Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa
File: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (raw, json)
Hash identifier: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=
Subject key identifier: 40:EA:7C:6E:1E:59:3D:2B:B3:9C:A0:91:AC:66:4B:96:10:93:81:CB
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D653B31C22050A4B125BA809D9F749
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35432
IP address blocks: 82.114.51.0/24 maxlen: 24
213.169.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:b3:1c:22:05:0a:4b:12:5b:a8:09:d9:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40ea7c6e1e593d2bb39ca091ac664b96109381cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:8f:56:29:15:cc:cc:a3:54:34:43:68:46:
80:3f:ea:4c:a1:61:e0:bf:32:3c:bd:1a:e6:3e:e7:
1f:ee:de:aa:d7:49:28:f8:76:d7:e9:d3:76:1a:44:
02:f1:13:95:2e:28:e7:94:cd:d0:5a:b2:7b:ef:c3:
49:81:fa:77:08:8d:c4:83:f3:75:23:04:c7:44:e8:
31:54:96:5c:8d:29:3d:1f:43:fe:97:52:d4:6b:a9:
47:66:96:78:6a:a2:ce:3c:07:fc:b2:5c:dc:07:f4:
e7:c7:22:93:2f:1c:45:68:81:b7:ea:c6:cf:94:4c:
26:da:94:87:79:8b:89:40:42:87:50:6a:b7:3c:42:
6c:3e:6f:98:80:7a:38:18:38:63:aa:14:b5:5e:2c:
03:da:2b:31:bb:8f:e4:cd:48:eb:86:55:e0:35:00:
a7:72:21:13:3e:b9:06:a6:02:73:65:97:79:96:e7:
08:96:72:4a:8c:ab:86:de:66:1c:07:d2:68:78:7a:
11:33:39:95:b5:f9:ce:8e:d5:0c:36:60:38:78:b3:
d2:03:5e:70:fe:b0:c7:eb:0a:c1:f2:33:ea:89:19:
11:78:97:35:19:5c:b3:4c:38:bb:ed:c1:66:0d:9c:
47:0a:b8:e4:bd:56:83:4a:eb:4b:cb:7c:ab:14:ab:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EA:7C:6E:1E:59:3D:2B:B3:9C:A0:91:AC:66:4B:96:10:93:81:CB
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.51.0/24
213.169.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:9c:bd:3d:03:4c:6d:9c:36:37:8d:0c:38:b3:25:25:32:
82:6a:7d:60:90:75:66:e2:cf:1b:a6:72:3f:c1:f7:92:4d:f0:
c1:22:f7:53:3c:96:8d:c1:e4:23:11:15:f0:6f:5a:75:8c:76:
38:7c:e2:50:02:49:86:d5:65:71:ea:b1:54:21:9c:e8:44:9e:
40:e8:61:49:44:eb:27:7f:1e:48:73:f5:40:80:d9:82:a2:fa:
37:19:20:31:6f:87:6b:a3:0f:9a:d3:2b:e5:c5:b3:5d:c9:9c:
47:58:6c:a8:0a:da:d9:bb:01:2d:2e:8b:34:01:90:88:2a:a3:
8e:5f:47:e5:e1:e6:c7:7b:44:04:e0:64:4b:58:28:bc:f9:58:
eb:14:de:23:78:49:b5:5a:bb:82:84:54:5d:e8:30:3d:2a:61:
23:ea:d0:ca:8d:ca:0b:52:03:ad:63:8f:54:6f:77:97:b8:6a:
07:bc:16:74:7f:77:19:07:9e:6e:24:84:47:42:79:6e:66:de:
2c:70:8f:57:2b:c2:69:f9:78:ec:85:5d:18:08:f6:1f:3c:39:
1d:9b:26:16:17:e4:bb:17:bd:51:9d:ea:a5:3d:60:0a:a3:ea:
c2:96:e7:94:f4:90:d8:88:17:6e:23:22:59:4b:1b:76:d5:74:
de:f7:41:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1lOzHCIFCksSW6gJ2fdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGVhN2M2ZTFlNTkzZDJiYjM5Y2EwOTFhYzY2NGI5NjEwOTM4MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmqPVikVzMyjVDRDaEaAP+pMoWHg
vzI8vRrmPucf7t6q10ko+HbX6dN2GkQC8ROVLijnlM3QWrJ778NJgfp3CI3Eg/N1
IwTHROgxVJZcjSk9H0P+l1LUa6lHZpZ4aqLOPAf8slzcB/TnxyKTLxxFaIG36sbP
lEwm2pSHeYuJQEKHUGq3PEJsPm+YgHo4GDhjqhS1XiwD2isxu4/kzUjrhlXgNQCn
ciETPrkGpgJzZZd5lucIlnJKjKuG3mYcB9JoeHoRMzmVtfnOjtUMNmA4eLPSA15w
/rDH6wrB8jPqiRkReJc1GVyzTDi77cFmDZxHCrjkvVaDSutLy3yrFKsVqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEDqfG4eWT0rs5ygkaxmS5YQk4HLMB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvUU9wOGJoNVpQU3V6bktDUnJHWkxsaENUZ2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUnIzAwQA
1amVMA0GCSqGSIb3DQEBCwUAA4IBAQCEFJy9PQNMbZw2N40MOLMlJTKCan1gkHVm
4s8bpnI/wfeSTfDBIvdTPJaNweQjERXwb1p1jHY4fOJQAkmG1WVx6rFUIZzoRJ5A
6GFJROsnfx5Ic/VAgNmCovo3GSAxb4drow+a0yvlxbNdyZxHWGyoCtrZuwEtLos0
AZCIKqOOX0fl4ebHe0QE4GRLWCi8+VjrFN4jeEm1WruChFRd6DA9KmEj6tDKjcoL
UgOtY49Ub3eXuGoHvBZ0f3cZB55uJIRHQnluZt4scI9XK8Jp+XjshV0YCPYfPDkd
myYWF+S7F71RneqlPWAKo+rClueU9JDYiBduIyJZSxt21XTe90G2
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:02 2025 by rpki-client