Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/6MERsyQUih6xQRHt-uEJhbbRVOE.roa
File: 6MERsyQUih6xQRHt-uEJhbbRVOE.roa (raw, json)
Hash identifier: Ukl9+dCKOHNdawx7edPL26M3Hv9GMIefSc63dMpFsvM=
Subject key identifier: E8:C1:11:B3:24:14:8A:1E:B1:41:11:ED:FA:E1:09:85:B6:D1:54:E1
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018BC8D8925C22FB67E83CEBE5C864E7E524
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/6MERsyQUih6xQRHt-uEJhbbRVOE.roa
Signing time: Mon 13 Nov 2023 13:21:57 +0000
ROA not before: Mon 13 Nov 2023 13:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 109.160.41.0/24 maxlen: 24
109.160.40.0/24 maxlen: 24
109.160.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:d8:92:5c:22:fb:67:e8:3c:eb:e5:c8:64:e7:e5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Nov 13 13:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c111b324148a1eb14111edfae10985b6d154e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:74:e5:eb:d9:f4:12:de:06:09:e4:b4:9c:
62:f9:db:88:4b:0d:2b:11:79:d6:0a:de:37:8f:c1:
40:4d:ef:53:68:19:3f:62:ac:10:f9:f5:22:1c:57:
94:19:64:52:e3:95:90:fe:47:21:8b:cf:dd:45:83:
e0:26:4a:5d:d8:5c:23:bf:ee:79:3a:5a:eb:c1:13:
84:75:77:66:4f:12:93:13:25:13:75:b4:af:32:78:
35:80:50:ad:cc:c7:3f:a5:e8:e0:a2:55:5a:dd:41:
b7:ef:91:1a:ed:23:9d:6f:1f:a3:a5:26:94:a5:ce:
fa:7e:a3:1e:ff:f6:c2:f5:db:83:85:0e:3b:55:a3:
dd:e2:69:5b:25:18:28:64:25:6e:7c:cf:77:59:c6:
02:c4:9d:e7:02:c6:b5:d3:b9:78:5d:eb:26:cb:b9:
02:92:b2:75:c3:83:57:5c:5f:d1:b2:c8:eb:9f:13:
04:41:6f:1e:7e:fe:7d:10:c0:b9:4f:ee:5a:5c:2a:
a2:83:77:02:75:5c:e6:53:d1:b8:52:bf:9b:53:88:
03:cd:5b:10:75:07:0a:f7:45:e0:30:12:ee:da:ec:
7a:ec:af:91:ce:24:b4:2f:c5:1d:13:19:ab:75:e4:
a4:46:2a:c7:e6:ad:29:f2:95:3e:3d:21:36:24:a5:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:11:B3:24:14:8A:1E:B1:41:11:ED:FA:E1:09:85:B6:D1:54:E1
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/6MERsyQUih6xQRHt-uEJhbbRVOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.39.0-109.160.41.255
Signature Algorithm: sha256WithRSAEncryption
0d:b9:30:0d:17:e0:d4:16:56:e0:43:d5:a2:79:0a:34:c4:8b:
1a:88:98:4d:4a:0d:16:ca:98:3e:bd:7f:c3:eb:33:f0:26:df:
56:1c:72:81:46:2c:de:cf:b6:be:79:de:26:b3:5f:1f:ec:54:
68:d2:0e:fe:a0:50:0b:84:9b:59:b9:71:32:5d:27:60:59:21:
43:b0:76:24:50:13:aa:28:96:8c:3a:4d:92:3d:20:88:33:45:
ce:84:cd:00:1a:38:8b:25:03:fd:cc:19:a0:c1:ab:71:32:8f:
8e:ea:28:63:cc:73:7a:1c:a6:01:65:64:38:2c:fe:7d:3f:05:
7d:28:23:43:37:a9:f4:97:45:6f:20:ff:81:b5:93:99:ce:fa:
1d:f3:7a:4d:2a:bc:99:0e:88:e5:9b:f9:34:92:6d:6c:9d:fc:
22:da:cd:8d:73:43:15:87:15:b7:7f:1a:eb:ce:b7:e1:7c:ba:
7f:e0:c6:af:ed:6e:7c:0b:43:fc:2e:5f:e5:b2:fe:c5:0a:27:
a1:62:51:30:bb:c9:1c:37:3d:20:63:ab:d9:07:c5:37:2f:0a:
aa:a9:8c:6e:00:7f:ae:58:ea:46:0b:17:1d:22:b8:aa:3c:ac:
a3:50:34:ba:92:a5:b1:b5:43:56:db:a4:11:5b:0e:de:6a:fd:
62:60:0b:5c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYvI2JJcIvtn6Dzr5chk5+UkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMxMTEzMTMyMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGMxMTFiMzI0MTQ4YTFlYjE0MTExZWRmYWUxMDk4NWI2ZDE1NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZ05evZ9BLeBgnktJxi+duISw0r
EXnWCt43j8FATe9TaBk/YqwQ+fUiHFeUGWRS45WQ/kchi8/dRYPgJkpd2Fwjv+55
OlrrwROEdXdmTxKTEyUTdbSvMng1gFCtzMc/pejgolVa3UG375Ea7SOdbx+jpSaU
pc76fqMe//bC9duDhQ47VaPd4mlbJRgoZCVufM93WcYCxJ3nAsa107l4Xesmy7kC
krJ1w4NXXF/RssjrnxMEQW8efv59EMC5T+5aXCqig3cCdVzmU9G4Ur+bU4gDzVsQ
dQcK90XgMBLu2ux67K+RziS0L8UdExmrdeSkRirH5q0p8pU+PSE2JKWMAQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOjBEbMkFIoesUER7frhCYW20VThMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvNk1FUnN5UVVpaDZ4UVJIdC11RUpoYmJSVk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABtoCcD
BAFtoCgwDQYJKoZIhvcNAQELBQADggEBAA25MA0X4NQWVuBD1aJ5CjTEixqImE1K
DRbKmD69f8PrM/Am31YccoFGLN7Ptr553iazXx/sVGjSDv6gUAuEm1m5cTJdJ2BZ
IUOwdiRQE6oolow6TZI9IIgzRc6EzQAaOIslA/3MGaDBq3Eyj47qKGPMc3ocpgFl
ZDgs/n0/BX0oI0M3qfSXRW8g/4G1k5nO+h3zek0qvJkOiOWb+TSSbWyd/CLazY1z
QxWHFbd/GuvOt+F8un/gxq/tbnwLQ/wuX+Wy/sUKJ6FiUTC7yRw3PSBjq9kHxTcv
CqqpjG4Af65Y6kYLFx0iuKo8rKNQNLqSpbG1Q1bbpBFbDt5q/WJgC1w=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:32:06 2025 by rpki-client