Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa
File: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (raw, json)
Hash identifier: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=
Subject key identifier: C0:D7:8C:4A:2E:4C:AD:71:CA:27:D0:5C:77:52:75:B7:D4:D4:57:1B
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D18C368BF411C54FB524A2BA5E24
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 195.226.205.0/24 maxlen: 24
213.249.73.0/24 maxlen: 24
213.249.74.0/23 maxlen: 24
213.249.76.0/22 maxlen: 24
213.249.81.0/24 maxlen: 24
213.249.82.0/23 maxlen: 24
213.249.84.0/22 maxlen: 24
213.249.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d1:8c:36:8b:f4:11:c5:4f:b5:24:a2:ba:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0d78c4a2e4cad71ca27d05c775275b7d4d4571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:2c:a0:a2:00:36:38:3d:a5:31:c0:24:49:
28:56:16:d2:0b:ad:96:fa:63:36:2d:8d:10:27:11:
76:41:1b:02:1a:53:9e:6c:49:e2:cd:1c:04:50:77:
41:5d:08:33:ed:50:f6:fc:31:bf:0e:60:e4:55:d8:
9c:57:db:b6:b9:10:4c:d2:f0:13:eb:25:d6:d7:80:
4e:2f:f0:4b:8d:86:ae:6a:bc:45:b3:32:e6:b5:60:
f1:81:4f:62:dd:fc:ef:c1:3d:83:b0:e4:f6:0d:2b:
7d:6e:d1:8e:7b:b7:48:ba:a0:08:b9:bc:04:33:e2:
a3:a6:8a:43:91:8a:58:c6:6c:28:ac:81:44:24:e0:
86:33:82:b6:17:8c:59:76:fc:61:19:3b:9c:e2:e3:
2e:a3:dd:34:72:50:52:de:df:87:d6:2c:76:fc:c7:
db:6e:22:e0:2e:3b:59:7a:0d:1f:11:56:99:7d:88:
cd:a9:c5:80:6a:ff:a2:64:00:d8:5f:52:0b:8b:b8:
1b:5b:cf:22:b4:ad:57:48:13:5e:bf:71:ee:6e:9e:
cc:9b:e4:29:55:08:81:26:af:f4:18:bf:4e:3e:9f:
88:b9:7a:74:e5:13:22:eb:af:eb:d6:54:a7:34:a7:
4f:f5:22:ad:d9:92:09:7c:71:c9:8a:b6:25:81:ed:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:8C:4A:2E:4C:AD:71:CA:27:D0:5C:77:52:75:B7:D4:D4:57:1B
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.205.0/24
213.249.73.0-213.249.79.255
213.249.81.0-213.249.91.255
Signature Algorithm: sha256WithRSAEncryption
21:d9:e8:d7:de:0d:f2:8d:b4:35:b8:96:22:75:44:87:8c:2d:
7c:2f:71:a2:69:42:f6:6b:05:b6:f3:c8:5c:9b:a4:c3:e7:d7:
0f:3f:2c:52:22:16:25:28:c9:e8:3b:60:69:e9:b1:bc:08:f9:
bf:66:f5:6f:49:e9:85:90:92:7f:1d:37:80:da:1e:b2:e7:dd:
f9:aa:37:2e:6c:72:53:68:a2:c7:58:3c:cb:2f:4d:6a:3e:6e:
c8:6c:9a:99:41:50:6a:d3:45:28:df:dc:3f:58:73:9b:80:7c:
8c:ef:1b:ec:6e:48:25:33:89:83:57:68:34:82:c2:d7:f0:70:
a0:21:62:25:28:76:b7:65:23:a5:c0:7a:c1:86:b8:52:f3:10:
0c:91:d4:9c:16:bb:32:90:d9:76:a5:4c:01:95:4a:46:ab:c7:
e4:05:1a:7c:87:89:3d:c0:3b:26:5e:48:b4:1f:2d:d4:d8:89:
70:7e:bc:9a:6a:4a:20:21:9d:66:72:ca:1a:77:71:87:16:90:
a0:5f:21:8e:3f:c6:87:8c:11:a9:b9:e2:d6:f8:c1:5b:6e:d2:
72:fa:b9:cc:b9:1a:7e:70:dd:88:8d:56:bd:f4:0d:1b:cc:f9:
5d:49:c3:bc:96:14:f4:d0:65:6d:1e:f4:5d:fe:64:d6:70:77:
48:d7:d3:d0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQoJdGMNov0EcVPtSSiul4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjUwMTAyMTc1MjM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGQ3OGM0YTJlNGNhZDcxY2EyN2QwNWM3NzUyNzViN2Q0ZDQ1NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DIsoKIANjg9pTHAJEkoVhbSC62W
+mM2LY0QJxF2QRsCGlOebEnizRwEUHdBXQgz7VD2/DG/DmDkVdicV9u2uRBM0vAT
6yXW14BOL/BLjYauarxFszLmtWDxgU9i3fzvwT2DsOT2DSt9btGOe7dIuqAIubwE
M+KjpopDkYpYxmworIFEJOCGM4K2F4xZdvxhGTuc4uMuo900clBS3t+H1ix2/Mfb
biLgLjtZeg0fEVaZfYjNqcWAav+iZADYX1ILi7gbW88itK1XSBNev3Hubp7Mm+Qp
VQiBJq/0GL9OPp+IuXp05RMi66/r1lSnNKdP9SKt2ZIJfHHJirYlge2bEwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMDXjEouTK1xyifQXHdSdbfU1FcbMB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvd05lTVNpNU1yWEhLSjlCY2QxSjF0OVRVVnhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAw+LNMAwD
BADV+UkDBATV+UAwDAMEANX5UQMEAtX5WDANBgkqhkiG9w0BAQsFAAOCAQEAIdno
194N8o20NbiWInVEh4wtfC9xomlC9msFtvPIXJukw+fXDz8sUiIWJSjJ6Dtgaemx
vAj5v2b1b0nphZCSfx03gNoesufd+ao3LmxyU2iix1g8yy9Naj5uyGyamUFQatNF
KN/cP1hzm4B8jO8b7G5IJTOJg1doNILC1/BwoCFiJSh2t2UjpcB6wYa4UvMQDJHU
nBa7MpDZdqVMAZVKRqvH5AUafIeJPcA7Jl5ItB8t1NiJcH68mmpKICGdZnLKGndx
hxaQoF8hjj/Gh4wRqbni1vjBW27Scvq5zLkafnDdiI1WvfQNG8z5XUnDvJYU9NBl
bR70Xf5k1nB3SNfT0A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:26:00 2025 by rpki-client