Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/6KWsm-ISjjNa3GCb69ojlbhUSE4.roa
File: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (raw, json)
Hash identifier: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=
Subject key identifier: E8:A5:AC:9B:E2:12:8E:33:5A:DC:60:9B:EB:DA:23:95:B8:54:48:4E
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 019421B20EDA69CD2622C062C95CD38F54E4
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/6KWsm-ISjjNa3GCb69ojlbhUSE4.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 185.25.184.0/22 maxlen: 22
188.213.234.0/23 maxlen: 23
188.215.18.0/23 maxlen: 23
2a00:8220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0e:da:69:cd:26:22:c0:62:c9:5c:d3:8f:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8a5ac9be2128e335adc609bebda2395b854484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:da:3e:92:cb:65:94:cb:8c:ac:f8:c6:9b:
5e:f9:82:75:cf:14:97:19:16:1f:0f:a2:33:8a:5e:
3b:a6:b9:fd:c5:b5:10:45:53:fb:c5:22:de:77:b5:
8a:4a:7d:e7:22:84:91:a9:aa:47:25:8e:dd:29:27:
bf:42:71:a8:94:2e:0d:96:4b:48:ea:a9:0c:01:f2:
a5:36:45:84:52:62:15:a6:40:05:cd:00:83:04:d8:
e5:9c:07:50:fe:97:04:6c:e9:64:dc:2a:0f:6c:d8:
17:c1:a7:29:d2:3d:d1:9d:bc:d4:53:c8:a7:80:77:
25:65:c2:c9:ee:f5:23:09:17:00:5e:68:51:77:b8:
01:b3:eb:58:92:a5:0f:21:91:b2:30:4f:ea:b7:9a:
64:16:20:31:cf:3a:b4:2e:97:fe:e1:0c:be:97:29:
64:b1:06:37:c9:da:47:d7:69:02:66:a1:33:74:bd:
23:0f:a2:b2:52:54:6e:a4:bc:de:de:0f:8e:69:58:
03:29:da:c2:40:30:fb:91:d1:d1:ea:c0:d4:86:9c:
90:00:62:d8:fb:7e:de:2f:1a:80:68:9f:04:f3:df:
a7:b9:44:6f:ec:b2:03:a3:76:b9:89:9f:62:3b:28:
18:22:99:ac:88:9a:4d:20:fd:78:6f:f3:ae:41:01:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:AC:9B:E2:12:8E:33:5A:DC:60:9B:EB:DA:23:95:B8:54:48:4E
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/6KWsm-ISjjNa3GCb69ojlbhUSE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.184.0/22
188.213.234.0/23
188.215.18.0/23
IPv6:
2a00:8220::/32
Signature Algorithm: sha256WithRSAEncryption
44:b0:1f:a0:aa:cf:33:b5:91:88:d5:3b:bf:89:eb:f1:94:85:
95:79:2c:c3:87:d9:0a:8f:cf:9a:41:20:d1:d9:c1:59:88:94:
af:2f:0b:4d:e8:28:49:79:a3:15:d7:2d:7e:d9:14:33:b6:c6:
3f:c4:73:17:29:7d:68:5e:c3:1f:42:df:17:b9:81:f6:35:fd:
7a:a5:a9:df:09:9a:8b:76:76:96:f9:fe:95:c3:2c:7c:f1:46:
19:91:aa:b8:d2:1f:ba:91:d2:aa:0e:ea:c3:58:61:81:68:64:
e9:5e:2c:c9:22:66:77:04:2c:3c:91:d8:f2:a3:2d:2b:a7:dc:
67:e2:61:1a:45:22:98:ca:3a:4e:0d:be:6a:d9:84:44:ac:05:
da:0b:a3:ed:36:84:5e:dc:8d:96:f1:72:25:cf:66:08:1a:f1:
82:ca:23:fb:23:5b:42:6a:37:93:99:a9:a8:62:d6:1d:5f:ad:
c6:6d:cd:84:4c:80:0a:a4:23:73:57:03:8a:20:af:1e:8a:3b:
27:a1:31:12:c8:1f:b4:c7:ca:27:62:32:95:2c:c1:67:e7:a8:
3b:98:69:6a:71:63:0e:51:e2:d8:66:1c:4f:e6:07:ea:3b:3d:
88:84:ac:66:14:a8:a6:b5:d9:34:6f:fc:9f:9a:a0:91:74:ea:
62:61:62:19
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQhsg7aac0mIsBiyVzTj1TkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm
ODJlOTQwHhcNMjUwMTAxMTE0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGE1YWM5YmUyMTI4ZTMzNWFkYzYwOWJlYmRhMjM5NWI4NTQ0ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ETaPpLLZZTLjKz4xpte+YJ1zxSX
GRYfD6Izil47prn9xbUQRVP7xSLed7WKSn3nIoSRqapHJY7dKSe/QnGolC4NlktI
6qkMAfKlNkWEUmIVpkAFzQCDBNjlnAdQ/pcEbOlk3CoPbNgXwacp0j3RnbzUU8in
gHclZcLJ7vUjCRcAXmhRd7gBs+tYkqUPIZGyME/qt5pkFiAxzzq0Lpf+4Qy+lylk
sQY3ydpH12kCZqEzdL0jD6KyUlRupLze3g+OaVgDKdrCQDD7kdHR6sDUhpyQAGLY
+37eLxqAaJ8E89+nuURv7LIDo3a5iZ9iOygYIpmsiJpNIP14b/OuQQGrRQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOilrJviEo4zWtxgm+vaI5W4VEhOMB8GA1UdIwQY
MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt
YmE2MjZkMzI1ZDU5LzEvNktXc20tSVNqak5hM0dDYjY5b2psYmhVU0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5
LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuRm4AwQB
vNXqAwQBvNcSMA0EAgACMAcDBQAqAIIgMA0GCSqGSIb3DQEBCwUAA4IBAQBEsB+g
qs8ztZGI1Tu/ievxlIWVeSzDh9kKj8+aQSDR2cFZiJSvLwtN6ChJeaMV1y1+2RQz
tsY/xHMXKX1oXsMfQt8XuYH2Nf16panfCZqLdnaW+f6Vwyx88UYZkaq40h+6kdKq
DurDWGGBaGTpXizJImZ3BCw8kdjyoy0rp9xn4mEaRSKYyjpODb5q2YRErAXaC6Pt
NoRe3I2W8XIlz2YIGvGCyiP7I1tCajeTmamoYtYdX63Gbc2ETIAKpCNzVwOKIK8e
ijsnoTESyB+0x8onYjKVLMFn56g7mGlqcWMOUeLYZhxP5gfqOz2IhKxmFKimtdk0
b/yfmqCRdOpiYWIZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:05 2025 by rpki-client