J3CNkr3
Dx7IHNk3j4cBhtmmndp84xwKs92JWnQSwjC4nk2isM6ieoao4qm30cn7Y/kzUiMw
DGZdcKKK1/uGX7aOg8twpthUkjLgV88q2tcb5hpc1Xedx0rV5II69XA+IX+vPktM
ldOjaBaNd2zRV7aL/AiZ+FIfZsoCTQB7dcOW+Q4ZxvlKBmVtQddz/x5VeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOi155rYRyL2RlEOOT+LDEMalzHVMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvNkxYbm10aEhJdlpHVVE0NVA0c01ReHFYTWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXf+MA0G
CSqGSIb3DQEBCwUAA4IBAQBvH+A2LNBScZ9M5tmkYyWfsvOdnxeIqWof9uBUdqW3
6lbCtgsawvxkIw8Ka7JRvyecN2McRvBm2gV2/UJQ56QPeKEnXcd9sbTkj6jFtU/s
B7LQ/CxQ8bwvn7eqoPEB4SlohnsljVI+DfQRATvUbilNMwDc/dXyzdlJfl7Zi5zT
rIHnjPHEwRrkabcITd73xGmBCNYw/oHinbnAXfSzcaUSwdrhYrd36shglabFSBcf
KvcuFOwvY7Yqrz/PjDmEja0xSGRIG+XVRCq3E9/4MqkbUZWbhtwdhxyBe37L+hIB
7q2StEoDNHBTj2lu3+hottFziZNzAgPeYCR4U8NrPS+s
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:39 2025 by rpki-client