Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/FXZYlEKdwXljiRFnkwNPD8GNSRk.roa
File: FXZYlEKdwXljiRFnkwNPD8GNSRk.roa (raw, json)
Hash identifier: GCisNX3ADeCzM4a9yNvxqV1v8hoATGxA3gugHogZ0B8=
Subject key identifier: 15:76:58:94:42:9D:C1:79:63:89:11:67:93:03:4F:0F:C1:8D:49:19
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 049132CC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/FXZYlEKdwXljiRFnkwNPD8GNSRk.roa
Signing time: Mon 16 May 2022 04:57:41 +0000
ROA not before: Mon 16 May 2022 04:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 194.113.227.0/24 maxlen: 24
45.152.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76624588 (0x49132cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 16 04:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15765894429dc1796389116793034f0fc18d4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:6f:72:fb:d9:51:66:0a:77:f4:d2:81:24:
66:1d:36:e5:c0:6c:b7:e9:7d:f5:7a:bf:4a:6d:67:
b0:3e:53:c7:ca:3d:9e:8b:05:f6:bf:24:2e:3e:12:
34:c1:07:25:58:c2:ff:68:61:b0:b1:23:c9:29:f7:
93:e6:d9:5b:95:fa:7a:1a:07:2c:dc:ce:8d:c7:b1:
ea:01:85:8d:66:f0:80:83:43:f6:24:2a:98:6e:45:
26:81:8b:78:62:ce:3e:82:f8:e0:a6:d5:cb:6b:bf:
59:6e:02:fc:6c:7f:7e:24:86:dd:d2:c1:a6:30:75:
bc:3c:ab:3c:bb:b7:13:7a:ed:0b:b7:45:87:d2:06:
31:62:5b:d4:79:7d:1e:1f:dc:16:8f:06:fd:d0:dc:
77:dd:c3:bd:95:87:c3:2d:4b:0f:72:92:7b:26:c8:
56:07:7e:75:29:e0:16:1f:4f:2c:fc:1a:ea:c6:c2:
7d:9c:e9:3a:6e:57:b7:67:dd:86:81:3c:92:b4:0c:
2d:ca:41:97:76:ce:03:53:cd:4b:05:2c:11:ec:0b:
07:c1:97:0d:49:88:69:72:23:6e:ff:e4:b8:58:8e:
86:c5:af:5c:5c:75:e7:17:2f:fe:0c:97:b8:9a:6e:
cf:8d:4a:91:eb:6a:b8:11:c5:0b:c2:c3:7a:15:21:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:58:94:42:9D:C1:79:63:89:11:67:93:03:4F:0F:C1:8D:49:19
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/FXZYlEKdwXljiRFnkwNPD8GNSRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/23
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:df:44:a8:fb:02:e1:db:93:1d:61:15:51:d1:13:90:c6:be:
10:24:e6:7d:03:16:ea:c8:bc:68:05:4c:bd:4b:e2:a3:20:93:
28:4a:4a:78:54:12:37:88:d4:fe:c5:73:cb:ff:ef:39:c4:77:
a4:a1:e4:26:32:be:8b:63:d5:b4:10:59:bb:89:44:51:ba:15:
8b:8f:34:b2:e6:46:10:dd:1b:03:2c:2f:31:56:e0:80:14:98:
b8:b5:fc:75:0a:1f:c4:2b:56:ec:b4:4e:b2:5f:95:72:3f:29:
95:81:1a:48:31:ea:0e:2a:d5:6e:ea:b9:97:18:20:ed:0b:fc:
70:79:b3:04:bf:a6:23:82:ec:d6:e9:8d:fd:10:88:87:35:4a:
dd:4f:48:ad:76:b7:c9:c7:a1:28:a8:5f:3a:51:31:95:d1:aa:
f3:22:49:b0:93:fc:19:97:73:75:0f:32:69:00:85:ae:87:ae:
50:61:f7:d0:f3:c7:43:dc:1f:86:0f:9e:40:74:26:af:2e:a4:
c2:03:bb:ba:81:20:4d:ea:51:e2:cd:a3:df:8a:12:e7:24:c0:
63:60:79:df:e9:95:43:88:68:75:f2:6f:23:26:7a:48:c6:3b:
15:ab:a8:99:dd:0e:84:fc:97:83:24:97:9b:73:e9:9c:92:cc:
ed:92:19:0e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBJEyzDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDUx
NjA0NTc0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTU3NjU4OTQ0Mjlk
YzE3OTYzODkxMTY3OTMwMzRmMGZjMThkNDkxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbeb3L72VFmCnf00oEkZh025cBst+l99Xq/Sm1nsD5Tx8o9
nosF9r8kLj4SNMEHJVjC/2hhsLEjySn3k+bZW5X6ehoHLNzOjcex6gGFjWbwgIND
9iQqmG5FJoGLeGLOPoL44KbVy2u/WW4C/Gx/fiSG3dLBpjB1vDyrPLu3E3rtC7dF
h9IGMWJb1Hl9Hh/cFo8G/dDcd93DvZWHwy1LD3KSeybIVgd+dSngFh9PLPwa6sbC
fZzpOm5Xt2fdhoE8krQMLcpBl3bOA1PNSwUsEewLB8GXDUmIaXIjbv/kuFiOhsWv
XFx15xcv/gyXuJpuz41KketquBHFC8LDehUh1D0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQVdliUQp3BeWOJEWeTA08PwY1JGTAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L0ZYWllsRUtkd1hsamlSRm5rd05QRDhHTlNSay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS2Y8gMEAMJx4zANBgkqhkiG9w0B
AQsFAAOCAQEAe99EqPsC4duTHWEVUdETkMa+ECTmfQMW6si8aAVMvUvioyCTKEpK
eFQSN4jU/sVzy//vOcR3pKHkJjK+i2PVtBBZu4lEUboVi480suZGEN0bAywvMVbg
gBSYuLX8dQofxCtW7LROsl+Vcj8plYEaSDHqDirVbuq5lxgg7Qv8cHmzBL+mI4Ls
1umN/RCIhzVK3U9IrXa3ycehKKhfOlExldGq8yJJsJP8GZdzdQ8yaQCFroeuUGH3
0PPHQ9wfhg+eQHQmry6kwgO7uoEgTepR4s2j34oS5yTAY2B53+mVQ4hodfJvIyZ6
SMY7Fauomd0OhPyXgySXm3PpnJLM7ZIZDg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:26 2025 by rpki-client