Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa
File: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (raw, json)
Hash identifier: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=
Subject key identifier: EA:94:3A:B7:86:CF:D0:9D:1F:6E:C2:DB:84:4A:54:C8:6D:95:16:9C
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 01942369A96C6D48AC68BECEC900D13C6029
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210432
IP address blocks: 146.19.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a9:6c:6d:48:ac:68:be:ce:c9:00:d1:3c:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea943ab786cfd09d1f6ec2db844a54c86d95169c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:32:99:33:3f:8c:a7:a5:f1:19:d0:c9:67:
41:bb:f6:5e:f2:2c:76:d2:da:f2:b1:35:90:90:6e:
1f:68:fd:23:13:f8:73:e3:46:94:99:fe:3c:dc:95:
21:0b:a0:2b:d0:a0:20:ce:90:e1:cb:a7:3f:64:24:
30:94:eb:3c:79:50:d6:b7:95:5a:7f:1c:b2:c9:74:
a0:ed:68:70:12:03:50:9a:f6:48:f4:ac:77:9a:a2:
ce:46:36:40:63:e3:5e:96:bb:b9:ad:25:f0:17:d6:
44:7f:ce:5e:59:4a:17:a9:7e:32:dd:e1:7c:5d:25:
dd:66:f0:b2:6d:92:a2:96:31:9b:45:74:50:4e:65:
10:46:34:4b:bc:c4:32:ca:08:45:7c:98:4a:1d:ce:
56:2c:2e:bb:1d:bd:81:14:dd:a2:24:4b:24:6c:66:
3e:7b:62:55:8c:52:b9:b9:d2:4a:4c:c8:67:92:ac:
81:d6:bd:27:7b:22:03:3c:34:6f:06:fa:cc:9e:2a:
96:4e:6c:6f:74:a0:7e:4e:e3:85:9a:67:4f:35:4f:
7d:18:1f:0c:69:37:85:68:d6:cf:91:a4:06:61:03:
16:01:4f:8d:4d:f3:4a:d7:ea:6a:c7:18:79:9c:89:
1f:6f:48:d6:a2:bc:28:d0:a0:14:a8:c8:c1:64:f5:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:3A:B7:86:CF:D0:9D:1F:6E:C2:DB:84:4A:54:C8:6D:95:16:9C
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.239.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a5:84:3c:c5:51:de:64:38:be:98:05:42:fd:52:a3:66:0d:
b4:26:8f:b8:d6:11:01:f3:88:7b:df:c5:65:79:d4:67:9e:a0:
3e:f8:ec:d0:25:cf:23:9d:d6:4d:e9:be:f2:f6:90:8d:f1:09:
19:9d:2d:de:37:9e:2e:d8:9a:a5:5d:5e:24:43:9f:aa:9d:cb:
5b:09:87:49:fb:d3:2f:06:69:b0:66:a7:89:aa:e3:51:e4:98:
a4:48:c7:1f:c8:dd:f3:f5:3a:7b:50:ef:05:4a:ea:e3:fd:d0:
0e:f4:7f:c7:e7:0b:b8:a2:5c:8d:87:f6:e6:1d:c9:26:58:dd:
fd:4a:4a:26:5d:b1:d8:f0:8c:30:85:95:7a:39:5a:f6:01:76:
c8:4d:6e:d7:7b:25:10:d5:53:87:d0:56:02:45:85:fd:ee:d9:
02:ed:19:3d:9d:d7:e3:6a:6b:20:70:5c:4e:a9:da:1a:20:46:
14:21:cf:ac:7d:5f:d7:a1:ec:93:af:31:98:d1:35:08:6e:72:
c2:16:06:49:61:93:c3:0f:b4:be:80:35:93:f1:4f:f2:78:c1:
29:d7:f0:d6:6c:58:2f:6a:11:6d:50:c3:cd:7f:3a:19:49:c4:
da:db:9f:b9:6d:aa:04:4e:68:36:98:13:18:ce:92:15:08:3b:
80:fe:ab:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaalsbUisaL7OyQDRPGApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGM4ZWIwM2VmMjMyNmE2MjBkZjEwMDU0OGQxZjA2ZDg3
NDU1MWEwHhcNMjUwMTAxMTk0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTk0M2FiNzg2Y2ZkMDlkMWY2ZWMyZGI4NDRhNTRjODZkOTUxNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAEymTM/jKel8RnQyWdBu/Ze8ix2
0trysTWQkG4faP0jE/hz40aUmf483JUhC6Ar0KAgzpDhy6c/ZCQwlOs8eVDWt5Va
fxyyyXSg7WhwEgNQmvZI9Kx3mqLORjZAY+Nelru5rSXwF9ZEf85eWUoXqX4y3eF8
XSXdZvCybZKiljGbRXRQTmUQRjRLvMQyyghFfJhKHc5WLC67Hb2BFN2iJEskbGY+
e2JVjFK5udJKTMhnkqyB1r0neyIDPDRvBvrMniqWTmxvdKB+TuOFmmdPNU99GB8M
aTeFaNbPkaQGYQMWAU+NTfNK1+pqxxh5nIkfb0jWorwo0KAUqMjBZPUGOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqUOreGz9CdH27C24RKVMhtlRacMB8GA1UdIwQY
MBaAFHZMjrA+8jJqYg3xAFSNHwbYdFUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEt
ZjNiNTBjNjVmODIwLzEvNnBRNnQ0YlAwSjBmYnNMYmhFcFV5RzJWRnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEtZjNiNTBjNjVmODIw
LzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPvMA0G
CSqGSIb3DQEBCwUAA4IBAQACpYQ8xVHeZDi+mAVC/VKjZg20Jo+41hEB84h738Vl
edRnnqA++OzQJc8jndZN6b7y9pCN8QkZnS3eN54u2JqlXV4kQ5+qnctbCYdJ+9Mv
BmmwZqeJquNR5JikSMcfyN3z9Tp7UO8FSurj/dAO9H/H5wu4olyNh/bmHckmWN39
SkomXbHY8IwwhZV6OVr2AXbITW7XeyUQ1VOH0FYCRYX97tkC7Rk9ndfjamsgcFxO
qdoaIEYUIc+sfV/XoeyTrzGY0TUIbnLCFgZJYZPDD7S+gDWT8U/yeMEp1/DWbFgv
ahFtUMPNfzoZScTa25+5baoETmg2mBMYzpIVCDuA/qvt
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:50 2025 by rpki-client