Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa
File: F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa (raw, json)
Hash identifier: ieI0ZKZHt/S3fOpvysP/zC/yEti8uFPoDMgtPhCFeKw=
Subject key identifier: 17:77:19:2A:3E:92:F9:9F:7F:94:3E:BA:0C:45:F4:BC:AF:9E:29:C1
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0194D9EF007F31FB2896C4F9B73A9EC212C0
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa
Signing time: Thu 06 Feb 2025 06:25:06 +0000
ROA not before: Thu 06 Feb 2025 06:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 185.125.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d9:ef:00:7f:31:fb:28:96:c4:f9:b7:3a:9e:c2:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Feb 6 06:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1777192a3e92f99f7f943eba0c45f4bcaf9e29c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:7c:cb:ea:6a:67:be:ab:b0:74:0a:23:8a:
42:c8:6d:f3:df:79:66:67:80:d7:ae:da:a0:26:48:
c6:3a:13:84:bc:9f:fc:49:86:1e:71:9b:c1:44:59:
56:f0:d5:da:d3:69:94:bf:2a:8d:a6:66:4a:71:af:
6a:cd:51:55:69:95:78:cc:ee:04:ae:83:fa:5e:f3:
0a:17:ea:11:c6:06:a8:f5:05:61:71:b4:ea:5e:2d:
76:0c:48:61:53:46:18:5b:03:73:e0:c9:dc:6a:08:
7e:4f:b0:1e:cd:04:35:95:d2:f5:67:eb:05:54:91:
3c:2d:a4:21:d9:c7:b3:aa:e8:9f:41:6b:54:9c:29:
28:35:fc:f1:a6:03:ae:16:b2:e4:38:48:61:30:e3:
93:7a:16:ab:a5:ba:8e:b1:45:f2:53:f8:e6:b4:73:
16:7b:0d:37:b7:35:ce:10:bf:46:ce:da:1e:b9:ca:
6d:ae:33:87:61:ab:d8:6f:f0:96:e7:5d:c7:cc:41:
8d:28:9f:81:9a:83:cf:bb:39:8c:84:b2:60:53:19:
fa:ac:bc:bf:a8:01:df:6e:90:fb:57:1c:fa:78:07:
82:cb:c2:0f:ea:a0:a9:58:85:03:10:82:c3:d0:f5:
fa:2c:06:05:18:5b:cc:85:e9:0d:b6:3e:41:e8:f2:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:19:2A:3E:92:F9:9F:7F:94:3E:BA:0C:45:F4:BC:AF:9E:29:C1
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/F3cZKj6S-Z9_lD66DEX0vK-eKcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
50:60:60:0c:ac:41:d0:e2:25:c2:97:79:64:26:e4:f3:ce:41:
16:c2:a2:ff:d1:d8:b3:bb:c4:4a:56:ce:8a:9a:67:08:1b:e3:
3a:05:e0:9e:1c:b4:7b:06:65:78:b8:46:82:a8:e4:ba:dd:d9:
ac:59:63:d5:f9:22:14:6c:b5:7c:d3:16:9b:ac:ca:52:dd:ac:
a4:e3:2f:e9:0e:87:8a:e2:53:60:f1:53:5c:fb:34:84:27:07:
14:49:ad:21:af:55:03:16:5f:3e:cf:ab:ae:a5:a4:59:6b:a6:
62:7f:dc:09:a4:06:92:14:de:2b:87:46:1c:29:a8:95:af:1d:
c2:ba:31:f4:8b:90:74:92:cd:03:f5:46:a0:3a:32:5b:4c:aa:
90:41:33:e0:b8:08:e9:cd:d1:37:1d:7c:83:d4:12:34:ca:17:
8e:62:f1:83:07:08:60:5a:41:8b:0e:a6:31:d1:6b:60:0f:e8:
ed:09:bf:9a:b7:d2:79:3f:78:cb:49:6f:30:9e:12:ff:26:52:
b5:e2:35:74:97:be:b3:db:09:35:06:4e:9d:3a:d6:16:e0:12:
e5:37:2d:89:fe:3c:e6:ad:ad:27:9e:b8:e2:6a:82:8a:2b:36:
cc:87:c1:84:d9:5f:c3:d9:02:b1:c4:0e:dd:13:db:b4:12:22:
07:1b:5a:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTZ7wB/MfsolsT5tzqewhLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMjA2MDYyNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzc3MTkyYTNlOTJmOTlmN2Y5NDNlYmEwYzQ1ZjRiY2FmOWUyOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw858y+pqZ76rsHQKI4pCyG3z33lm
Z4DXrtqgJkjGOhOEvJ/8SYYecZvBRFlW8NXa02mUvyqNpmZKca9qzVFVaZV4zO4E
roP6XvMKF+oRxgao9QVhcbTqXi12DEhhU0YYWwNz4Mncagh+T7AezQQ1ldL1Z+sF
VJE8LaQh2cezquifQWtUnCkoNfzxpgOuFrLkOEhhMOOTeharpbqOsUXyU/jmtHMW
ew03tzXOEL9GztoeucptrjOHYavYb/CW513HzEGNKJ+BmoPPuzmMhLJgUxn6rLy/
qAHfbpD7Vxz6eAeCy8IP6qCpWIUDEILD0PX6LAYFGFvMhekNtj5B6PKDfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBd3GSo+kvmff5Q+ugxF9LyvninBMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvRjNjWktqNlMtWjlfbEQ2NkRFWDB2Sy1lS2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX3zMA0G
CSqGSIb3DQEBCwUAA4IBAQBQYGAMrEHQ4iXCl3lkJuTzzkEWwqL/0dizu8RKVs6K
mmcIG+M6BeCeHLR7BmV4uEaCqOS63dmsWWPV+SIUbLV80xabrMpS3ayk4y/pDoeK
4lNg8VNc+zSEJwcUSa0hr1UDFl8+z6uupaRZa6Zif9wJpAaSFN4rh0YcKaiVrx3C
ujH0i5B0ks0D9UagOjJbTKqQQTPguAjpzdE3HXyD1BI0yheOYvGDBwhgWkGLDqYx
0WtgD+jtCb+at9J5P3jLSW8wnhL/JlK14jV0l76z2wk1Bk6dOtYW4BLlNy2J/jzm
ra0nnrjiaoKKKzbMh8GE2V/D2QKxxA7dE9u0EiIHG1pC
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:32:11 2025 by rpki-client