Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/sFOCi_en07HfzmbiIWb04QiO-xU.roa
File: sFOCi_en07HfzmbiIWb04QiO-xU.roa (raw, json)
Hash identifier: rntI6vDplHfMbFLXqncHJ3hWl/CcnP07w3jHzsTuv2s=
Subject key identifier: B0:53:82:8B:F7:A7:D3:B1:DF:CE:66:E2:21:66:F4:E1:08:8E:FB:15
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23A6E6279A9C5932F416F6F46BA61
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/sFOCi_en07HfzmbiIWb04QiO-xU.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198627
IP address blocks: 185.184.254.0/24 maxlen: 24
188.95.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:6e:62:79:a9:c5:93:2f:41:6f:6f:46:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b053828bf7a7d3b1dfce66e22166f4e1088efb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:9e:bd:3b:96:9c:17:a6:0e:e2:7f:31:d4:
21:d5:53:0e:40:86:82:a1:d4:58:44:3d:13:96:9f:
3d:c5:9d:3b:83:c7:24:e1:4e:bb:be:b7:4c:77:0d:
95:81:bc:dc:88:f8:d6:1b:eb:94:fb:c6:7a:ad:49:
5d:3b:f2:84:98:02:5c:fa:57:14:33:81:19:c1:83:
8e:7e:56:cd:22:39:3b:05:a5:fc:48:ee:2f:20:61:
df:f5:3a:14:2a:5a:e3:92:74:7a:dd:c9:b4:ca:2a:
7c:b5:11:85:57:f7:fe:54:28:f4:d3:bd:9f:4a:c1:
9c:31:7e:7b:51:af:09:38:8b:96:da:85:69:ce:59:
25:8d:d7:2f:c4:8a:6d:ce:d3:2e:3f:bf:1c:b3:71:
92:4e:14:97:b0:7d:be:c7:3c:8f:e8:84:a9:17:52:
8e:90:57:9d:d8:1a:43:7e:c8:a0:a3:1a:99:74:9e:
ae:d0:6f:62:69:3c:8d:4b:ae:f7:c2:c0:e0:4d:b6:
6b:ce:81:64:71:df:69:e6:3c:0b:da:6c:68:60:34:
55:97:85:80:76:78:8c:02:0b:98:60:5a:e9:cc:a4:
53:30:9e:db:a1:aa:d2:3a:0e:44:2e:30:73:d0:5a:
b8:c7:92:c1:41:f3:b1:6d:4e:a9:f4:42:11:78:be:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:82:8B:F7:A7:D3:B1:DF:CE:66:E2:21:66:F4:E1:08:8E:FB:15
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/sFOCi_en07HfzmbiIWb04QiO-xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.254.0/24
188.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f3:69:4f:80:c6:51:4d:47:ee:32:53:f3:86:0d:ac:a7:2d:
08:1f:19:89:b7:f6:ad:1c:18:cf:ea:cb:df:ea:77:5a:64:bc:
d1:77:43:d3:af:d9:b4:bd:f9:6d:91:38:10:0f:de:93:5b:97:
f1:83:b7:90:db:27:8b:4e:d2:20:a6:00:ae:59:19:b9:06:9e:
90:3d:97:49:90:06:b4:3d:a3:ca:dc:2d:3e:af:b3:d9:4d:d5:
8d:02:8f:45:c3:41:5c:4a:68:6b:19:3a:b2:84:9a:1e:25:fa:
32:dc:11:ea:9f:1c:4d:48:79:47:c2:72:c9:f0:89:28:59:f0:
f8:65:2c:e3:66:36:76:62:d4:75:31:87:6c:a3:43:38:f0:b1:
dc:ec:b4:59:b9:70:dc:60:ab:8c:3b:8b:fc:a3:90:b0:ea:9f:
4c:9a:09:5d:7d:b9:ff:0f:f3:1e:62:eb:23:23:c4:f4:78:f8:
36:64:cb:83:cc:f1:0f:f2:99:86:ee:56:49:49:e0:73:6a:0b:
d6:58:e7:97:34:65:34:12:ed:f8:40:f4:47:4f:a8:4e:84:ff:
86:7d:c4:ea:af:f9:8b:ea:2b:35:ee:70:56:35:bf:a2:6e:50:
46:ac:7e:0a:ae:ca:e9:6f:cb:dc:b2:03:5c:77:26:ff:a9:a8:
68:68:e9:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsjpuYnmpxZMvQW9vRrphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDUzODI4YmY3YTdkM2IxZGZjZTY2ZTIyMTY2ZjRlMTA4OGVmYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlievTuWnBemDuJ/MdQh1VMOQIaC
odRYRD0Tlp89xZ07g8ck4U67vrdMdw2VgbzciPjWG+uU+8Z6rUldO/KEmAJc+lcU
M4EZwYOOflbNIjk7BaX8SO4vIGHf9ToUKlrjknR63cm0yip8tRGFV/f+VCj0072f
SsGcMX57Ua8JOIuW2oVpzlkljdcvxIptztMuP78cs3GSThSXsH2+xzyP6ISpF1KO
kFed2BpDfsigoxqZdJ6u0G9iaTyNS673wsDgTbZrzoFkcd9p5jwL2mxoYDRVl4WA
dniMAguYYFrpzKRTMJ7boarSOg5ELjBz0Fq4x5LBQfOxbU6p9EIReL72eQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLBTgov3p9Ox385m4iFm9OEIjvsVMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvc0ZPQ2lfZW4wN0hmem1iaUlXYjA0UWlPLXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubj+AwQA
vF9eMA0GCSqGSIb3DQEBCwUAA4IBAQBv82lPgMZRTUfuMlPzhg2spy0IHxmJt/at
HBjP6svf6ndaZLzRd0PTr9m0vfltkTgQD96TW5fxg7eQ2yeLTtIgpgCuWRm5Bp6Q
PZdJkAa0PaPK3C0+r7PZTdWNAo9Fw0FcSmhrGTqyhJoeJfoy3BHqnxxNSHlHwnLJ
8IkoWfD4ZSzjZjZ2YtR1MYdso0M48LHc7LRZuXDcYKuMO4v8o5Cw6p9Mmgldfbn/
D/MeYusjI8T0ePg2ZMuDzPEP8pmG7lZJSeBzagvWWOeXNGU0Eu34QPRHT6hOhP+G
fcTqr/mL6is17nBWNb+iblBGrH4Krsrpb8vcsgNcdyb/qahoaOn6
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:29 2025 by rpki-client