Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fjht8PI2TQqdfX3xTPmwusNT0kw.roa
File: fjht8PI2TQqdfX3xTPmwusNT0kw.roa (raw, json)
Hash identifier: mrfoUb/AExSioEAi9Ecab3lLXACxNVdv5o4MxmVt76Q=
Subject key identifier: 7E:38:6D:F0:F2:36:4D:0A:9D:7D:7D:F1:4C:F9:B0:BA:C3:53:D2:4C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824E95D78E36C60DD0D183434F3A4F8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fjht8PI2TQqdfX3xTPmwusNT0kw.roa
Signing time: Thu 02 Jan 2025 17:51:35 +0000
ROA not before: Thu 02 Jan 2025 17:51:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 194.87.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:e9:5d:78:e3:6c:60:dd:0d:18:34:34:f3:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e386df0f2364d0a9d7d7df14cf9b0bac353d24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:89:17:f8:e7:d5:eb:36:56:f4:0b:ba:e6:
1e:8c:00:dd:a6:2b:b3:6b:6f:90:d8:6a:d6:a7:28:
da:70:e0:81:f5:0f:7d:9b:3d:e9:1a:9f:3d:2f:c7:
8c:ef:7c:41:12:df:53:63:47:e3:b8:8e:4b:8b:ba:
dc:60:39:58:89:8f:ef:84:a4:b7:74:9f:55:8c:2c:
a2:9b:1e:76:dc:4e:32:39:05:1c:1c:d7:3a:33:8c:
cd:c1:dd:90:db:6a:54:e0:a5:e3:1a:a4:d4:00:8c:
31:29:0c:82:da:e3:b1:c3:db:8c:a0:fa:c8:af:fb:
55:af:2f:73:72:4c:90:b7:99:be:05:e4:33:29:ce:
86:58:32:0f:80:93:51:26:c5:aa:cb:d0:7e:5f:ef:
53:f1:39:e4:36:0b:6b:b2:16:b6:49:ea:e2:9e:cc:
ef:55:66:c1:4b:9d:4d:af:c0:5e:34:b6:a5:ad:73:
05:97:d3:62:e6:1d:15:7d:ae:55:8b:55:8b:14:50:
9a:96:72:80:d0:02:fe:7a:df:04:4f:be:c3:06:54:
d4:75:06:bc:7e:cf:09:dc:6d:63:60:24:7e:78:25:
05:75:df:14:5e:88:b0:6b:7b:d3:cb:dc:8c:27:1e:
f9:ff:25:d2:07:75:fc:c1:6d:cf:7a:44:d6:9e:72:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:6D:F0:F2:36:4D:0A:9D:7D:7D:F1:4C:F9:B0:BA:C3:53:D2:4C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fjht8PI2TQqdfX3xTPmwusNT0kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:a4:e5:c3:c9:b8:04:db:ed:f3:82:c8:9d:23:cc:3d:c7:ed:
2b:47:47:c0:91:ed:67:b7:40:69:4c:56:f8:03:ad:ca:df:af:
04:b0:1f:3a:de:a2:73:30:40:2b:23:a8:d0:d8:c3:71:7f:c9:
6c:93:cd:83:c5:5b:6c:2c:33:aa:97:2a:7a:b4:50:14:22:ff:
82:da:ee:52:24:dc:af:3a:32:da:24:13:fb:70:39:ed:46:2e:
27:5e:92:fd:ed:5f:99:e7:d2:27:ba:87:e1:75:83:25:dd:67:
86:1a:9c:10:c5:40:fc:9a:1e:a1:6d:e4:c7:b2:dc:b4:2d:c6:
2f:2d:87:b7:7e:0c:6d:f2:04:49:c2:ca:2a:6b:28:f7:d8:c9:
90:ed:5e:87:95:cf:5a:17:97:12:a1:97:c2:04:67:b6:ee:4a:
5b:b9:01:e4:76:a3:0f:5c:4d:cb:d3:27:93:03:d7:75:4c:84:
f1:24:77:d9:f5:06:7f:c4:37:89:af:3e:e3:3e:0d:90:e1:80:
15:81:95:3d:4e:6a:ea:3f:46:71:9c:61:99:27:57:53:f6:55:
5a:ea:f9:99:a4:7a:0e:cd:b9:d2:d5:a6:20:53:62:b8:6b:33:
e8:69:24:05:80:9e:f6:9b:66:55:c6:a6:cd:48:ff:a9:bc:0f:
0f:ac:85:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJOldeONsYN0NGDQ086T4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTM4NmRmMGYyMzY0ZDBhOWQ3ZDdkZjE0Y2Y5YjBiYWMzNTNkMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg2JF/jn1es2VvQLuuYejADdpiuz
a2+Q2GrWpyjacOCB9Q99mz3pGp89L8eM73xBEt9TY0fjuI5Li7rcYDlYiY/vhKS3
dJ9VjCyimx523E4yOQUcHNc6M4zNwd2Q22pU4KXjGqTUAIwxKQyC2uOxw9uMoPrI
r/tVry9zckyQt5m+BeQzKc6GWDIPgJNRJsWqy9B+X+9T8TnkNgtrsha2Serinszv
VWbBS51Nr8BeNLalrXMFl9Ni5h0Vfa5Vi1WLFFCalnKA0AL+et8ET77DBlTUdQa8
fs8J3G1jYCR+eCUFdd8UXoiwa3vTy9yMJx75/yXSB3X8wW3PekTWnnIvkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH44bfDyNk0KnX198Uz5sLrDU9JMMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZmpodDhQSTJUUXFkZlgzeFRQbXd1c05UMGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwle0MA0G
CSqGSIb3DQEBCwUAA4IBAQA8pOXDybgE2+3zgsidI8w9x+0rR0fAke1nt0BpTFb4
A63K368EsB863qJzMEArI6jQ2MNxf8lsk82DxVtsLDOqlyp6tFAUIv+C2u5SJNyv
OjLaJBP7cDntRi4nXpL97V+Z59InuofhdYMl3WeGGpwQxUD8mh6hbeTHsty0LcYv
LYe3fgxt8gRJwsoqayj32MmQ7V6Hlc9aF5cSoZfCBGe27kpbuQHkdqMPXE3L0yeT
A9d1TITxJHfZ9QZ/xDeJrz7jPg2Q4YAVgZU9TmrqP0ZxnGGZJ1dT9lVa6vmZpHoO
zbnS1aYgU2K4azPoaSQFgJ72m2ZVxqbNSP+pvA8PrIWX
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:32 2025 by rpki-client