Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/6KeHOxxWviP0lluNL5sOXVdQY7c.roa
File: 6KeHOxxWviP0lluNL5sOXVdQY7c.roa (raw, json)
Hash identifier: kUeVBsIsjzs7OuA1c4/VFEC1ddAvMO/ONIYaR+/BuFA=
Subject key identifier: E8:A7:87:3B:1C:56:BE:23:F4:96:5B:8D:2F:9B:0E:5D:57:50:63:B7
Certificate issuer: /CN=ca434d399d93a19d8a8108456c5575096c2ae588
Certificate serial: 019425FD6444D51ED0C9D16185716408A46B
Authority key identifier: CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/6KeHOxxWviP0lluNL5sOXVdQY7c.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196970
IP address blocks: 195.191.228.0/23 maxlen: 23
195.191.228.0/24 maxlen: 24
195.191.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:64:44:d5:1e:d0:c9:d1:61:85:71:64:08:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca434d399d93a19d8a8108456c5575096c2ae588
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8a7873b1c56be23f4965b8d2f9b0e5d575063b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:ea:c6:19:f5:85:b0:6e:d4:31:bf:0f:9b:
9f:10:8b:88:96:f6:9d:61:c0:7c:41:39:41:a0:4c:
df:c4:be:6a:10:a9:4c:e6:14:79:c0:91:eb:10:c8:
76:93:59:98:d9:26:0d:6a:59:54:9d:22:94:16:cf:
53:b0:52:72:22:fc:3a:1b:a8:fa:22:a1:bd:cd:7f:
0b:7f:90:d7:46:88:f4:5c:29:a5:99:6d:e6:09:ac:
c7:bf:82:46:90:0f:1d:74:0b:4b:0c:67:7f:ec:04:
a2:07:ca:03:9c:5c:de:f8:c5:eb:ee:ea:9c:d8:fb:
aa:98:6f:32:b0:3d:48:ef:06:05:b9:13:50:60:ea:
61:f9:d9:fd:5a:e4:d4:9a:74:48:dd:4e:64:c9:f6:
4a:15:ca:cf:0a:44:3f:10:14:ae:15:96:82:f5:95:
a7:1e:34:27:57:79:82:2b:82:4e:87:a0:b2:e9:62:
9c:13:58:07:67:2c:01:51:20:79:69:bc:b9:a0:ed:
c9:a9:48:ba:31:1d:83:93:32:a6:b2:04:2e:b0:6f:
44:e0:39:ed:92:47:b9:ca:f7:9c:fc:e0:cb:35:15:
53:d3:86:6a:80:e8:25:e4:bf:45:24:70:b1:11:a1:
18:6d:02:57:a5:c0:e3:19:10:3a:88:90:2d:46:96:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:87:3B:1C:56:BE:23:F4:96:5B:8D:2F:9B:0E:5D:57:50:63:B7
X509v3 Authority Key Identifier:
keyid:CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/6KeHOxxWviP0lluNL5sOXVdQY7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:58:be:5f:37:a8:93:d0:aa:b0:3f:82:eb:74:2f:89:b8:e0:
8e:28:82:8e:6c:0f:ec:94:9a:7a:15:13:5a:c1:ae:30:41:bd:
b0:b9:86:4a:88:6e:03:83:97:6a:72:f1:8e:7a:50:ad:92:06:
71:14:3a:9b:3a:8c:a2:7b:00:59:9a:a0:53:00:6b:b3:5c:39:
0b:80:93:b2:5d:bb:4d:7e:bc:99:c2:2c:e1:4d:b5:6b:0e:2c:
3f:63:2a:82:77:c9:a9:6b:e0:5e:72:37:1a:3b:0e:af:f1:e1:
d3:d6:25:94:9a:3a:72:30:37:ad:24:53:4f:3f:ef:4d:21:4b:
c0:58:60:90:1f:20:05:28:ee:e3:0b:57:5b:a7:b7:46:4a:6f:
6b:4e:eb:ed:40:0a:78:6a:c3:d4:36:24:ce:92:73:eb:cb:b2:
94:4e:0a:d9:d0:58:c9:a5:0e:ea:00:9d:c6:2c:e8:1c:d9:02:
77:f8:f1:3a:87:41:fc:b8:58:9b:91:72:8e:31:8e:c7:d8:1b:
48:a9:d6:84:3a:15:18:cc:4a:f8:2a:4b:a5:3f:e0:51:58:d2:
10:0f:4f:83:f0:60:1f:9e:85:f3:ce:59:d5:7a:72:93:35:f2:
eb:43:d4:01:2d:48:e8:a8:6f:96:29:b5:fa:64:18:f2:8a:76:
00:e9:56:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/WRE1R7QydFhhXFkCKRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDM0ZDM5OWQ5M2ExOWQ4YTgxMDg0NTZjNTU3NTA5NmMy
YWU1ODgwHhcNMjUwMTAyMDc0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGE3ODczYjFjNTZiZTIzZjQ5NjViOGQyZjliMGU1ZDU3NTA2M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zqxhn1hbBu1DG/D5ufEIuIlvad
YcB8QTlBoEzfxL5qEKlM5hR5wJHrEMh2k1mY2SYNallUnSKUFs9TsFJyIvw6G6j6
IqG9zX8Lf5DXRoj0XCmlmW3mCazHv4JGkA8ddAtLDGd/7ASiB8oDnFze+MXr7uqc
2PuqmG8ysD1I7wYFuRNQYOph+dn9WuTUmnRI3U5kyfZKFcrPCkQ/EBSuFZaC9ZWn
HjQnV3mCK4JOh6Cy6WKcE1gHZywBUSB5aby5oO3JqUi6MR2DkzKmsgQusG9E4Dnt
kke5yvec/ODLNRVT04ZqgOgl5L9FJHCxEaEYbQJXpcDjGRA6iJAtRpbp+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOinhzscVr4j9JZbjS+bDl1XUGO3MB8GA1UdIwQY
MBaAFMpDTTmdk6GdioEIRWxVdQlsKuWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtOTk9aMlRvWjJLZ1FoRmJGVjFDV3dxNVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82YWVjNmEtMzY4My00MDVhLTllNjEt
ZGIyMzY4MjcxOTEzLzEvNktlSE94eFd2aVAwbGx1Tkw1c09YVmRRWTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82YWVjNmEtMzY4My00MDVhLTllNjEtZGIyMzY4MjcxOTEz
LzEveWtOTk9aMlRvWjJLZ1FoRmJGVjFDV3dxNVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7/kMA0G
CSqGSIb3DQEBCwUAA4IBAQAMWL5fN6iT0KqwP4LrdC+JuOCOKIKObA/slJp6FRNa
wa4wQb2wuYZKiG4Dg5dqcvGOelCtkgZxFDqbOoyiewBZmqBTAGuzXDkLgJOyXbtN
fryZwizhTbVrDiw/YyqCd8mpa+BecjcaOw6v8eHT1iWUmjpyMDetJFNPP+9NIUvA
WGCQHyAFKO7jC1dbp7dGSm9rTuvtQAp4asPUNiTOknPry7KUTgrZ0FjJpQ7qAJ3G
LOgc2QJ3+PE6h0H8uFibkXKOMY7H2BtIqdaEOhUYzEr4KkulP+BRWNIQD0+D8GAf
noXzzlnVenKTNfLrQ9QBLUjoqG+WKbX6ZBjyinYA6VYL
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:11 2025 by rpki-client