Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa
File: 1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa (raw, json)
Hash identifier: /WNjMJRqRgl6RkLzQaARWf6EWnRkvSshHnIP+EhMvb8=
Subject key identifier: FA:41:F8:97:86:50:B3:55:07:E0:E5:35:2E:C4:93:A4:48:6A:C1:4F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAE2507DF442AC8C06D0A27F254AA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207795
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ae:25:07:df:44:2a:c8:c0:6d:0a:27:f2:54:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa41f8978650b35507e0e5352ec493a4486ac14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:67:3a:1a:ba:a9:3d:27:88:b9:ba:0d:3a:
d8:58:c6:a3:e7:70:8a:d7:3c:55:39:2c:c8:93:46:
d2:19:be:fb:55:99:b7:29:43:98:bf:a0:32:ec:b0:
6b:3f:35:5f:1f:f8:26:68:17:2c:16:dc:29:02:99:
14:82:21:53:88:f0:61:9c:45:60:a6:22:b4:5e:86:
90:02:42:9d:2d:14:8e:75:71:7f:cb:f8:2c:3b:e4:
36:29:a4:69:4f:18:0f:85:f5:a3:de:b5:7c:64:c6:
cf:96:d8:d8:b6:bc:8e:d7:9c:70:2f:ed:97:7e:b7:
07:cc:db:84:e7:7b:bc:c9:aa:22:0f:f7:16:02:ae:
d8:0f:c8:c4:3b:b3:91:db:7e:db:4f:e2:04:b2:8b:
16:2d:c7:40:de:8b:c5:fb:8e:99:ba:30:06:59:86:
7c:b1:55:69:c3:50:82:9d:5e:43:b4:f1:bd:59:0a:
c3:f1:70:8e:25:95:95:97:06:cd:80:84:5b:8b:13:
a8:ec:17:05:c0:1a:a9:34:f0:c0:ae:4a:11:f7:1b:
49:2f:28:38:87:94:a1:1d:fe:9e:72:cf:a5:ec:4b:
24:15:30:3f:85:5a:ba:63:66:89:a4:50:8a:42:aa:
98:1f:aa:bd:67:88:25:99:2a:93:e0:9f:1c:bf:09:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:41:F8:97:86:50:B3:55:07:E0:E5:35:2E:C4:93:A4:48:6A:C1:4F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-kH4l4ZQs1UH4OU1LsSTpEhqwU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
11:e5:de:47:b3:2e:e3:40:c8:06:b1:c5:e4:bb:dc:c0:b7:04:
cc:af:3e:4c:aa:f8:66:8d:ec:d2:d1:0c:a0:07:b7:39:c8:bb:
e8:44:4c:85:1d:51:e2:60:ab:ad:57:45:5a:18:b4:dd:0f:65:
d7:78:0b:77:6e:66:2b:71:c4:33:45:ad:41:34:0f:72:5e:c5:
ef:e7:6c:6f:f6:64:d9:2b:fa:7e:7f:b1:7d:7d:99:41:84:de:
b5:7e:fc:1b:e0:74:b7:19:92:95:4e:0b:17:62:35:18:91:be:
c2:9b:08:11:de:5d:64:94:c6:88:c5:5c:65:b5:0a:9e:21:96:
8e:5d:2d:9a:ed:b3:28:a0:ea:07:75:d8:f2:a4:99:55:71:83:
75:96:bf:9e:7b:0a:78:77:60:7f:80:a4:31:be:69:dc:fa:6d:
0d:93:d9:8c:eb:bc:83:03:d1:c5:8d:de:b8:7a:03:03:80:98:
28:6d:35:e8:04:4f:5e:03:50:12:51:1d:1c:19:79:05:71:b0:
64:eb:8f:73:cc:1e:1b:8e:78:0b:9d:ee:32:f7:9d:e5:d1:c0:
97:3d:e7:28:15:a6:6f:81:43:8a:80:84:23:4a:69:3d:1b:59:
79:3a:3a:1c:9c:56:4f:14:43:d7:87:82:63:91:6f:8d:f6:02:
60:80:6c:08
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQma64lB99EKsjAbQon8lSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTQxZjg5Nzg2NTBiMzU1MDdlMGU1MzUyZWM0OTNhNDQ4NmFjMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ZnOhq6qT0niLm6DTrYWMaj53CK
1zxVOSzIk0bSGb77VZm3KUOYv6Ay7LBrPzVfH/gmaBcsFtwpApkUgiFTiPBhnEVg
piK0XoaQAkKdLRSOdXF/y/gsO+Q2KaRpTxgPhfWj3rV8ZMbPltjYtryO15xwL+2X
frcHzNuE53u8yaoiD/cWAq7YD8jEO7OR237bT+IEsosWLcdA3ovF+46ZujAGWYZ8
sVVpw1CCnV5DtPG9WQrD8XCOJZWVlwbNgIRbixOo7BcFwBqpNPDArkoR9xtJLyg4
h5ShHf6ecs+l7EskFTA/hVq6Y2aJpFCKQqqYH6q9Z4glmSqT4J8cvwlYmQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFPpB+JeGULNVB+DlNS7Ek6RIasFPMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvMS1rSDRsNFpRczFVSDRPVTFMc1NUcEVocXdVOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzgvM2YyNDliLWU4MzYtNDFiNC05YTNhLTk5NDgwNmYwODFm
MC8xLzRzSzROUHZKR3ZEc2F4MDBfV1FGVFNKcG9mMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQyMDAwLgQCAAEwKAMEAMIcnAME
AMIcnjAMAwQCwmgEAwQAwmgGMAwDBALURYQDBADURYYwDQYJKoZIhvcNAQELBQAD
ggEBABHl3kezLuNAyAaxxeS73MC3BMyvPkyq+GaN7NLRDKAHtznIu+hETIUdUeJg
q61XRVoYtN0PZdd4C3duZitxxDNFrUE0D3Jexe/nbG/2ZNkr+n5/sX19mUGE3rV+
/BvgdLcZkpVOCxdiNRiRvsKbCBHeXWSUxojFXGW1Cp4hlo5dLZrtsyig6gd12PKk
mVVxg3WWv557Cnh3YH+ApDG+adz6bQ2T2YzrvIMD0cWN3rh6AwOAmChtNegET14D
UBJRHRwZeQVxsGTrj3PMHhuOeAud7jL3neXRwJc95ygVpm+BQ4qAhCNKaT0bWXk6
OhycVk8UQ9eHgmORb432AmCAbAg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:15:27 2025 by rpki-client