Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa
File: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (raw, json)
Hash identifier: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=
Subject key identifier: C3:F0:FC:79:B9:DB:DD:E4:42:E8:25:93:48:8E:10:5E:0E:F2:21:C0
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 0194266BF3ADC1116C754FF767907BEC2CCD
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47205
IP address blocks: 31.193.192.0/21 maxlen: 24
92.61.32.0/20 maxlen: 32
185.3.228.0/22 maxlen: 24
195.12.186.0/24 maxlen: 24
2a02:118::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:ad:c1:11:6c:75:4f:f7:67:90:7b:ec:2c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3f0fc79b9dbdde442e82593488e105e0ef221c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:c7:a4:28:47:bf:40:81:91:97:d7:47:e4:
d9:36:cd:d2:ca:17:cc:62:c5:2a:28:e3:43:59:7c:
70:02:e6:9b:a9:03:de:cb:89:e5:98:7c:d2:ed:25:
49:a6:54:cc:fc:e7:bd:d1:2e:63:76:ce:83:13:db:
1e:a9:f6:41:a2:0d:ee:fc:f5:89:de:f9:55:46:57:
1a:6d:d5:43:77:21:8d:a3:bb:9c:37:00:a6:fb:c0:
df:f2:9c:3a:77:8c:0e:fc:9c:39:74:d8:81:91:93:
38:50:25:21:63:86:5d:da:83:71:9c:2a:54:2f:c2:
57:24:74:2f:b8:a4:4a:de:70:61:f7:34:be:2d:78:
be:bf:75:ea:c2:14:54:2a:43:5b:7b:cb:d1:37:c7:
09:f8:65:05:78:15:1a:b0:a1:c9:94:b6:c8:f9:12:
01:5a:d9:1c:ce:8b:d9:02:dc:78:06:b9:aa:a4:da:
db:bb:98:5d:46:7c:4c:39:d5:1f:84:70:62:0b:20:
ec:52:13:51:33:b9:11:df:65:16:7f:d9:38:01:dc:
7b:b0:9d:5e:0b:2d:91:32:69:4c:9a:c0:fc:f6:53:
8f:19:fb:d0:09:da:39:e7:02:3d:27:36:f7:68:54:
ec:62:e6:58:7c:05:d5:5a:b6:d2:8d:c8:27:1b:59:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:FC:79:B9:DB:DD:E4:42:E8:25:93:48:8E:10:5E:0E:F2:21:C0
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.192.0/21
92.61.32.0/20
185.3.228.0/22
195.12.186.0/24
IPv6:
2a02:118::/32
Signature Algorithm: sha256WithRSAEncryption
0d:46:17:aa:7f:2f:a7:3e:e2:0a:21:a9:03:8e:61:c3:9e:a0:
e3:de:cb:fb:45:d3:d8:a0:e9:fb:8b:64:5a:02:12:e5:df:16:
bc:08:28:d1:32:0b:11:00:18:57:f7:16:ed:fb:98:30:2d:18:
9c:f2:4a:3d:5f:aa:db:04:a6:ce:9b:a6:9a:65:6e:b9:02:a6:
d8:d1:9e:45:b5:04:53:63:29:38:b5:c2:4b:5a:a9:d3:4f:48:
73:ee:a0:4b:12:a6:5b:ff:7c:1c:18:1b:6c:af:4f:8e:51:9b:
68:cc:d9:db:82:3b:df:a4:97:5e:f8:5f:5e:a0:9a:d3:f9:19:
bb:ff:b9:81:f9:e0:75:31:fd:fd:f3:df:44:e6:6d:fb:a7:b4:
9d:57:6e:25:2a:54:e7:fd:fc:6a:19:5c:c0:47:09:9f:bb:c9:
d0:8b:ce:9e:57:17:2f:ac:f4:ae:f2:24:f0:ae:d4:4d:a1:9e:
ea:0a:5c:e5:ca:96:d5:3a:9c:e7:9a:e7:26:d2:72:29:5f:61:
80:01:aa:d5:dd:94:a6:98:b9:c8:54:05:bf:92:92:ba:e4:c1:
56:fc:c0:1d:d8:48:f3:16:97:db:d7:dc:14:94:9c:38:8d:90:
fc:2e:0c:4e:19:2b:a7:29:08:2b:d4:fa:14:e7:82:6a:84:40:
08:93:a7:7d
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQma/OtwRFsdU/3Z5B77CzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjUwMTAyMDk0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2YwZmM3OWI5ZGJkZGU0NDJlODI1OTM0ODhlMTA1ZTBlZjIyMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzzHpChHv0CBkZfXR+TZNs3SyhfM
YsUqKONDWXxwAuabqQPey4nlmHzS7SVJplTM/Oe90S5jds6DE9seqfZBog3u/PWJ
3vlVRlcabdVDdyGNo7ucNwCm+8Df8pw6d4wO/Jw5dNiBkZM4UCUhY4Zd2oNxnCpU
L8JXJHQvuKRK3nBh9zS+LXi+v3XqwhRUKkNbe8vRN8cJ+GUFeBUasKHJlLbI+RIB
WtkczovZAtx4BrmqpNrbu5hdRnxMOdUfhHBiCyDsUhNRM7kR32UWf9k4Adx7sJ1e
Cy2RMmlMmsD89lOPGfvQCdo55wI9Jzb3aFTsYuZYfAXVWrbSjcgnG1lR+QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFMPw/Hm5293kQuglk0iOEF4O8iHAMB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xL3dfRDhlYm5iM2VSQzZDV1RTSTRRWGc3eUljQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh
YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMfwcAD
BARcPSADBAK5A+QDBADDDLowDQQCAAIwBwMFACoCARgwDQYJKoZIhvcNAQELBQAD
ggEBAA1GF6p/L6c+4gohqQOOYcOeoOPey/tF09ig6fuLZFoCEuXfFrwIKNEyCxEA
GFf3Fu37mDAtGJzySj1fqtsEps6bppplbrkCptjRnkW1BFNjKTi1wktaqdNPSHPu
oEsSplv/fBwYG2yvT45Rm2jM2duCO9+kl174X16gmtP5Gbv/uYH54HUx/f3z30Tm
bfuntJ1XbiUqVOf9/GoZXMBHCZ+7ydCLzp5XFy+s9K7yJPCu1E2hnuoKXOXKltU6
nOea5ybScilfYYABqtXdlKaYuchUBb+SkrrkwVb8wB3YSPMWl9vX3BSUnDiNkPwu
DE4ZK6cpCCvU+hTngmqEQAiTp30=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:21 2025 by rpki-client