Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa
File: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (raw, json)
Hash identifier: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=
Subject key identifier: 83:AF:97:BC:85:D5:DC:4A:A5:DC:2A:31:BD:CF:A7:AB:A2:A5:CB:D6
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 019423D6A41554CE391DD25A86A5F1F8C150
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199624
IP address blocks: 91.208.171.0/24 maxlen: 32
95.131.176.0/21 maxlen: 32
185.8.4.0/22 maxlen: 32
185.25.9.0/24 maxlen: 32
185.25.10.0/23 maxlen: 32
185.166.240.0/22 maxlen: 32
185.166.243.0/24 maxlen: 32
2a00:7b60::/32 maxlen: 32
2a03:13c0::/32 maxlen: 32
2a0a:2100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a4:15:54:ce:39:1d:d2:5a:86:a5:f1:f8:c1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83af97bc85d5dc4aa5dc2a31bdcfa7aba2a5cbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:fd:3c:17:9f:ef:a5:26:b5:62:8f:8a:94:
91:f6:62:f7:5c:f5:6c:2c:9e:9e:4d:6f:02:39:70:
b6:b0:41:fd:91:9b:3a:5a:8b:6a:ae:6d:73:d1:5f:
cd:be:28:bf:9d:45:e9:dc:37:a6:db:65:19:93:d2:
19:12:91:91:48:ff:c5:e3:20:27:b1:62:e2:1d:b5:
f8:77:3a:19:51:c8:c1:aa:cc:34:56:f0:65:06:bb:
0f:bf:7c:59:c7:ac:5b:01:7f:d0:8f:18:48:46:a1:
d3:14:cf:31:56:a7:55:a1:ce:e1:80:35:75:c7:0d:
ce:8a:d7:8e:4f:b2:a9:b1:16:2a:65:e3:ee:11:1e:
10:4b:1a:3a:57:2e:71:a8:78:e6:a6:6f:21:43:0d:
bb:83:45:3b:3e:b0:60:13:5e:87:55:18:b6:48:60:
ca:25:ca:d8:34:69:69:97:e9:57:44:03:c8:7d:94:
cb:33:98:43:71:f3:2e:d5:00:02:af:b0:05:e3:45:
86:96:6e:86:ef:1a:65:87:29:1d:93:6a:b3:86:5b:
c1:d8:41:c6:b4:9a:6a:f1:cd:4f:ca:e0:4e:fa:af:
b8:eb:8d:df:c5:81:d5:89:94:86:e1:9b:bf:16:f0:
89:16:5d:58:ec:1a:bc:56:4e:bf:26:3e:04:09:1b:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:97:BC:85:D5:DC:4A:A5:DC:2A:31:BD:CF:A7:AB:A2:A5:CB:D6
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.171.0/24
95.131.176.0/21
185.8.4.0/22
185.25.9.0-185.25.11.255
185.166.240.0/22
IPv6:
2a00:7b60::/32
2a03:13c0::/32
2a0a:2100::/29
Signature Algorithm: sha256WithRSAEncryption
31:77:dd:89:cb:a2:ab:1c:40:e9:9d:72:1b:2a:c1:43:44:08:
73:02:0d:b4:2e:cc:d5:87:ec:30:5f:4f:85:46:5e:28:3c:4c:
78:eb:da:1d:38:1b:99:d3:3e:28:96:af:df:88:14:8f:fd:de:
db:2a:6b:85:5b:ca:7f:a6:a6:34:3a:df:50:22:04:b0:98:0b:
ef:26:c3:e7:47:59:b6:67:1b:6c:37:88:89:12:8d:d8:4f:0a:
b3:72:e0:1f:34:8c:bd:a8:1f:fc:d2:92:a4:e2:a2:91:65:a2:
62:52:67:56:cd:3d:50:d6:d9:3c:e5:2d:de:82:26:fa:96:f7:
0e:fd:1a:ef:19:31:ae:aa:3f:c5:fa:a7:cd:b9:49:0a:7f:e3:
4d:59:cd:20:f2:77:50:dc:97:1f:55:da:84:82:93:44:e7:45:
ab:ac:84:7d:53:17:c0:06:9f:a0:6d:c8:f8:48:d4:db:1d:ba:
dc:d5:10:aa:45:29:ba:66:28:a1:ed:4c:05:77:84:bf:4c:4e:
ed:28:e8:35:ae:f7:02:3c:62:b3:3d:85:a9:ea:6e:65:ce:13:
12:1e:2a:f5:58:12:1e:78:06:f7:b6:25:99:74:c4:f5:74:40:
79:f9:66:1f:b0:78:d5:bb:41:b3:b5:f2:6a:1a:9b:d7:c3:1a:
c4:37:a9:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:30 2025 by rpki-client