Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FImplV-NQKmQSMApm1U-C1Ydwco.roa
File: FImplV-NQKmQSMApm1U-C1Ydwco.roa (raw, json)
Hash identifier: fI/ROoqdoXhbgQM72Lw6MJV+gg6Mm1iUDWzh+kT94gI=
Subject key identifier: 14:89:A9:95:5F:8D:40:A9:90:48:C0:29:9B:55:3E:0B:56:1D:C1:CA
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019426E2675FFC32BA1E15B8E1A2B1A54CCA
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FImplV-NQKmQSMApm1U-C1Ydwco.roa
Signing time: Thu 02 Jan 2025 11:59:19 +0000
ROA not before: Thu 02 Jan 2025 11:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29262
IP address blocks: 31.40.204.0/24 maxlen: 24
31.40.205.0/24 maxlen: 24
31.40.206.0/24 maxlen: 24
31.40.207.0/24 maxlen: 24
77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
194.56.186.0/23 maxlen: 23
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:e2:67:5f:fc:32:ba:1e:15:b8:e1:a2:b1:a5:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 2 11:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1489a9955f8d40a99048c0299b553e0b561dc1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:98:87:af:42:8d:6b:b8:76:30:b9:6c:d4:
65:1c:04:f8:89:d7:f1:fd:78:f2:ab:cf:38:e3:2b:
3d:79:29:64:0c:e6:d8:43:93:27:2a:af:5b:4c:75:
e2:58:85:1c:c5:93:ff:c4:17:a8:ee:1c:93:d9:dd:
39:67:79:df:8b:d3:60:de:43:e6:37:29:13:62:b4:
1d:43:0f:ca:2e:5c:cf:e4:e8:5b:13:a5:c5:2c:57:
2f:1e:88:df:58:5f:3a:91:33:92:24:f1:a3:b1:5a:
c5:f3:23:87:5f:a2:5d:da:35:cf:4d:c3:b5:97:8f:
ec:ec:9d:ed:51:9f:68:12:0b:60:e2:a3:33:ed:96:
b0:88:bd:3d:12:7a:14:51:5e:0f:6c:ad:91:97:5c:
b3:63:35:34:db:f8:72:1f:f6:c6:91:44:d7:10:e7:
04:b5:77:79:ad:1b:4d:06:3c:a3:ab:c1:49:bd:be:
21:5e:08:20:1e:f3:72:2b:e2:fd:8d:ab:a7:fa:67:
28:19:81:42:d3:79:27:77:9b:1e:2e:78:a2:c4:5d:
ce:6b:79:02:40:7a:2d:36:48:dc:89:65:de:09:53:
03:a4:e6:f1:b3:3f:b0:63:76:55:de:c7:8a:84:27:
ff:42:0c:70:85:89:7a:98:f0:cb:4e:fa:3e:c8:95:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:A9:95:5F:8D:40:A9:90:48:C0:29:9B:55:3E:0B:56:1D:C1:CA
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/FImplV-NQKmQSMApm1U-C1Ydwco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/22
77.241.72.0/22
185.254.55.0/24
194.56.186.0/23
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:f3:cc:5b:04:61:98:8e:50:6c:aa:1e:db:f3:c8:b0:53:df:
e5:89:3a:2d:4e:a8:24:4a:6c:d1:8f:33:83:b0:99:32:2a:ac:
56:2e:61:2d:5d:f3:6a:ad:9f:7a:61:64:d8:ae:84:e6:fc:53:
54:0b:c4:99:7d:9b:bd:61:0f:14:5f:c2:08:ef:03:64:dc:f5:
fc:50:3e:ff:b0:92:e2:03:77:cb:fc:84:11:10:57:2b:14:5f:
52:d4:48:46:28:d8:33:5e:5a:a3:99:ac:2c:c5:dc:84:e2:d6:
58:78:a4:3f:0b:e9:7f:42:36:37:4d:80:e5:59:f0:d8:05:85:
c8:ca:a6:7f:60:47:c2:c7:b7:45:31:93:4a:b3:f4:3a:eb:4c:
3b:2d:45:71:f2:e6:88:27:09:a1:a7:7b:99:61:f6:e8:07:e3:
dc:eb:34:ee:c4:1c:5c:17:5f:3d:b0:e6:86:a4:1a:ad:52:be:
22:3e:16:24:a5:3c:16:a1:b1:8f:04:53:c7:a1:00:88:57:58:
42:08:7c:54:ea:ea:03:34:3b:c6:b8:b0:fe:07:ee:3a:e4:b2:
f6:5e:df:f5:b7:3b:8f:cd:5e:5b:fd:82:b7:1a:aa:19:f6:ea:
ab:c6:ef:b6:a9:37:4d:ac:c0:ba:9a:63:09:ec:67:d5:da:5d:
7b:6f:6f:12
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQm4mdf/DK6HhW44aKxpUzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjUwMTAyMTE1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDg5YTk5NTVmOGQ0MGE5OTA0OGMwMjk5YjU1M2UwYjU2MWRjMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW6Yh69CjWu4djC5bNRlHAT4idfx
/Xjyq8844ys9eSlkDObYQ5MnKq9bTHXiWIUcxZP/xBeo7hyT2d05Z3nfi9Ng3kPm
NykTYrQdQw/KLlzP5OhbE6XFLFcvHojfWF86kTOSJPGjsVrF8yOHX6Jd2jXPTcO1
l4/s7J3tUZ9oEgtg4qMz7ZawiL09EnoUUV4PbK2Rl1yzYzU02/hyH/bGkUTXEOcE
tXd5rRtNBjyjq8FJvb4hXgggHvNyK+L9jaun+mcoGYFC03knd5seLniixF3Oa3kC
QHotNkjciWXeCVMDpObxsz+wY3ZV3seKhCf/QgxwhYl6mPDLTvo+yJXFSwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBSJqZVfjUCpkEjAKZtVPgtWHcHKMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvRkltcGxWLU5RS21RU01BcG0xVS1DMVlkd2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCHyjMAwQC
TfFIAwQAuf43AwQBwji6AwQCwqlcMA0GCSqGSIb3DQEBCwUAA4IBAQC588xbBGGY
jlBsqh7b88iwU9/liTotTqgkSmzRjzODsJkyKqxWLmEtXfNqrZ96YWTYroTm/FNU
C8SZfZu9YQ8UX8II7wNk3PX8UD7/sJLiA3fL/IQREFcrFF9S1EhGKNgzXlqjmaws
xdyE4tZYeKQ/C+l/QjY3TYDlWfDYBYXIyqZ/YEfCx7dFMZNKs/Q660w7LUVx8uaI
Jwmhp3uZYfboB+Pc6zTuxBxcF189sOaGpBqtUr4iPhYkpTwWobGPBFPHoQCIV1hC
CHxU6uoDNDvGuLD+B+465LL2Xt/1tzuPzV5b/YK3GqoZ9uqrxu+2qTdNrMC6mmMJ
7GfV2l17b28S
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:41 2025 by rpki-client