Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fLbQB6B27HpUALd41M7mwbhRKt0.roa
File: fLbQB6B27HpUALd41M7mwbhRKt0.roa (raw, json)
Hash identifier: ezTCMXSZaI4r9mL4Cuel+B5CuJvdzymWM1WlLbgkKyM=
Subject key identifier: 7C:B6:D0:07:A0:76:EC:7A:54:00:B7:78:D4:CE:E6:C1:B8:51:2A:DD
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01955FF60B43D10424B739E46A75A4520B35
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fLbQB6B27HpUALd41M7mwbhRKt0.roa
Signing time: Tue 04 Mar 2025 07:01:55 +0000
ROA not before: Tue 04 Mar 2025 07:01:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58065
IP address blocks: 212.32.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:f6:0b:43:d1:04:24:b7:39:e4:6a:75:a4:52:0b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 4 07:01:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb6d007a076ec7a5400b778d4cee6c1b8512add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:90:d5:9c:f3:b4:16:b5:98:db:d0:02:07:
29:84:cf:ea:38:99:84:60:00:aa:d6:7f:9e:be:11:
92:d8:68:ba:01:c4:9d:ab:97:e6:3e:65:6a:da:72:
6b:4a:05:c4:94:aa:c6:cf:63:a7:c6:e1:6c:f1:f9:
5d:92:23:e7:a9:bb:4a:37:0b:2b:0f:fa:af:f6:7b:
91:bf:75:4f:1e:43:42:b9:23:5b:fa:41:63:51:b8:
65:2c:2c:14:d0:48:b9:e0:42:3c:be:2c:89:21:b1:
07:c3:d6:ad:d2:da:b8:56:b7:68:0e:da:c0:96:07:
83:f2:36:55:cc:5f:bb:2b:e2:ce:b3:17:c5:6f:73:
e2:a4:61:6e:2a:dc:18:9a:7f:73:de:19:34:b2:7b:
d6:98:a3:4c:84:71:95:20:bd:19:73:e8:4e:7e:65:
c5:97:cc:eb:2e:cd:50:07:c2:08:71:d0:94:fd:01:
bc:bc:4b:5e:66:fe:8f:fc:b7:91:82:c7:8e:00:a6:
1f:8f:4e:a9:78:8c:b5:7d:a0:80:a1:03:c2:fc:f9:
02:5c:81:ba:18:6f:72:47:a6:79:f9:df:92:93:54:
a0:41:31:32:0a:42:a0:27:38:2e:43:bf:49:07:26:
5f:5a:b7:86:c6:42:b8:04:72:30:52:80:f7:9f:df:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B6:D0:07:A0:76:EC:7A:54:00:B7:78:D4:CE:E6:C1:B8:51:2A:DD
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fLbQB6B27HpUALd41M7mwbhRKt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.75.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ec:1f:ec:08:65:0d:5d:b8:a7:47:c3:c0:bf:6a:0b:58:4b:
ae:73:1d:f2:d1:55:b5:d7:41:4c:c9:73:47:50:9f:56:c5:44:
12:9a:bd:30:af:54:04:00:40:67:32:d4:8b:8e:60:2f:47:37:
81:23:f9:53:72:0b:84:9c:78:00:e6:15:b7:dd:5a:f3:d8:64:
ea:7b:51:67:52:6a:c7:11:64:fa:25:e2:da:b5:10:0d:30:22:
ff:80:74:da:39:ae:bf:9c:0f:1f:73:12:8d:33:ff:8c:32:0f:
91:0c:67:96:d3:ca:dd:c9:89:3a:4f:59:c7:a9:17:7b:00:c0:
69:b1:a3:dd:9f:96:35:f3:78:ad:96:28:0a:1f:09:b1:90:95:
04:e6:0a:f9:c5:c8:9f:e9:21:54:42:16:08:70:3d:dd:82:26:
a1:01:a4:21:13:f0:9f:92:70:e7:c8:37:17:d3:d6:67:48:29:
5c:34:4c:e9:42:b3:6d:c5:67:56:1b:7e:1c:71:08:9b:a6:97:
f2:f3:37:b3:1e:da:4f:7a:9b:9f:04:f9:35:84:82:ca:20:a3:
90:e2:38:7e:ea:ee:25:d7:cb:b0:77:85:79:73:ea:61:c2:8b:
d6:fc:09:c8:a9:69:ad:b6:c3:10:d9:34:8b:b5:57:23:07:90:
ba:e9:a0:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVf9gtD0QQktznkanWkUgs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwMzA0MDcwMTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2I2ZDAwN2EwNzZlYzdhNTQwMGI3NzhkNGNlZTZjMWI4NTEyYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AOQ1ZzztBa1mNvQAgcphM/qOJmE
YACq1n+evhGS2Gi6AcSdq5fmPmVq2nJrSgXElKrGz2OnxuFs8fldkiPnqbtKNwsr
D/qv9nuRv3VPHkNCuSNb+kFjUbhlLCwU0Ei54EI8viyJIbEHw9at0tq4VrdoDtrA
lgeD8jZVzF+7K+LOsxfFb3PipGFuKtwYmn9z3hk0snvWmKNMhHGVIL0Zc+hOfmXF
l8zrLs1QB8IIcdCU/QG8vEteZv6P/LeRgseOAKYfj06peIy1faCAoQPC/PkCXIG6
GG9yR6Z5+d+Sk1SgQTEyCkKgJzguQ79JByZfWreGxkK4BHIwUoD3n99BmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHy20Aegdux6VAC3eNTO5sG4USrdMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvZkxiUUI2QjI3SHBVQUxkNDFNN213YmhSS3QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CBLMA0G
CSqGSIb3DQEBCwUAA4IBAQBy7B/sCGUNXbinR8PAv2oLWEuucx3y0VW110FMyXNH
UJ9WxUQSmr0wr1QEAEBnMtSLjmAvRzeBI/lTcguEnHgA5hW33Vrz2GTqe1FnUmrH
EWT6JeLatRANMCL/gHTaOa6/nA8fcxKNM/+MMg+RDGeW08rdyYk6T1nHqRd7AMBp
saPdn5Y183itligKHwmxkJUE5gr5xcif6SFUQhYIcD3dgiahAaQhE/CfknDnyDcX
09ZnSClcNEzpQrNtxWdWG34ccQibppfy8zezHtpPepufBPk1hILKIKOQ4jh+6u4l
18uwd4V5c+phwovW/AnIqWmttsMQ2TSLtVcjB5C66aCd
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:49 2025 by rpki-client