Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Fk14EPvXEjcXbKmok1QVWfWrspQ.roa
File: Fk14EPvXEjcXbKmok1QVWfWrspQ.roa (raw, json)
Hash identifier: BX38dqCEK5NHzFfnmF0STcdnb4clPQY5UgA4IqgZwDM=
Subject key identifier: 16:4D:78:10:FB:D7:12:37:17:6C:A9:A8:93:54:15:59:F5:AB:B2:94
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194DFA6EE0835C6FD6972F7526C42C74EFE
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Fk14EPvXEjcXbKmok1QVWfWrspQ.roa
Signing time: Fri 07 Feb 2025 09:04:06 +0000
ROA not before: Fri 07 Feb 2025 09:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 82.206.96.0/20 maxlen: 24
82.206.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:a6:ee:08:35:c6:fd:69:72:f7:52:6c:42:c7:4e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 7 09:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164d7810fbd71237176ca9a893541559f5abb294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:2b:09:34:a0:08:df:bc:df:14:ee:86:54:
73:cb:f9:88:2f:22:79:cd:ae:f1:01:39:c6:72:c5:
25:0b:81:c8:a5:b8:1d:42:a7:bf:a3:b2:44:27:fa:
45:87:63:48:8f:ed:a4:29:d0:01:2d:1e:88:c4:60:
1e:4b:8b:17:12:38:b4:d9:6f:2d:b7:4a:80:5d:f0:
ee:c0:66:9b:61:8b:45:da:77:ac:48:69:32:e5:3e:
0d:49:ef:33:91:3b:1e:77:a1:5e:dc:ec:3e:b8:bf:
62:a3:0c:0e:92:a1:57:a6:26:2d:77:14:54:5c:06:
12:03:49:3a:ee:61:76:7c:77:63:21:19:e9:37:7e:
dc:01:7f:84:11:4d:04:41:ae:cf:c9:1b:79:cb:c6:
fd:28:d6:8c:f0:ab:ef:78:8d:a4:57:35:0f:a5:5c:
d6:6f:8a:b5:6c:b0:f9:0c:99:7e:c2:83:be:b5:ae:
5f:ff:ec:99:d5:dc:b0:ae:d2:5c:89:1e:6c:63:94:
19:ee:7c:20:71:64:78:ce:d0:41:86:85:a0:13:9b:
2e:29:6c:b9:11:81:69:02:9c:12:67:a7:54:09:dd:
f1:be:a0:06:7f:81:27:94:e6:0e:fd:f4:c5:15:e9:
26:16:64:12:df:a7:8c:24:63:76:80:ab:64:fa:0d:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:78:10:FB:D7:12:37:17:6C:A9:A8:93:54:15:59:F5:AB:B2:94
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Fk14EPvXEjcXbKmok1QVWfWrspQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:f9:13:03:dc:90:eb:4b:5e:23:5f:38:c2:f9:c3:86:43:cd:
7b:c5:7a:b8:75:7f:d7:ea:49:41:b4:64:28:6e:cc:22:0a:13:
5d:04:4b:03:b9:7a:66:18:8b:d1:28:79:6b:41:20:14:86:f2:
eb:7e:4b:ac:35:c4:3a:d3:40:c9:aa:62:ee:5b:32:09:e2:5b:
6e:da:77:c6:7e:4b:65:cd:24:16:da:eb:2b:ef:1f:c7:e0:8a:
1a:76:88:61:14:3c:fd:6a:4f:11:df:72:1a:65:08:c0:c6:f8:
62:9e:40:c2:31:35:92:b1:74:3c:a3:77:e6:47:77:9a:27:d4:
34:4d:8e:24:ee:8c:d7:b9:af:ff:21:c8:6e:44:5e:c5:a6:36:
5a:33:ed:19:20:95:8e:b4:49:b1:8e:7f:5c:46:8b:8e:e4:61:
6f:1c:34:60:dd:fc:3c:8c:c3:99:3f:16:2d:bd:2d:b8:a6:d0:
50:fe:51:35:9f:25:a6:7d:53:e6:5f:23:2d:c8:33:ff:a6:61:
8e:cf:9c:ae:8b:f5:ba:e0:53:7a:3e:9d:8b:5b:8e:c9:b7:e4:
35:f3:5b:f9:2f:99:61:49:ac:4d:8d:1e:a3:fb:dc:9b:ce:12:
04:2a:9f:8e:19:11:83:bb:14:c4:1d:dd:d3:63:1e:a8:66:65:
71:76:7f:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTfpu4INcb9aXL3UmxCx07+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwMjA3MDkwNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRkNzgxMGZiZDcxMjM3MTc2Y2E5YTg5MzU0MTU1OWY1YWJiMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9wrCTSgCN+83xTuhlRzy/mILyJ5
za7xATnGcsUlC4HIpbgdQqe/o7JEJ/pFh2NIj+2kKdABLR6IxGAeS4sXEji02W8t
t0qAXfDuwGabYYtF2nesSGky5T4NSe8zkTsed6Fe3Ow+uL9iowwOkqFXpiYtdxRU
XAYSA0k67mF2fHdjIRnpN37cAX+EEU0EQa7PyRt5y8b9KNaM8KvveI2kVzUPpVzW
b4q1bLD5DJl+woO+ta5f/+yZ1dywrtJciR5sY5QZ7nwgcWR4ztBBhoWgE5suKWy5
EYFpApwSZ6dUCd3xvqAGf4EnlOYO/fTFFekmFmQS36eMJGN2gKtk+g0GXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZNeBD71xI3F2ypqJNUFVn1q7KUMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvRmsxNEVQdlhFamNYYkttb2sxUVZXZldyc3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUs5gMA0G
CSqGSIb3DQEBCwUAA4IBAQBa+RMD3JDrS14jXzjC+cOGQ817xXq4dX/X6klBtGQo
bswiChNdBEsDuXpmGIvRKHlrQSAUhvLrfkusNcQ600DJqmLuWzIJ4ltu2nfGfktl
zSQW2usr7x/H4IoadohhFDz9ak8R33IaZQjAxvhinkDCMTWSsXQ8o3fmR3eaJ9Q0
TY4k7ozXua//IchuRF7FpjZaM+0ZIJWOtEmxjn9cRouO5GFvHDRg3fw8jMOZPxYt
vS24ptBQ/lE1nyWmfVPmXyMtyDP/pmGOz5yui/W64FN6Pp2LW47Jt+Q181v5L5lh
SaxNjR6j+9ybzhIEKp+OGRGDuxTEHd3TYx6oZmVxdn8n
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:09 2025 by rpki-client