Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fpDuL70yX5f-b-kkzZdGOhtlih0.roa
File: fpDuL70yX5f-b-kkzZdGOhtlih0.roa (raw, json)
Hash identifier: 847hO3gUYrcoc5eVb7PzGU8FUC+3gUHLN7pc/x0tSnE=
Subject key identifier: 7E:90:EE:2F:BD:32:5F:97:FE:6F:E9:24:CD:97:46:3A:1B:65:8A:1D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194A87FABBF1F9BC334A59F6219E3B062B5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fpDuL70yX5f-b-kkzZdGOhtlih0.roa
Signing time: Mon 27 Jan 2025 16:02:06 +0000
ROA not before: Mon 27 Jan 2025 16:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60612
IP address blocks: 92.253.203.0/24 maxlen: 24
93.170.7.0/24 maxlen: 24
95.46.125.0/24 maxlen: 24
95.46.164.0/23 maxlen: 24
95.47.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:7f:ab:bf:1f:9b:c3:34:a5:9f:62:19:e3:b0:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 27 16:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e90ee2fbd325f97fe6fe924cd97463a1b658a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:52:5a:96:93:2f:d1:62:f2:02:5f:29:a6:
b9:07:ad:23:52:58:4d:a7:81:3e:b9:97:6f:51:12:
1e:7e:21:24:36:cf:ac:b6:71:63:f7:30:8a:f0:1c:
fc:79:78:9b:3f:3f:24:67:79:4f:26:1d:25:22:09:
9d:e2:b5:3c:c3:9f:9c:33:63:82:af:ed:81:4d:a9:
10:bf:b1:59:0d:0e:4b:81:ac:f4:ec:d8:b1:11:8e:
3f:55:0a:be:f0:45:9f:1d:84:66:5e:64:19:48:1a:
00:6b:f1:cd:fe:1e:da:a8:71:e6:8a:76:99:b6:79:
ce:c8:86:42:b5:ba:7b:8d:66:22:d2:90:cf:ce:97:
d3:f8:ce:5c:92:b0:04:64:e8:8e:0a:59:f4:e8:4d:
ef:de:fb:9b:61:8d:51:02:eb:19:41:bf:43:52:69:
46:d9:c1:51:ed:47:24:f0:2a:e8:b9:c7:e8:9b:9a:
09:33:0a:0a:f0:64:f2:4d:23:e2:f8:63:21:60:66:
bd:fd:09:6e:ca:d0:4a:12:5d:09:cb:ce:c0:53:39:
2e:7c:e9:41:e1:0e:13:36:86:a2:4d:fe:0c:83:cf:
0f:fd:c5:82:53:28:3a:8a:09:fd:02:43:17:fa:0c:
eb:fe:a4:d5:b8:dc:88:08:8d:96:77:ef:37:7a:34:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:EE:2F:BD:32:5F:97:FE:6F:E9:24:CD:97:46:3A:1B:65:8A:1D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fpDuL70yX5f-b-kkzZdGOhtlih0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.203.0/24
93.170.7.0/24
95.46.125.0/24
95.46.164.0/23
95.47.175.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a6:74:2a:3f:26:14:0e:0e:ac:17:f3:8b:8b:ab:2d:0a:57:
d0:de:1f:15:ab:89:57:0f:33:9d:9a:78:2e:47:10:6d:34:bd:
32:36:f4:ae:4e:2f:19:b6:94:1d:8b:98:5d:7d:95:2a:4d:bf:
ec:1e:a6:ab:22:6a:ee:f3:58:8e:e1:6f:ad:b5:a3:63:46:c3:
b2:3c:06:ac:1a:a5:9a:a0:0a:00:03:f7:9d:c4:c4:62:bf:99:
c5:0c:d8:a0:6d:ed:ae:6f:97:d5:cf:f4:81:f3:09:26:38:b3:
9c:78:b2:d4:86:ce:00:55:88:7d:2d:28:c9:bc:6d:0b:1e:6a:
da:f6:f8:75:0a:a9:03:94:68:1e:bb:ea:27:17:62:6f:fb:d8:
fe:e5:ee:75:66:1b:01:f7:b3:95:63:ae:3d:d9:3d:68:4e:46:
f9:f4:14:c5:6f:df:40:fd:2a:ef:4e:16:9f:d0:de:14:5c:5c:
57:3a:eb:74:14:90:91:be:d3:0a:1d:c9:10:af:64:fc:d2:87:
99:a0:18:51:37:a9:bd:7b:29:3e:7b:1d:53:ec:2e:ce:22:83:
76:18:97:ea:80:4c:bb:a3:e8:75:4d:d1:56:98:36:f0:c7:37:
b5:0e:f3:c8:10:77:c7:01:a2:fa:21:a9:df:64:7d:ba:4e:a2:
88:c1:83:e6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZSof6u/H5vDNKWfYhnjsGK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTI3MTYwMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTkwZWUyZmJkMzI1Zjk3ZmU2ZmU5MjRjZDk3NDYzYTFiNjU4YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxORSWpaTL9Fi8gJfKaa5B60jUlhN
p4E+uZdvURIefiEkNs+stnFj9zCK8Bz8eXibPz8kZ3lPJh0lIgmd4rU8w5+cM2OC
r+2BTakQv7FZDQ5Lgaz07NixEY4/VQq+8EWfHYRmXmQZSBoAa/HN/h7aqHHminaZ
tnnOyIZCtbp7jWYi0pDPzpfT+M5ckrAEZOiOCln06E3v3vubYY1RAusZQb9DUmlG
2cFR7Uck8Croucfom5oJMwoK8GTyTSPi+GMhYGa9/QluytBKEl0Jy87AUzkufOlB
4Q4TNoaiTf4Mg88P/cWCUyg6ign9AkMX+gzr/qTVuNyICI2Wd+83ejTmEwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH6Q7i+9Ml+X/m/pJM2XRjobZYodMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZnBEdUw3MHlYNWYtYi1ra3paZEdPaHRsaWgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXP3LAwQA
XaoHAwQAXy59AwQBXy6kAwQAXy+vMA0GCSqGSIb3DQEBCwUAA4IBAQB5pnQqPyYU
Dg6sF/OLi6stClfQ3h8Vq4lXDzOdmnguRxBtNL0yNvSuTi8ZtpQdi5hdfZUqTb/s
HqarImru81iO4W+ttaNjRsOyPAasGqWaoAoAA/edxMRiv5nFDNigbe2ub5fVz/SB
8wkmOLOceLLUhs4AVYh9LSjJvG0LHmra9vh1CqkDlGgeu+onF2Jv+9j+5e51ZhsB
97OVY6492T1oTkb59BTFb99A/SrvThaf0N4UXFxXOut0FJCRvtMKHckQr2T80oeZ
oBhRN6m9eyk+ex1T7C7OIoN2GJfqgEy7o+h1TdFWmDbwxze1DvPIEHfHAaL6Ianf
ZH26TqKIwYPm
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:27 2025 by rpki-client