Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/FVISxrqgKm1jzuVDA1W7GgFPx7A.roa
File: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (raw, json)
Hash identifier: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=
Subject key identifier: 15:52:12:C6:BA:A0:2A:6D:63:CE:E5:43:03:55:BB:1A:01:4F:C7:B0
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 01942521D85473961956E873A33A67186743
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/FVISxrqgKm1jzuVDA1W7GgFPx7A.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206502
IP address blocks: 78.108.212.0/23 maxlen: 23
78.108.212.0/24 maxlen: 24
2a0d:11c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d8:54:73:96:19:56:e8:73:a3:3a:67:18:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155212c6baa02a6d63cee5430355bb1a014fc7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:28:4e:fb:d2:6e:2d:59:7b:31:c1:df:b5:
59:8e:22:50:c5:1d:e1:eb:bc:7a:81:da:ff:fb:98:
aa:40:86:96:07:e0:1d:e5:a5:9a:53:b3:50:38:e6:
1a:7d:0b:79:68:2e:31:e3:a9:0a:a9:37:6e:99:e6:
8f:aa:af:0a:47:07:02:7b:03:0e:01:c8:97:bc:f5:
79:7d:b3:b4:df:44:4a:fe:e5:a1:9d:fd:ec:e4:e6:
ee:b4:a0:b2:1e:df:58:bc:83:1b:94:12:02:4d:fd:
83:c9:61:87:a2:b6:e6:68:93:e0:03:c8:11:f0:d7:
f7:b0:07:49:2e:f5:49:6a:1c:ea:6b:03:cc:93:d4:
fe:36:64:9d:fb:9e:07:68:9b:02:bc:15:08:9d:d8:
64:eb:4a:08:4d:0f:75:59:57:29:1e:67:ba:ee:07:
46:37:59:99:36:f3:a4:03:30:2b:8a:9c:33:46:b5:
79:a6:4c:33:85:85:b7:fd:d6:0d:7d:96:0a:d9:3e:
20:80:33:64:88:0b:ef:cd:12:f7:82:b4:31:be:07:
13:04:4f:7d:5b:de:39:29:7a:65:65:1f:28:00:ef:
39:e5:18:02:a9:03:e1:03:7e:84:cb:ac:16:3e:4c:
2c:61:b4:4f:9d:d4:81:d6:99:95:e0:80:ed:d9:2b:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:12:C6:BA:A0:2A:6D:63:CE:E5:43:03:55:BB:1A:01:4F:C7:B0
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/FVISxrqgKm1jzuVDA1W7GgFPx7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.212.0/23
IPv6:
2a0d:11c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
1c:a3:2c:70:8c:79:9d:86:2e:58:f0:8d:f3:c6:9c:a3:1e:40:
a2:8d:0f:10:bc:bd:ab:8f:77:e0:48:40:ee:45:55:a7:8f:9c:
29:15:a0:ae:c7:8b:6a:61:9c:54:25:6a:2c:03:56:c4:cd:dc:
7f:31:a6:2f:a8:43:7c:82:21:4f:31:f9:12:25:37:b0:4e:e5:
6b:e4:d2:82:d5:22:6f:4c:d7:74:59:02:e2:c7:1b:61:17:2e:
36:70:f7:4e:3d:a7:81:97:27:5c:bb:2c:c7:5a:ca:13:f5:4c:
cb:32:5b:59:2e:9e:1f:17:3b:3f:f7:0d:dc:d2:60:d8:02:f8:
ac:df:45:14:89:6c:43:e1:6a:89:51:50:6b:59:b6:86:c9:47:
56:8e:4b:d4:e6:ce:8b:ca:3c:1c:d7:dc:c4:9f:34:ef:20:b9:
2a:c9:c3:3a:e5:a4:35:f9:cc:2c:91:83:4c:be:92:e9:48:b7:
45:2e:51:4b:d0:38:59:8c:96:c0:fc:15:af:10:9f:46:9c:de:
e7:17:e5:df:73:22:99:cc:78:6b:8f:1a:c3:0d:ae:2a:08:a6:
b3:65:85:1e:e4:41:b0:dd:de:7c:23:f8:20:95:50:a4:07:a1:
e3:6b:a8:20:43:ea:03:3b:0e:67:52:33:77:67:48:2f:c0:4d:
cb:cb:99:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlIdhUc5YZVuhzozpnGGdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl
MDcwMTIwHhcNMjUwMTAyMDM0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUyMTJjNmJhYTAyYTZkNjNjZWU1NDMwMzU1YmIxYTAxNGZjN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJMoTvvSbi1ZezHB37VZjiJQxR3h
67x6gdr/+5iqQIaWB+Ad5aWaU7NQOOYafQt5aC4x46kKqTdumeaPqq8KRwcCewMO
AciXvPV5fbO030RK/uWhnf3s5ObutKCyHt9YvIMblBICTf2DyWGHorbmaJPgA8gR
8Nf3sAdJLvVJahzqawPMk9T+NmSd+54HaJsCvBUIndhk60oITQ91WVcpHme67gdG
N1mZNvOkAzAripwzRrV5pkwzhYW3/dYNfZYK2T4ggDNkiAvvzRL3grQxvgcTBE99
W945KXplZR8oAO855RgCqQPhA36Ey6wWPkwsYbRPndSB1pmV4IDt2SsQUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBVSEsa6oCptY87lQwNVuxoBT8ewMB8GA1UdIwQY
MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt
ZjY1NDFmNzc4NTg1LzEvRlZJU3hycWdLbTFqenVWREExVzdHZ0ZQeDdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1
LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBTmzUMA8E
AgACMAkDBwAqDRHAAAEwDQYJKoZIhvcNAQELBQADggEBAByjLHCMeZ2GLljwjfPG
nKMeQKKNDxC8vauPd+BIQO5FVaePnCkVoK7Hi2phnFQlaiwDVsTN3H8xpi+oQ3yC
IU8x+RIlN7BO5Wvk0oLVIm9M13RZAuLHG2EXLjZw9049p4GXJ1y7LMdayhP1TMsy
W1kunh8XOz/3DdzSYNgC+KzfRRSJbEPhaolRUGtZtobJR1aOS9TmzovKPBzX3MSf
NO8guSrJwzrlpDX5zCyRg0y+kulIt0UuUUvQOFmMlsD8Fa8Qn0ac3ucX5d9zIpnM
eGuPGsMNrioIprNlhR7kQbDd3nwj+CCVUKQHoeNrqCBD6gM7DmdSM3dnSC/ATcvL
mR8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:49 2025 by rpki-client