Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/fQyJO_vQCzMCuane2mjx8wERyOE.roa
File: fQyJO_vQCzMCuane2mjx8wERyOE.roa (raw, json)
Hash identifier: DuhZxdHXSgqMA9Obqb4l5NM1Yvjmzxlhb+LLMyEn/Nw=
Subject key identifier: 7D:0C:89:3B:FB:D0:0B:33:02:B9:A9:DE:DA:68:F1:F3:01:11:C8:E1
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 019421B24D65FE81D19FE34167188BEE3801
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/fQyJO_vQCzMCuane2mjx8wERyOE.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50434
IP address blocks: 178.248.78.0/24 maxlen: 24
193.169.78.0/23 maxlen: 23
195.42.112.0/24 maxlen: 24
195.42.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4d:65:fe:81:d1:9f:e3:41:67:18:8b:ee:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d0c893bfbd00b3302b9a9deda68f1f30111c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:5d:3c:ed:2f:6a:5b:df:2c:a1:a4:a1:00:
f4:4e:83:cd:71:ce:aa:99:b7:e4:f6:7b:ed:a3:59:
4a:c6:2d:1f:c1:bc:bd:c8:5c:09:63:14:90:e2:5e:
fb:42:6d:97:7d:ee:99:ff:5d:24:a2:8e:72:c6:02:
6a:53:5c:81:79:90:12:6f:ec:a8:58:7b:ee:6e:13:
7b:f8:a2:b9:15:80:21:7a:e6:d6:9a:b1:d2:56:18:
a9:ce:7f:21:4d:ee:53:d3:1b:5d:5b:da:8d:40:fc:
1a:3c:e5:60:27:f7:0b:65:75:4e:0e:e6:63:77:23:
7f:7e:fa:a1:61:99:aa:27:96:ca:fa:6d:67:f6:04:
72:59:17:ec:5f:e3:a0:ab:fd:14:d5:cc:ed:c7:4c:
ba:98:8d:db:a9:77:ab:13:99:ad:00:e7:ca:30:9d:
45:c6:28:80:00:2d:13:a8:0e:ef:8b:76:39:b5:fa:
12:9d:6f:58:8b:36:5f:3c:99:9b:c1:55:36:0a:1b:
56:5b:8e:9b:ca:9a:5c:df:b0:64:ce:29:0b:31:f3:
f1:9a:65:7a:92:18:6d:9d:33:e1:01:92:ac:00:bb:
3c:96:2b:b8:da:0e:e3:1f:8a:54:b6:63:7e:8d:86:
f2:bb:a6:9a:3d:3b:37:d7:b2:6f:98:d9:34:e5:a2:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0C:89:3B:FB:D0:0B:33:02:B9:A9:DE:DA:68:F1:F3:01:11:C8:E1
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/fQyJO_vQCzMCuane2mjx8wERyOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.78.0/24
193.169.78.0/23
195.42.112.0/23
Signature Algorithm: sha256WithRSAEncryption
af:1a:5e:96:ed:f8:d5:6c:04:c0:07:09:b5:2b:2d:5e:8d:84:
72:0d:1f:eb:cf:32:17:4b:c9:f1:7f:24:d8:6e:a5:40:d4:00:
50:56:2e:03:37:23:86:ae:d1:d9:64:43:2a:62:81:a8:a7:6c:
59:b9:dc:f7:84:5c:af:3a:a2:1d:e3:c4:97:96:dc:f3:81:e9:
fa:47:eb:23:ab:55:ea:7b:b5:6f:4f:3e:dc:35:62:80:04:51:
ad:ad:04:5e:d8:2d:c8:19:1b:31:47:ab:3f:22:21:56:cb:be:
a3:19:2b:bc:57:87:44:6a:81:3d:3a:4a:d7:8e:23:da:e1:e3:
21:7a:13:24:fc:53:bd:52:ed:be:99:47:a0:5e:31:3b:17:fc:
2f:86:ec:d2:a1:6b:cb:49:6c:c8:38:a4:8e:16:98:e5:29:47:
4f:39:f6:79:2e:b2:42:4b:98:0d:3a:e7:14:34:f5:3f:4e:21:
2a:e5:79:78:22:ba:be:60:15:fb:22:bf:c8:b9:80:8b:ac:19:
75:e2:a4:89:67:f9:dd:01:41:89:2d:cf:6a:a5:5d:9d:d7:cc:
69:db:07:16:76:82:cb:94:93:22:96:a5:a1:9d:3b:0c:36:87:
b1:91:4a:3b:ec:83:7d:19:b6:5d:e4:e8:63:da:35:97:6c:61:
3e:6e:8f:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhsk1l/oHRn+NBZxiL7jgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWVjZDI0ZjMyMTk4OGRlYjdjMTlkY2EwNTJhNGUzYzQ5
YjYwZWEwHhcNMjUwMTAxMTE0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDBjODkzYmZiZDAwYjMzMDJiOWE5ZGVkYTY4ZjFmMzAxMTFjOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uhdPO0valvfLKGkoQD0ToPNcc6q
mbfk9nvto1lKxi0fwby9yFwJYxSQ4l77Qm2Xfe6Z/10koo5yxgJqU1yBeZASb+yo
WHvubhN7+KK5FYAheubWmrHSVhipzn8hTe5T0xtdW9qNQPwaPOVgJ/cLZXVODuZj
dyN/fvqhYZmqJ5bK+m1n9gRyWRfsX+Ogq/0U1cztx0y6mI3bqXerE5mtAOfKMJ1F
xiiAAC0TqA7vi3Y5tfoSnW9YizZfPJmbwVU2ChtWW46byppc37BkzikLMfPxmmV6
khhtnTPhAZKsALs8liu42g7jH4pUtmN+jYbyu6aaPTs317JvmNk05aKVrQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH0MiTv70AszArmp3tpo8fMBEcjhMB8GA1UdIwQY
MBaAFLOezSTzIZiN63wZ3KBSpOPEm2DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQt
MWJhNjk1ZmFlZjI1LzEvZlF5Sk9fdlFDek1DdWFuZTJtang4d0VSeU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQtMWJhNjk1ZmFlZjI1
LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsvhOAwQB
walOAwQBwypwMA0GCSqGSIb3DQEBCwUAA4IBAQCvGl6W7fjVbATABwm1Ky1ejYRy
DR/rzzIXS8nxfyTYbqVA1ABQVi4DNyOGrtHZZEMqYoGop2xZudz3hFyvOqId48SX
ltzzgen6R+sjq1Xqe7VvTz7cNWKABFGtrQRe2C3IGRsxR6s/IiFWy76jGSu8V4dE
aoE9OkrXjiPa4eMhehMk/FO9Uu2+mUegXjE7F/wvhuzSoWvLSWzIOKSOFpjlKUdP
OfZ5LrJCS5gNOucUNPU/TiEq5Xl4Irq+YBX7Ir/IuYCLrBl14qSJZ/ndAUGJLc9q
pV2d18xp2wcWdoLLlJMilqWhnTsMNoexkUo77IN9GbZd5Ohj2jWXbGE+bo+5
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:17 2025 by rpki-client