Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/6KAarDinBuYaFzSswBgWFqFQJ6A.roa
File: 6KAarDinBuYaFzSswBgWFqFQJ6A.roa (raw, json)
Hash identifier: CZ/vujxucwxnS9OELPqBuYo+ZY+BljbX4uk7v+9SDhw=
Subject key identifier: E8:A0:1A:AC:38:A7:06:E6:1A:17:34:AC:C0:18:16:16:A1:50:27:A0
Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Certificate serial: 01942746C5BB6D3CFAF3E460804002AB5941
Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/6KAarDinBuYaFzSswBgWFqFQJ6A.roa
Signing time: Thu 02 Jan 2025 13:48:56 +0000
ROA not before: Thu 02 Jan 2025 13:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39702
IP address blocks: 85.190.192.0/19 maxlen: 24
89.106.216.0/21 maxlen: 24
178.251.88.0/21 maxlen: 24
185.5.100.0/22 maxlen: 24
2a01:4d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:c5:bb:6d:3c:fa:f3:e4:60:80:40:02:ab:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0
Validity
Not Before: Jan 2 13:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8a01aac38a706e61a1734acc0181616a15027a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:7f:8a:f3:71:2c:49:1b:2e:b4:a4:f6:00:
11:6d:ec:f6:f1:b5:28:4f:b3:05:20:56:b1:c7:5b:
16:3d:f1:3c:36:ec:52:b8:bd:6f:ff:3d:3f:8e:13:
3e:94:a9:63:0f:c3:11:30:ab:a8:02:bb:f3:50:75:
41:8b:3c:31:91:95:1b:98:82:ad:ff:f7:e5:d5:c1:
bb:11:be:e1:16:cd:48:f8:ed:ab:ae:f6:d4:75:81:
9e:8a:0b:9a:34:8e:6a:76:6d:89:95:6e:7c:64:8e:
91:72:01:99:14:41:13:d5:30:99:df:bf:62:14:e6:
fd:00:a2:62:34:24:fe:ea:0d:92:51:d1:fc:7c:b6:
9c:d2:36:30:10:17:36:82:a9:67:45:5c:fb:66:a6:
7a:ec:25:c6:b4:8e:fc:cb:21:c2:37:98:d6:44:ff:
24:35:bf:25:0e:e5:5c:e7:af:83:f8:ac:c7:18:7e:
9e:5f:ae:53:e0:e1:a5:ed:52:0f:ef:90:c5:2f:cf:
c1:47:ba:10:f8:6d:b5:7a:83:f5:3f:50:e9:24:3d:
fe:bc:bd:ca:b3:ac:e8:2d:bc:3b:9b:61:4a:4c:a9:
01:d1:0b:7c:98:db:73:60:c3:5e:6f:4e:c0:22:5b:
d0:3c:85:2f:b4:9a:61:a7:0e:8e:13:cb:57:31:1c:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:1A:AC:38:A7:06:E6:1A:17:34:AC:C0:18:16:16:A1:50:27:A0
X509v3 Authority Key Identifier:
keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/6KAarDinBuYaFzSswBgWFqFQJ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.192.0/19
89.106.216.0/21
178.251.88.0/21
185.5.100.0/22
IPv6:
2a01:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
a9:61:35:7f:4a:fa:52:3c:88:37:42:44:93:30:f7:2c:ac:48:
76:74:4e:3b:38:e6:39:43:56:fd:e7:53:59:09:0f:2b:26:6f:
4b:b8:4d:8b:93:9a:3f:d2:a4:e4:47:de:a3:d0:de:25:71:cd:
21:9a:40:45:86:81:36:69:21:71:5d:79:64:c6:74:c2:83:2f:
be:e2:d8:eb:c5:7d:cb:44:2b:8e:88:82:56:2f:f3:b5:cb:34:
10:49:54:80:4d:51:47:7f:c1:4a:2e:69:2b:a8:96:eb:6e:70:
54:fa:7e:1a:8b:51:c1:f8:bb:78:da:02:9f:44:b4:44:e0:6b:
2d:8d:bd:66:f7:da:68:1b:cc:a6:8c:4a:1f:d0:67:f5:0a:fb:
c4:1c:2a:2e:e6:16:02:65:44:b6:3f:96:13:f5:58:0d:55:ae:
f7:99:8e:67:eb:fa:bf:23:d4:9c:17:15:f2:39:cb:de:30:98:
90:d5:db:e8:ea:95:0e:14:a0:ef:8a:fa:71:5b:05:81:94:c1:
fc:03:1c:4d:99:95:20:7c:9b:fb:dd:cf:0b:8b:3c:1a:37:c8:
87:40:91:25:ce:75:e4:16:4e:1e:4a:93:c9:91:1d:7d:5b:97:
ac:cc:93:1f:33:05:e8:ad:ee:11:fd:42:fb:10:f9:1e:68:98:
9d:3d:a0:ae
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQnRsW7bTz68+RggEACq1lBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw
MzUyZjAwHhcNMjUwMTAyMTM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGEwMWFhYzM4YTcwNmU2MWExNzM0YWNjMDE4MTYxNmExNTAyN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklV/ivNxLEkbLrSk9gARbez28bUo
T7MFIFaxx1sWPfE8NuxSuL1v/z0/jhM+lKljD8MRMKuoArvzUHVBizwxkZUbmIKt
//fl1cG7Eb7hFs1I+O2rrvbUdYGeiguaNI5qdm2JlW58ZI6RcgGZFEET1TCZ379i
FOb9AKJiNCT+6g2SUdH8fLac0jYwEBc2gqlnRVz7ZqZ67CXGtI78yyHCN5jWRP8k
Nb8lDuVc56+D+KzHGH6eX65T4OGl7VIP75DFL8/BR7oQ+G21eoP1P1DpJD3+vL3K
s6zoLbw7m2FKTKkB0Qt8mNtzYMNeb07AIlvQPIUvtJphpw6OE8tXMRwYEwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOigGqw4pwbmGhc0rMAYFhahUCegMB8GA1UdIwQY
MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt
ZmNkMzdmMjYwNDdmLzEvNktBYXJEaW5CdVlhRnpTc3dCZ1dGcUZRSjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm
LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFVb7AAwQD
WWrYAwQDsvtYAwQCuQVkMA0EAgACMAcDBQAqAU2AMA0GCSqGSIb3DQEBCwUAA4IB
AQCpYTV/SvpSPIg3QkSTMPcsrEh2dE47OOY5Q1b951NZCQ8rJm9LuE2Lk5o/0qTk
R96j0N4lcc0hmkBFhoE2aSFxXXlkxnTCgy++4tjrxX3LRCuOiIJWL/O1yzQQSVSA
TVFHf8FKLmkrqJbrbnBU+n4ai1HB+Lt42gKfRLRE4Gstjb1m99poG8ymjEof0Gf1
CvvEHCou5hYCZUS2P5YT9VgNVa73mY5n6/q/I9ScFxXyOcveMJiQ1dvo6pUOFKDv
ivpxWwWBlMH8AxxNmZUgfJv73c8LizwaN8iHQJElznXkFk4eSpPJkR19W5eszJMf
MwXore4R/UL7EPkeaJidPaCu
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:14 2025 by rpki-client