Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/6ysxE_05-OSdyB2a0aU45XI8iuA.roa
File: 6ysxE_05-OSdyB2a0aU45XI8iuA.roa (raw, json)
Hash identifier: 8crKjgP90zL5Mql/0oP9xYnumY0MBpMGdAq3GEbO0FA=
Subject key identifier: EB:2B:31:13:FD:39:F8:E4:9D:C8:1D:9A:D1:A5:38:E5:72:3C:8A:E0
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019427B6244153BD4A4F2BEED6617895F671
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/6ysxE_05-OSdyB2a0aU45XI8iuA.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5587
IP address blocks: 185.121.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:24:41:53:bd:4a:4f:2b:ee:d6:61:78:95:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb2b3113fd39f8e49dc81d9ad1a538e5723c8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:07:db:41:50:55:ac:bb:4c:d8:91:38:8e:c7:
59:c1:75:ee:8c:09:a7:e6:bb:5e:e0:e3:64:f0:be:
c3:26:47:a9:d2:e2:6c:d3:11:f8:d5:a6:b1:11:98:
48:f9:ad:29:bc:91:02:f1:1a:d0:b3:32:3a:5f:f4:
93:5b:0e:33:d3:d4:16:8e:10:d0:20:9b:a9:bd:c9:
e8:ca:30:6d:b8:a2:5f:ee:a8:c8:02:14:20:fa:38:
ae:29:3e:e8:41:5a:08:38:f1:69:34:cd:7d:10:03:
3a:57:39:00:9a:4e:09:77:a4:88:4b:70:e5:0a:4d:
f8:4f:98:37:67:3a:78:e0:e8:94:cd:a8:de:59:63:
2a:c7:d6:21:da:72:9a:d2:73:cd:11:92:16:7e:ae:
20:68:55:5e:53:7f:0a:06:79:18:34:8d:64:81:c0:
65:4b:47:2f:a0:d1:c7:12:5c:67:3e:21:cc:7d:6b:
9a:be:37:28:48:55:54:c4:50:c8:00:1a:2a:af:50:
30:b0:de:de:d3:4e:9e:4c:86:e6:d4:dd:5a:e3:3c:
3c:db:01:e3:46:61:ca:49:27:68:8b:47:dc:4e:bb:
0e:d4:c4:66:06:46:7f:9d:39:0b:0b:33:63:b8:f1:
54:31:7f:21:ad:e9:3d:f2:b4:65:55:1e:f8:ab:6a:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:31:13:FD:39:F8:E4:9D:C8:1D:9A:D1:A5:38:E5:72:3C:8A:E0
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/6ysxE_05-OSdyB2a0aU45XI8iuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c6:92:7b:8f:7a:bb:f4:be:e8:5b:52:67:86:98:46:29:06:
ee:9b:a8:dc:91:c6:88:c8:b7:73:2c:d2:1f:d3:01:0a:e5:96:
69:24:b0:04:e7:90:38:f5:4c:db:aa:d1:1e:86:23:28:52:3f:
3d:79:cd:0d:de:21:92:ff:24:4d:7e:7e:cf:15:14:68:fa:65:
a0:8f:73:2a:e8:7f:ec:da:67:27:8d:52:19:8c:a5:6c:7a:c6:
ae:93:0f:b6:13:81:7a:bf:8a:88:66:b0:ef:19:ed:30:6e:12:
bc:68:65:03:3d:03:8c:84:0e:7e:2c:19:a7:3f:be:d7:11:69:
75:58:b2:84:0e:d3:c2:98:53:3f:f5:b7:fd:03:3c:06:9c:53:
04:4e:05:b4:ed:39:3a:9e:16:7c:04:7b:ef:b1:29:d4:69:c3:
89:d7:bd:54:d5:36:0b:42:c3:38:f5:b2:24:05:33:35:84:2f:
a9:bf:04:a4:dc:20:2e:c0:80:94:1c:89:82:57:08:11:70:f8:
0a:8c:bc:7b:d0:72:f4:c9:53:93:2e:cc:22:85:34:8d:d2:c5:
3c:69:af:00:76:13:08:f6:44:06:92:49:42:9a:3e:f3:50:6f:
b3:90:56:fc:4c:41:06:48:b1:c1:c4:08:86:e1:5d:20:26:c6:
03:30:df:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntiRBU71KTyvu1mF4lfZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmIxNThkMjllMzc1MDBkNWMzYTI1ZGFkYTE0OWIyYTUw
M2Y2YTUwHhcNMjUwMTAyMTU1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjJiMzExM2ZkMzlmOGU0OWRjODFkOWFkMWE1MzhlNTcyM2M4YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wfbQVBVrLtM2JE4jsdZwXXujAmn
5rte4ONk8L7DJkep0uJs0xH41aaxEZhI+a0pvJEC8RrQszI6X/STWw4z09QWjhDQ
IJupvcnoyjBtuKJf7qjIAhQg+jiuKT7oQVoIOPFpNM19EAM6VzkAmk4Jd6SIS3Dl
Ck34T5g3Zzp44OiUzajeWWMqx9Yh2nKa0nPNEZIWfq4gaFVeU38KBnkYNI1kgcBl
S0cvoNHHElxnPiHMfWuavjcoSFVUxFDIABoqr1AwsN7e006eTIbm1N1a4zw82wHj
RmHKSSdoi0fcTrsO1MRmBkZ/nTkLCzNjuPFUMX8hrek98rRlVR74q2o2lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsrMRP9OfjkncgdmtGlOOVyPIrgMB8GA1UdIwQY
MBaAFFC7FY0p43UA1cOiXa2hSbKlA/alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEt
NzQzMTEyYjBlNzcxLzEvNnlzeEVfMDUtT1NkeUIyYTBhVTQ1WEk4aXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEtNzQzMTEyYjBlNzcx
LzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXlbMA0G
CSqGSIb3DQEBCwUAA4IBAQClxpJ7j3q79L7oW1JnhphGKQbum6jckcaIyLdzLNIf
0wEK5ZZpJLAE55A49UzbqtEehiMoUj89ec0N3iGS/yRNfn7PFRRo+mWgj3Mq6H/s
2mcnjVIZjKVsesaukw+2E4F6v4qIZrDvGe0wbhK8aGUDPQOMhA5+LBmnP77XEWl1
WLKEDtPCmFM/9bf9AzwGnFMETgW07Tk6nhZ8BHvvsSnUacOJ171U1TYLQsM49bIk
BTM1hC+pvwSk3CAuwICUHImCVwgRcPgKjLx70HL0yVOTLswihTSN0sU8aa8AdhMI
9kQGkklCmj7zUG+zkFb8TEEGSLHBxAiG4V0gJsYDMN/f
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:22 2025 by rpki-client