Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4CRh1_CvU86oKkepqeWz0p8Z20g.roa
File: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (raw, json)
Hash identifier: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=
Subject key identifier: E0:24:61:D7:F0:AF:53:CE:A8:2A:47:A9:A9:E5:B3:D2:9F:19:DB:48
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D655B8663DCD95F0C66DB43FB23C95
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4CRh1_CvU86oKkepqeWz0p8Z20g.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197648
IP address blocks: 213.169.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:b8:66:3d:cd:95:f0:c6:6d:b4:3f:b2:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02461d7f0af53cea82a47a9a9e5b3d29f19db48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:6d:94:c6:61:d9:b5:69:3c:e5:cd:50:56:
bc:3d:78:4d:e9:4b:a3:3f:ed:10:7c:9a:37:5d:a2:
91:95:a2:d2:53:e8:7c:1e:8c:b5:06:0a:62:c8:07:
0a:2e:d9:29:f3:38:4f:52:f9:f8:67:35:4c:a5:b4:
91:84:b5:cb:48:af:2a:61:ba:b8:7a:bd:59:b5:63:
d7:a6:6d:cd:ca:b2:e6:d4:b5:83:3f:61:f7:05:99:
f3:fc:cf:8e:15:77:5f:6a:29:ff:a1:ad:81:99:50:
0d:28:03:74:89:67:8b:0c:27:d1:63:d9:7b:72:dd:
4d:fa:17:3b:ce:6c:ee:d7:f6:51:e5:81:c3:e7:ef:
70:5c:9b:fa:e9:c5:2b:b8:16:6b:dc:b8:2a:99:39:
f6:2c:95:e6:c4:d1:35:21:37:d9:dd:da:7f:63:0b:
cc:fc:0d:ae:35:a5:e8:b1:1b:d3:7c:43:06:29:69:
a3:5b:8f:40:51:4e:c4:ba:0c:19:26:fd:32:10:9b:
26:c7:0d:20:6c:05:09:fa:09:9a:c0:f1:81:1d:dd:
88:b1:cd:ee:14:0c:27:2f:25:37:ee:fd:8e:8e:66:
1e:c2:aa:f4:0b:60:b7:17:11:17:70:ac:a2:44:c2:
57:cf:7c:41:b6:2b:28:d2:53:d5:17:28:0c:73:78:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:61:D7:F0:AF:53:CE:A8:2A:47:A9:A9:E5:B3:D2:9F:19:DB:48
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/4CRh1_CvU86oKkepqeWz0p8Z20g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.148.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8c:70:f9:a2:38:56:26:b3:28:94:36:40:6d:56:c6:f9:7b:
23:d5:70:1a:85:65:76:c9:eb:3f:65:20:10:bf:2e:64:82:0d:
8b:b0:23:f8:11:80:ae:50:e7:dc:67:ad:00:6b:ec:33:4c:b5:
8f:24:2d:c3:ee:68:51:5e:e6:a0:59:6d:d5:9f:f5:56:c7:b0:
d9:1f:99:0d:e0:c7:f1:58:a6:f4:2d:71:e4:5e:81:5a:f7:82:
a2:bf:5d:f9:2b:3b:24:fb:12:d4:9d:f0:c1:31:32:8e:2d:49:
1f:8e:60:e4:f9:39:fb:31:76:76:78:7e:60:b2:23:e8:9c:3f:
2f:91:9b:62:a0:80:71:94:79:9f:7e:cd:72:a7:eb:c6:d6:a8:
54:d1:85:b7:46:1e:39:8a:2a:0a:da:7d:14:5d:6c:ac:d8:1d:
f3:5a:61:7b:71:d7:02:d7:d5:08:dc:6c:69:bb:a4:90:70:2b:
f8:5a:4c:98:9d:46:9a:c1:53:6c:97:e6:9b:9a:fc:70:cf:e0:
0a:9f:24:cf:df:19:ee:c1:01:c5:c3:cf:bf:91:05:44:a4:d7:
0a:9c:c8:f1:6c:6b:c8:e4:f4:0f:f1:fd:ba:9c:bf:74:63:1a:
0b:d9:e1:3c:7c:f9:e0:bb:ad:0f:cc:2c:68:4b:67:e4:9d:7c:
56:d6:ce:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lW4Zj3NlfDGbbQ/sjyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDI0NjFkN2YwYWY1M2NlYTgyYTQ3YTlhOWU1YjNkMjlmMTlkYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1tlMZh2bVpPOXNUFa8PXhN6Uuj
P+0QfJo3XaKRlaLSU+h8Hoy1BgpiyAcKLtkp8zhPUvn4ZzVMpbSRhLXLSK8qYbq4
er1ZtWPXpm3NyrLm1LWDP2H3BZnz/M+OFXdfain/oa2BmVANKAN0iWeLDCfRY9l7
ct1N+hc7zmzu1/ZR5YHD5+9wXJv66cUruBZr3LgqmTn2LJXmxNE1ITfZ3dp/YwvM
/A2uNaXosRvTfEMGKWmjW49AUU7EugwZJv0yEJsmxw0gbAUJ+gmawPGBHd2Isc3u
FAwnLyU37v2OjmYewqr0C2C3FxEXcKyiRMJXz3xBtiso0lPVFygMc3ieUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOAkYdfwr1POqCpHqanls9KfGdtIMB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvNENSaDFfQ3ZVODZvS2tlcHFlV3owcDhaMjBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1amUMA0G
CSqGSIb3DQEBCwUAA4IBAQCYjHD5ojhWJrMolDZAbVbG+Xsj1XAahWV2yes/ZSAQ
vy5kgg2LsCP4EYCuUOfcZ60Aa+wzTLWPJC3D7mhRXuagWW3Vn/VWx7DZH5kN4Mfx
WKb0LXHkXoFa94Kiv135Kzsk+xLUnfDBMTKOLUkfjmDk+Tn7MXZ2eH5gsiPonD8v
kZtioIBxlHmffs1yp+vG1qhU0YW3Rh45iioK2n0UXWys2B3zWmF7cdcC19UI3Gxp
u6SQcCv4WkyYnUaawVNsl+abmvxwz+AKnyTP3xnuwQHFw8+/kQVEpNcKnMjxbGvI
5PQP8f26nL90YxoL2eE8fPngu60PzCxoS2fknXxW1s7k
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:19:59 2025 by rpki-client