Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/1-f4XRBiwdcZPo5WUrZP9GuXSHX4.roa
File: 1-f4XRBiwdcZPo5WUrZP9GuXSHX4.roa (raw, json)
Hash identifier: 3uNIw+H8yZgAOrKvUXGkx78oOiLqoPPw8MlX4LjCjzw=
Subject key identifier: F9:FE:17:44:18:B0:75:C6:4F:A3:95:94:AD:93:FD:1A:E5:D2:1D:7E
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018993451B6AC803245B4D0D94776F7FCA94
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/1-f4XRBiwdcZPo5WUrZP9GuXSHX4.roa
Signing time: Wed 26 Jul 2023 17:35:26 +0000
ROA not before: Wed 26 Jul 2023 17:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 109.94.144.0/20 maxlen: 24
94.24.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:45:1b:6a:c8:03:24:5b:4d:0d:94:77:6f:7f:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jul 26 17:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9fe174418b075c64fa39594ad93fd1ae5d21d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:dc:1d:3d:c2:6a:a9:26:8c:f8:33:ab:4b:
08:17:1f:e6:ec:f8:53:f7:2e:a6:a3:93:6d:36:92:
71:09:b2:e5:c1:c2:7a:76:2a:2e:84:7d:6b:eb:dc:
f3:e1:cc:9c:34:c7:d6:21:0a:a6:e5:45:23:0d:d7:
6b:74:ce:39:5b:b9:f7:3a:df:e7:68:c7:35:c8:2b:
59:89:33:6f:20:00:a2:f6:2b:cc:27:52:5e:81:30:
72:a7:04:00:38:b6:8d:d2:90:77:2d:60:19:09:a5:
89:ff:dd:d2:b9:8e:8b:5e:78:9c:e3:61:93:3c:b2:
46:fb:73:bb:2b:8d:34:bc:6e:07:95:6b:14:98:d1:
70:11:5e:ac:a4:0c:9f:1a:87:3a:d9:e9:9c:ee:88:
b2:16:17:ba:8c:fa:03:77:a6:da:6d:54:31:6c:bd:
5f:d0:de:03:41:e6:34:4d:bb:d0:3c:ed:df:ce:dd:
b3:b9:1b:35:f6:e2:1a:a1:17:f5:a3:46:d0:73:f7:
5e:a4:27:e7:46:20:21:82:5d:d4:41:01:ce:35:d1:
b9:cb:c2:31:4c:14:31:9c:a6:4b:0a:e5:1e:a1:c6:
c8:4b:54:df:8e:66:ec:86:32:94:13:6a:08:39:35:
35:a6:d6:88:63:97:f3:48:fb:7a:b7:f9:40:d4:f2:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:17:44:18:B0:75:C6:4F:A3:95:94:AD:93:FD:1A:E5:D2:1D:7E
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/1-f4XRBiwdcZPo5WUrZP9GuXSHX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.64.0/21
109.94.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:fe:b7:c7:99:b9:dd:ea:b1:69:b5:56:f4:20:d7:89:a3:37:
cb:bb:b0:7b:82:88:1a:d6:49:a1:c0:eb:3d:be:c7:71:23:91:
20:0e:32:fe:4e:dc:54:88:73:84:63:97:47:66:bb:39:39:e2:
ed:05:3d:ad:e2:90:cf:78:9b:12:fa:13:d8:95:12:7d:ce:c1:
fa:f5:15:98:ef:bf:5a:e6:84:04:f1:04:65:a6:8a:ee:2f:bd:
49:da:f9:dd:74:3e:e4:f1:0c:cc:ad:e9:41:b2:87:c1:8e:b6:
31:5f:21:47:ac:db:ec:ac:3f:8d:bd:63:9d:aa:07:c8:a4:1b:
e0:00:74:00:26:be:07:f2:85:95:a4:c0:0b:2d:ef:bf:bf:2f:
3d:f2:d8:54:df:43:aa:bf:d8:cc:1a:b3:74:b9:f5:68:88:2a:
43:6c:5c:65:df:4f:7a:fc:16:d3:dd:c4:b2:f0:eb:c5:68:2b:
94:08:43:69:05:77:9a:b7:6c:54:a1:97:b2:33:ff:02:44:36:
b0:3a:ff:4d:d5:76:28:25:94:51:59:68:32:05:a4:53:73:d7:
f9:9c:13:03:72:97:9c:89:60:d8:db:31:12:55:8b:fa:2f:e7:
12:67:9c:b2:eb:82:17:27:44:1a:06:a5:f8:28:37:bd:f7:28:
44:8b:6d:ff
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYmTRRtqyAMkW00NlHdvf8qUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwNzI2MTczNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWZlMTc0NDE4YjA3NWM2NGZhMzk1OTRhZDkzZmQxYWU1ZDIxZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTjcHT3CaqkmjPgzq0sIFx/m7PhT
9y6mo5NtNpJxCbLlwcJ6diouhH1r69zz4cycNMfWIQqm5UUjDddrdM45W7n3Ot/n
aMc1yCtZiTNvIACi9ivMJ1JegTBypwQAOLaN0pB3LWAZCaWJ/93SuY6LXnic42GT
PLJG+3O7K400vG4HlWsUmNFwEV6spAyfGoc62emc7oiyFhe6jPoDd6babVQxbL1f
0N4DQeY0TbvQPO3fzt2zuRs19uIaoRf1o0bQc/depCfnRiAhgl3UQQHONdG5y8Ix
TBQxnKZLCuUeocbIS1TfjmbshjKUE2oIOTU1ptaIY5fzSPt6t/lA1PJZ9QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPn+F0QYsHXGT6OVlK2T/Rrl0h1+MB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvMS1mNFhSQml3ZGNaUG81V1VyWlA5R3VYU0hYNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODAvYTU3M2ZlLTZlMGUtNGJmZi05OWZjLTI2MjFkNWM5OWNh
Yi8xLzItak1qMXJ4NXpZdFJVODkyUnFDbFNrWjIyRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA14YQAME
BG1ekDANBgkqhkiG9w0BAQsFAAOCAQEAPv63x5m53eqxabVW9CDXiaM3y7uwe4KI
GtZJocDrPb7HcSORIA4y/k7cVIhzhGOXR2a7OTni7QU9reKQz3ibEvoT2JUSfc7B
+vUVmO+/WuaEBPEEZaaK7i+9Sdr53XQ+5PEMzK3pQbKHwY62MV8hR6zb7Kw/jb1j
naoHyKQb4AB0ACa+B/KFlaTACy3vv78vPfLYVN9Dqr/YzBqzdLn1aIgqQ2xcZd9P
evwW093EsvDrxWgrlAhDaQV3mrdsVKGXsjP/AkQ2sDr/TdV2KCWUUVloMgWkU3PX
+ZwTA3KXnIlg2NsxElWL+i/nEmecsuuCFydEGgal+Cg3vfcoRItt/w==
-----END CERTIFICATE-----
Generated at Wed Mar 12 07:01:15 2025 by rpki-client