Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/FfSeCwPXspTGNJXs1YFUWRkPWd8.roa
File: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (raw, json)
Hash identifier: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=
Subject key identifier: 15:F4:9E:0B:03:D7:B2:94:C6:34:95:EC:D5:81:54:59:19:0F:59:DF
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01953D31D920D9E2175B44EDD5B8ECE776BA
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/FfSeCwPXspTGNJXs1YFUWRkPWd8.roa
Signing time: Tue 25 Feb 2025 13:00:31 +0000
ROA not before: Tue 25 Feb 2025 13:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49972
IP address blocks: 194.180.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:31:d9:20:d9:e2:17:5b:44:ed:d5:b8:ec:e7:76:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Feb 25 13:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15f49e0b03d7b294c63495ecd5815459190f59df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:a6:15:88:66:8a:9d:9e:9c:04:9e:d0:52:
9f:b9:68:0a:89:97:2f:9a:13:6f:1a:56:4b:93:55:
92:b0:b2:1b:58:ee:51:3f:bd:c4:93:2c:79:33:76:
a9:8e:05:7f:2f:80:68:2c:6d:c2:9b:84:04:7c:45:
e7:65:86:8e:b0:42:de:04:68:c1:07:1e:c6:6f:96:
e5:53:c8:10:04:9a:ea:bb:64:89:67:f3:a4:0d:79:
cb:1e:f6:cc:ea:11:fb:c5:7f:94:43:62:c9:2c:02:
c3:cd:e2:81:38:0c:80:f4:65:a6:68:15:77:a0:43:
f6:c0:47:3d:32:f6:c1:f7:be:5e:34:1a:da:41:f8:
a2:37:26:7c:9d:4d:a9:18:1c:4e:34:af:91:b2:28:
ba:41:7f:b5:08:36:55:3b:b4:8b:f1:1b:4c:1c:29:
14:59:20:18:ab:8e:96:bf:e4:42:ec:0c:5a:03:1e:
6e:1d:3f:3d:df:a8:f2:54:55:94:3e:7d:95:aa:22:
85:83:b2:3c:64:fe:39:1f:86:5d:88:b9:e7:92:c7:
22:b7:dc:f1:d3:da:db:c8:b7:57:32:cf:36:90:2d:
39:c0:d2:47:ce:17:23:4d:d8:21:34:fb:f8:4c:32:
e6:86:d4:be:97:35:27:49:6a:16:60:c8:70:b6:8c:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:9E:0B:03:D7:B2:94:C6:34:95:EC:D5:81:54:59:19:0F:59:DF
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/FfSeCwPXspTGNJXs1YFUWRkPWd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:42:cb:4a:ae:6b:c6:04:93:07:ce:ce:04:b7:75:16:8f:12:
54:bf:21:f5:23:9c:4d:9c:a3:ff:08:b9:e2:17:4a:49:0e:4f:
70:5e:31:c6:4b:da:26:3c:8a:3c:89:9d:fd:69:91:08:b4:c6:
86:21:00:d9:65:1a:6a:8c:d8:62:4b:f3:49:5a:30:74:37:0a:
28:c3:08:71:d6:14:6f:90:e9:0a:90:d0:f6:c1:4c:20:e5:c2:
41:85:14:32:f7:db:fe:44:ac:3e:df:dd:7f:d1:0e:83:f4:07:
e4:c6:39:88:75:34:c7:1c:61:1a:96:58:3f:4d:4a:59:22:31:
ca:0b:bf:90:ec:9c:e2:d8:e8:6f:c2:7a:11:5f:33:b8:6d:cf:
9a:e6:d5:c5:cc:d8:df:9c:b1:6f:4c:bd:65:04:f1:1e:c9:22:
a8:2a:ca:44:b8:f8:d1:0c:3e:fd:f6:0b:d9:73:f4:eb:0b:f8:
c3:9d:33:02:29:51:84:f5:07:8a:94:d9:b7:26:5a:04:89:97:
9d:4e:41:5f:ba:cd:21:6b:0c:ed:78:c1:6a:10:59:8c:a2:ed:
0c:08:e7:da:0f:7a:73:a2:ae:8c:b6:a0:9a:8c:14:50:08:25:
e4:e2:87:8b:90:e6:f0:a3:41:76:4f:1e:59:c4:22:92:c6:4f:
0d:19:d8:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU9Mdkg2eIXW0Tt1bjs53a6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjUwMjI1MTMwMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWY0OWUwYjAzZDdiMjk0YzYzNDk1ZWNkNTgxNTQ1OTE5MGY1OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3amFYhmip2enASe0FKfuWgKiZcv
mhNvGlZLk1WSsLIbWO5RP73Ekyx5M3apjgV/L4BoLG3Cm4QEfEXnZYaOsELeBGjB
Bx7Gb5blU8gQBJrqu2SJZ/OkDXnLHvbM6hH7xX+UQ2LJLALDzeKBOAyA9GWmaBV3
oEP2wEc9MvbB975eNBraQfiiNyZ8nU2pGBxONK+Rsii6QX+1CDZVO7SL8RtMHCkU
WSAYq46Wv+RC7AxaAx5uHT8936jyVFWUPn2VqiKFg7I8ZP45H4ZdiLnnkscit9zx
09rbyLdXMs82kC05wNJHzhcjTdghNPv4TDLmhtS+lzUnSWoWYMhwtox0iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBX0ngsD17KUxjSV7NWBVFkZD1nfMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvRmZTZUN3UFhzcFRHTkpYczFZRlVXUmtQV2Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrTgMA0G
CSqGSIb3DQEBCwUAA4IBAQCjQstKrmvGBJMHzs4Et3UWjxJUvyH1I5xNnKP/CLni
F0pJDk9wXjHGS9omPIo8iZ39aZEItMaGIQDZZRpqjNhiS/NJWjB0Nwoowwhx1hRv
kOkKkND2wUwg5cJBhRQy99v+RKw+391/0Q6D9AfkxjmIdTTHHGEallg/TUpZIjHK
C7+Q7Jzi2OhvwnoRXzO4bc+a5tXFzNjfnLFvTL1lBPEeySKoKspEuPjRDD799gvZ
c/TrC/jDnTMCKVGE9QeKlNm3JloEiZedTkFfus0hawzteMFqEFmMou0MCOfaD3pz
oq6MtqCajBRQCCXk4oeLkObwo0F2Tx5ZxCKSxk8NGdjF
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:08:43 2025 by rpki-client