Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fguLWWgS8A7P9fAjDPat5hhmc5k.roa
File: fguLWWgS8A7P9fAjDPat5hhmc5k.roa (raw, json)
Hash identifier: CINwFNGrVfDcH+NqDR0gok7aOZUxaN/l8A/ZWchQJNA=
Subject key identifier: 7E:0B:8B:59:68:12:F0:0E:CF:F5:F0:23:0C:F6:AD:E6:18:66:73:99
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01942747335CEBB51613FD17EA924A2D5DF2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fguLWWgS8A7P9fAjDPat5hhmc5k.roa
Signing time: Thu 02 Jan 2025 13:49:25 +0000
ROA not before: Thu 02 Jan 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211585
IP address blocks: 109.236.51.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:33:5c:eb:b5:16:13:fd:17:ea:92:4a:2d:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e0b8b596812f00ecff5f0230cf6ade618667399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:d6:34:4f:6b:d8:11:ae:d3:5b:47:e9:df:
94:7c:f6:2b:b6:07:79:e2:19:c7:89:66:f9:f6:1d:
24:19:14:02:44:a1:14:05:42:bd:48:42:c4:2b:20:
dd:29:20:9e:3b:3f:f1:0e:6e:ce:ec:0a:b3:b2:6c:
ba:cd:b8:03:8d:d2:99:81:cb:36:03:3d:85:31:98:
49:25:bf:af:53:ce:18:87:bc:8b:4e:64:bf:82:a9:
c6:de:95:0a:da:59:eb:89:50:76:cb:80:cb:ec:a7:
95:5e:70:ab:f7:71:c4:b9:89:ab:da:e8:86:f7:6b:
06:4b:b9:86:dc:68:c6:96:bb:91:36:97:23:2c:0b:
f6:37:63:37:9a:d5:36:6a:d3:9e:a3:cc:65:3c:56:
ca:04:9e:d7:41:5e:76:7d:a8:f1:c8:c8:a2:95:a3:
c6:58:6c:0b:27:8a:3d:9c:fc:be:82:96:fd:f7:4f:
62:bd:a0:db:59:0b:d5:3e:9f:8d:72:5f:7b:fc:cc:
23:6b:0b:47:9b:a2:d9:0e:b3:3c:4e:16:cb:70:97:
27:56:f0:e2:08:66:5f:71:6d:5e:45:0b:4e:40:f5:
ab:22:2b:39:e4:04:7b:5b:a3:ce:ba:41:63:71:6a:
35:0c:bb:88:b3:03:e9:0b:16:e7:f7:40:54:77:9c:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:8B:59:68:12:F0:0E:CF:F5:F0:23:0C:F6:AD:E6:18:66:73:99
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fguLWWgS8A7P9fAjDPat5hhmc5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.51.0/24
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:48:4f:b8:29:5a:04:32:fc:82:4e:1d:c9:db:59:7c:81:b7:
96:3a:7a:d9:bf:45:a4:da:36:c1:2b:b5:6a:70:10:d1:1c:68:
34:c0:ad:92:34:03:77:fa:13:3c:68:93:ca:03:e6:95:5c:27:
c5:04:31:aa:80:c7:a6:58:e4:2d:b0:8a:86:ca:49:4a:8b:55:
5a:fd:cd:27:cb:df:71:7d:ed:13:96:22:e9:b6:9d:05:c4:da:
f4:e3:04:1c:9c:a1:49:12:9e:82:4a:1b:c4:ff:b2:8c:30:e6:
ea:a2:d8:af:d6:28:b8:5a:aa:53:68:b6:2d:3b:85:75:7e:71:
86:75:5f:d3:b8:7f:7c:61:e8:2a:43:3d:d0:65:87:4f:f2:3d:
b6:53:92:12:ed:49:71:e4:ae:6e:75:49:e7:9a:b3:39:19:dd:
5e:bb:bf:b0:ab:6d:a2:57:e2:3b:07:dd:fc:96:c9:b4:1f:da:
e4:4b:5b:13:cc:29:04:b0:ea:b1:c4:b7:59:d6:97:cd:f7:45:
7a:33:65:fd:71:a0:9a:c5:69:6f:40:2d:70:7e:f9:70:93:ff:
12:fe:e3:f9:db:39:d1:13:8d:04:a5:5d:ae:84:b8:99:a9:1c:
5f:57:19:3e:7b:76:fb:e3:01:0a:19:d7:c8:f9:3b:ba:3e:51:
3a:a7:bc:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnRzNc67UWE/0X6pJKLV3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMTAyMTM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTBiOGI1OTY4MTJmMDBlY2ZmNWYwMjMwY2Y2YWRlNjE4NjY3Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV/WNE9r2BGu01tH6d+UfPYrtgd5
4hnHiWb59h0kGRQCRKEUBUK9SELEKyDdKSCeOz/xDm7O7Aqzsmy6zbgDjdKZgcs2
Az2FMZhJJb+vU84Yh7yLTmS/gqnG3pUK2lnriVB2y4DL7KeVXnCr93HEuYmr2uiG
92sGS7mG3GjGlruRNpcjLAv2N2M3mtU2atOeo8xlPFbKBJ7XQV52fajxyMiilaPG
WGwLJ4o9nPy+gpb9909ivaDbWQvVPp+Ncl97/MwjawtHm6LZDrM8ThbLcJcnVvDi
CGZfcW1eRQtOQPWrIis55AR7W6POukFjcWo1DLuIswPpCxbn90BUd5wxFQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH4Li1loEvAOz/XwIwz2reYYZnOZMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvZmd1TFdXZ1M4QTdQOWZBakRQYXQ1aGhtYzVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbewzAwQA
waCNAwQAwaCPMA0GCSqGSIb3DQEBCwUAA4IBAQCsSE+4KVoEMvyCTh3J21l8gbeW
OnrZv0Wk2jbBK7VqcBDRHGg0wK2SNAN3+hM8aJPKA+aVXCfFBDGqgMemWOQtsIqG
yklKi1Va/c0ny99xfe0TliLptp0FxNr04wQcnKFJEp6CShvE/7KMMObqotiv1ii4
WqpTaLYtO4V1fnGGdV/TuH98YegqQz3QZYdP8j22U5IS7Ulx5K5udUnnmrM5Gd1e
u7+wq22iV+I7B938lsm0H9rkS1sTzCkEsOqxxLdZ1pfN90V6M2X9caCaxWlvQC1w
fvlwk/8S/uP52znRE40EpV2uhLiZqRxfVxk+e3b74wEKGdfI+Tu6PlE6p7wF
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:30:32 2025 by rpki-client