Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa
File: 6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa (raw, json)
Hash identifier: /Z9kWSQkfFUGliAF6HSs16rOY5YOKoilEvtZIr4dqcM=
Subject key identifier: E9:C0:C4:D9:31:2C:D6:D7:10:31:73:66:58:43:9C:7E:9E:53:B0:7C
Certificate issuer: /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial: 0194274823E34CDB867266B5F550C0AA55DC
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54600
IP address blocks: 85.209.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:23:e3:4c:db:86:72:66:b5:f5:50:c0:aa:55:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9c0c4d9312cd6d71031736658439c7e9e53b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:f2:f9:15:a6:33:9f:b5:b5:b0:83:ab:6f:
80:33:55:ac:35:49:95:c6:9b:60:ba:d8:e4:84:f0:
4c:7b:f4:9e:0b:52:f7:fe:7f:64:e1:d2:4b:ec:15:
7e:d3:38:55:ae:14:12:4a:16:39:44:30:f6:bc:0d:
98:40:00:30:90:e6:c4:fa:13:f6:9a:4f:95:42:11:
1e:fe:d0:e0:fe:38:a5:e2:46:58:9a:11:13:38:35:
ab:8f:66:37:b2:ed:96:eb:c9:5b:2d:2e:49:f6:e6:
09:c6:a2:07:bb:50:78:89:1b:06:35:d4:09:bf:8c:
14:de:e3:a3:9b:06:83:1a:4f:bd:85:a8:75:73:23:
2c:94:13:be:f7:9c:dd:0f:6e:bf:d9:3d:4e:fa:d0:
c0:d2:fb:3d:9d:12:1d:ff:41:55:89:51:87:02:6e:
1f:d4:b4:fe:54:7c:94:70:8f:fb:47:23:4f:2c:7d:
b3:ac:e9:bf:bc:e9:a2:26:68:83:85:24:f5:60:89:
4d:1e:52:3e:09:07:9d:28:4d:49:71:9b:fb:f8:c4:
1e:fb:84:92:7e:59:e3:f5:33:1f:13:07:02:0d:7f:
73:6d:a1:31:c0:da:96:5b:f5:29:4d:80:cf:4c:e9:
33:10:94:ba:28:d3:30:11:81:59:cf:18:d8:89:98:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:C4:D9:31:2C:D6:D7:10:31:73:66:58:43:9C:7E:9E:53:B0:7C
X509v3 Authority Key Identifier:
keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.40.0/22
Signature Algorithm: sha256WithRSAEncryption
52:0e:68:82:65:6c:8b:2e:cc:e6:d7:9b:e2:83:17:fb:6f:15:
cd:52:c0:9c:51:50:72:72:2e:be:09:90:c7:31:5e:e3:04:d2:
0c:6e:95:72:4d:47:2f:cc:74:33:f7:a5:10:4b:a4:ed:51:9e:
02:6d:36:7d:ca:5a:95:c9:3a:84:f5:3b:88:d7:9f:a5:da:f1:
b5:20:c0:d3:a6:c9:eb:5c:c4:72:f3:b2:e9:22:5a:b1:0c:88:
80:a7:51:bd:16:ed:7c:af:ea:75:63:57:53:87:19:39:85:51:
67:64:a6:6b:66:20:bf:91:44:3b:44:7f:8c:3b:0a:d5:6d:70:
f8:23:23:17:b5:6f:c6:1c:2f:e1:77:e5:ab:ef:68:d9:41:be:
ee:5c:0c:47:58:c9:4d:3f:36:7d:c1:ef:01:3d:c1:d9:ef:57:
0e:7a:b7:ba:4e:2e:98:82:b9:28:44:46:43:c5:c4:58:fd:43:
03:98:f5:99:75:77:e4:12:d0:30:a0:32:cf:2d:a4:d0:02:6f:
6f:47:89:c2:66:b3:3b:09:81:12:ef:88:3c:00:0a:68:e8:85:
d5:a1:eb:e6:df:d0:e3:d1:9c:31:ff:92:30:8d:b9:83:84:e3:
0f:ea:eb:74:96:96:d7:ee:b0:ee:ba:98:30:80:e5:58:cb:58:
44:a5:af:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSCPjTNuGcma19VDAqlXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OWU5NTJlNDQ4YjgyZmY0NTc4ZWNlYjY0NDhlNmZiZmM2
MTEzZTAwHhcNMjUwMTAyMTM1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWMwYzRkOTMxMmNkNmQ3MTAzMTczNjY1ODQzOWM3ZTllNTNiMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKry+RWmM5+1tbCDq2+AM1WsNUmV
xptgutjkhPBMe/SeC1L3/n9k4dJL7BV+0zhVrhQSShY5RDD2vA2YQAAwkObE+hP2
mk+VQhEe/tDg/jil4kZYmhETODWrj2Y3su2W68lbLS5J9uYJxqIHu1B4iRsGNdQJ
v4wU3uOjmwaDGk+9hah1cyMslBO+95zdD26/2T1O+tDA0vs9nRId/0FViVGHAm4f
1LT+VHyUcI/7RyNPLH2zrOm/vOmiJmiDhST1YIlNHlI+CQedKE1JcZv7+MQe+4SS
flnj9TMfEwcCDX9zbaExwNqWW/UpTYDPTOkzEJS6KNMwEYFZzxjYiZgulwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOnAxNkxLNbXEDFzZlhDnH6eU7B8MB8GA1UdIwQY
MBaAFCWelS5Ei4L/RXjs62RI5vv8YRPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlo2VkxrU0xndjlGZU96clpFam0tX3hoRS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yY2Y4ZGEtNGI0ZS00NGQxLThiMTAt
MDhjMDZiNzY4YzJlLzEvNmNERTJURXMxdGNRTVhObVdFT2NmcDVUc0h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yY2Y4ZGEtNGI0ZS00NGQxLThiMTAtMDhjMDZiNzY4YzJl
LzEvSlo2VkxrU0xndjlGZU96clpFam0tX3hoRS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdEoMA0G
CSqGSIb3DQEBCwUAA4IBAQBSDmiCZWyLLszm15vigxf7bxXNUsCcUVByci6+CZDH
MV7jBNIMbpVyTUcvzHQz96UQS6TtUZ4CbTZ9ylqVyTqE9TuI15+l2vG1IMDTpsnr
XMRy87LpIlqxDIiAp1G9Fu18r+p1Y1dThxk5hVFnZKZrZiC/kUQ7RH+MOwrVbXD4
IyMXtW/GHC/hd+Wr72jZQb7uXAxHWMlNPzZ9we8BPcHZ71cOere6Ti6YgrkoREZD
xcRY/UMDmPWZdXfkEtAwoDLPLaTQAm9vR4nCZrM7CYES74g8AApo6IXVoevm39Dj
0Zwx/5IwjbmDhOMP6ut0lpbX7rDuupgwgOVYy1hEpa8n
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:05 2025 by rpki-client