Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/FQFiaH-Uhznyo9tuv-39hg1SgIc.roa
File: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (raw, json)
Hash identifier: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=
Subject key identifier: 15:01:62:68:7F:94:87:39:F2:A3:DB:6E:BF:ED:FD:86:0D:52:80:87
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260FF22DAB38182D3FC644BC6DE29A
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/FQFiaH-Uhznyo9tuv-39hg1SgIc.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 188.191.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0f:f2:2d:ab:38:18:2d:3f:c6:44:bc:6d:e2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=150162687f948739f2a3db6ebfedfd860d528087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:03:af:02:df:9e:5b:ff:3c:30:9c:4e:b0:
cb:fc:33:af:02:b4:53:48:a4:ed:9d:ac:62:cc:6d:
6c:58:a3:4c:24:cb:3a:7a:25:74:c0:b4:ae:69:b1:
db:22:ce:d9:d0:41:c9:ad:b3:b4:c8:d3:9e:c2:5d:
68:3b:6d:d0:85:03:ac:26:4c:86:e3:d8:74:f2:85:
36:8a:1c:6f:6d:2e:cf:9f:de:e2:07:2f:a6:4d:91:
61:87:c5:73:46:5e:3a:ce:ec:90:28:95:b3:9e:67:
6c:ac:b6:44:ce:83:e0:e0:73:af:51:42:9c:76:f5:
ef:58:b6:33:59:41:ee:fd:06:9a:75:bd:53:88:f5:
3a:bc:0a:a5:17:dc:9f:35:30:d5:7f:20:ec:df:c3:
7f:00:5f:e4:09:ee:0a:51:bb:82:8f:f8:7f:af:1a:
66:6f:b6:2d:d5:72:c2:85:50:9d:b5:51:5d:55:f9:
d2:81:0b:b0:78:7f:1c:29:d7:af:b0:39:ae:46:67:
ea:78:ab:ac:1d:07:5a:ea:4b:4a:4d:d4:bc:a5:13:
b9:96:5e:05:af:3e:36:99:b1:cb:94:de:e2:88:ca:
7c:12:62:3f:fd:55:1b:a7:94:8b:93:2d:83:8d:38:
79:da:42:11:ba:28:d8:e8:a2:e0:d6:e1:c0:ff:9d:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:62:68:7F:94:87:39:F2:A3:DB:6E:BF:ED:FD:86:0D:52:80:87
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/FQFiaH-Uhznyo9tuv-39hg1SgIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.107.0/24
Signature Algorithm: sha256WithRSAEncryption
06:85:5d:98:54:77:13:fe:68:39:d0:81:6a:ea:9b:73:ad:d8:
21:45:d2:fd:13:3a:ac:13:f8:31:5d:f0:d7:19:f4:0e:67:c6:
25:61:0f:f8:ec:a8:b1:66:f5:8e:ca:dd:ac:8f:de:b7:1a:48:
bd:12:2f:75:4e:8e:81:1b:32:b7:c3:18:50:14:72:9a:c4:7c:
5d:62:99:f3:60:71:0b:c0:72:4c:25:b2:6e:1b:93:3e:96:b5:
80:42:af:78:10:c6:c8:c5:cc:20:c8:10:7d:ac:93:c6:7e:c0:
7f:2e:6b:16:78:62:2b:ba:e9:08:d9:e9:56:60:09:6e:66:c8:
05:fa:93:0f:c3:03:f5:be:d1:28:49:01:b0:49:d2:3c:27:69:
64:7c:b3:90:e4:95:20:b7:88:70:0e:51:2a:61:42:09:93:39:
a5:ba:a8:c6:53:af:ee:1e:d1:bc:6a:9e:b8:c7:f0:99:e9:f6:
05:d5:05:c2:7b:bc:73:cd:de:b8:94:90:19:ac:f0:1b:6f:c5:
48:b8:f9:56:90:60:d3:41:fa:93:56:35:f9:c7:58:3b:08:cf:
dc:80:c1:e1:4c:ab:02:3a:5d:4f:34:85:93:25:f5:40:ef:31:
54:bd:94:b6:b2:de:6b:5f:42:b6:2a:fa:c7:7e:21:22:07:7f:
cd:de:03:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJg/yLas4GC0/xkS8beKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUwMTAyMTc1MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTAxNjI2ODdmOTQ4NzM5ZjJhM2RiNmViZmVkZmQ4NjBkNTI4MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0sDrwLfnlv/PDCcTrDL/DOvArRT
SKTtnaxizG1sWKNMJMs6eiV0wLSuabHbIs7Z0EHJrbO0yNOewl1oO23QhQOsJkyG
49h08oU2ihxvbS7Pn97iBy+mTZFhh8VzRl46zuyQKJWznmdsrLZEzoPg4HOvUUKc
dvXvWLYzWUHu/Qaadb1TiPU6vAqlF9yfNTDVfyDs38N/AF/kCe4KUbuCj/h/rxpm
b7Yt1XLChVCdtVFdVfnSgQuweH8cKdevsDmuRmfqeKusHQda6ktKTdS8pRO5ll4F
rz42mbHLlN7iiMp8EmI//VUbp5SLky2DjTh52kIRuijY6KLg1uHA/51qGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUBYmh/lIc58qPbbr/t/YYNUoCHMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvRlFGaWFILVVoem55bzl0dXYtMzloZzFTZ0ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9rMA0G
CSqGSIb3DQEBCwUAA4IBAQAGhV2YVHcT/mg50IFq6ptzrdghRdL9EzqsE/gxXfDX
GfQOZ8YlYQ/47KixZvWOyt2sj963Gki9Ei91To6BGzK3wxhQFHKaxHxdYpnzYHEL
wHJMJbJuG5M+lrWAQq94EMbIxcwgyBB9rJPGfsB/LmsWeGIruukI2elWYAluZsgF
+pMPwwP1vtEoSQGwSdI8J2lkfLOQ5JUgt4hwDlEqYUIJkzmluqjGU6/uHtG8ap64
x/CZ6fYF1QXCe7xzzd64lJAZrPAbb8VIuPlWkGDTQfqTVjX5x1g7CM/cgMHhTKsC
Ol1PNIWTJfVA7zFUvZS2st5rX0K2KvrHfiEiB3/N3gPX
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:08 2025 by rpki-client