Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/fmuUqwHIE4LJQQIBDK_3JI3axjw.roa
File: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (raw, json)
Hash identifier: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=
Subject key identifier: 7E:6B:94:AB:01:C8:13:82:C9:41:02:01:0C:AF:F7:24:8D:DA:C6:3C
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442D3D3D699B6C85C9BE7F667FCF67
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/fmuUqwHIE4LJQQIBDK_3JI3axjw.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210030
IP address blocks: 84.54.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:3d:3d:69:9b:6c:85:c9:be:7f:66:7f:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e6b94ab01c81382c94102010caff7248ddac63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:4a:9c:15:f2:03:f3:94:62:72:b2:b8:d8:
d7:9a:d2:87:b7:4c:5d:60:49:4d:df:ad:81:45:9a:
8a:30:82:7c:80:0c:60:03:86:bd:db:51:75:83:19:
33:14:de:37:74:3b:e0:c0:ce:1e:3a:20:86:a9:06:
a7:74:98:6c:74:fe:6a:33:be:cd:30:0c:cb:5e:b6:
a5:23:26:58:ca:90:2f:62:7f:58:91:a8:cf:f3:53:
9b:ce:76:cd:f6:e0:77:e4:95:b0:7c:d6:9b:32:ef:
c4:9e:5e:b4:e8:a8:46:bf:6c:25:80:72:3d:54:66:
30:9f:74:59:6c:f8:0e:92:71:7e:8f:8b:68:74:33:
65:4b:35:ba:3a:f9:66:91:8c:41:76:09:e5:dc:de:
09:99:cc:d4:7a:aa:c3:c2:44:8e:56:d0:84:27:57:
5e:f4:f4:16:65:d2:69:fc:e9:f2:6e:16:85:fd:93:
4e:f2:66:c0:e4:b3:b2:55:c9:77:f7:6c:46:80:39:
4a:ca:3a:88:b4:f8:4f:ba:1c:30:b8:4b:8a:a3:d4:
53:05:8a:73:af:93:22:26:3a:85:33:74:7c:23:2b:
3e:b4:1a:86:80:ba:a8:df:c5:48:dc:f0:3b:dd:b2:
44:df:5c:df:21:46:78:d9:00:74:e7:b3:87:fc:2c:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:94:AB:01:C8:13:82:C9:41:02:01:0C:AF:F7:24:8D:DA:C6:3C
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/fmuUqwHIE4LJQQIBDK_3JI3axjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:30:cd:bc:66:a6:e0:f9:d6:ac:ba:53:1d:f5:ae:98:cb:26:
5a:1c:75:fe:6c:f1:9d:06:38:55:e5:72:f3:25:32:b5:56:01:
9b:13:53:9e:26:40:ce:37:53:6b:14:ea:e5:75:90:0b:6c:e5:
bb:a4:29:6d:12:1d:e6:f0:aa:f5:89:0f:e8:7d:f5:9f:c1:d3:
12:aa:1f:af:d6:3f:fc:e2:1e:4c:93:3b:08:2a:4d:0e:84:6e:
35:e9:17:b6:37:91:a0:45:b6:23:ab:ce:b7:a3:22:3a:c7:df:
60:61:5b:03:df:fd:4a:e6:a3:ee:d4:61:ec:d0:db:d8:d1:57:
4b:3f:6b:b3:80:02:de:77:b0:e6:a8:53:0e:44:8a:f6:c3:3a:
1b:a9:6f:e3:94:d5:f7:f5:23:e6:08:c0:7a:b6:11:5b:22:4f:
5d:e1:d8:1f:2c:5d:56:76:d2:57:d4:5a:83:bf:b8:04:38:0b:
83:3c:37:6a:13:f6:74:cf:4e:d3:88:44:4c:9e:77:b4:1d:fd:
ce:c8:d5:97:4f:3b:78:ac:d4:d8:06:92:7b:b2:64:12:ae:95:
31:18:fe:94:57:0c:9f:ef:56:5e:9e:d7:fb:65:b6:b9:26:d1:
64:4f:52:f7:53:c9:80:6c:34:59:50:66:c7:b7:d8:b9:91:58:
29:25:df:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRC09PWmbbIXJvn9mf89nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTZiOTRhYjAxYzgxMzgyYzk0MTAyMDEwY2FmZjcyNDhkZGFjNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/pKnBXyA/OUYnKyuNjXmtKHt0xd
YElN362BRZqKMIJ8gAxgA4a921F1gxkzFN43dDvgwM4eOiCGqQandJhsdP5qM77N
MAzLXralIyZYypAvYn9YkajP81ObznbN9uB35JWwfNabMu/Enl606KhGv2wlgHI9
VGYwn3RZbPgOknF+j4todDNlSzW6OvlmkYxBdgnl3N4JmczUeqrDwkSOVtCEJ1de
9PQWZdJp/OnybhaF/ZNO8mbA5LOyVcl392xGgDlKyjqItPhPuhwwuEuKo9RTBYpz
r5MiJjqFM3R8Iys+tBqGgLqo38VI3PA73bJE31zfIUZ42QB057OH/CzTXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH5rlKsByBOCyUECAQyv9ySN2sY8MB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvZm11VXF3SElFNExKUVFJQkRLXzNKSTNheGp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDYgMA0G
CSqGSIb3DQEBCwUAA4IBAQArMM28Zqbg+dasulMd9a6YyyZaHHX+bPGdBjhV5XLz
JTK1VgGbE1OeJkDON1NrFOrldZALbOW7pCltEh3m8Kr1iQ/offWfwdMSqh+v1j/8
4h5MkzsIKk0OhG416Re2N5GgRbYjq863oyI6x99gYVsD3/1K5qPu1GHs0NvY0VdL
P2uzgALed7DmqFMORIr2wzobqW/jlNX39SPmCMB6thFbIk9d4dgfLF1WdtJX1FqD
v7gEOAuDPDdqE/Z0z07TiERMnne0Hf3OyNWXTzt4rNTYBpJ7smQSrpUxGP6UVwyf
71Zentf7Zba5JtFkT1L3U8mAbDRZUGbHt9i5kVgpJd8Q
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:46:01 2025 by rpki-client