Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa
File: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (raw, json)
Hash identifier: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=
Subject key identifier: 55:37:50:B8:F2:E0:B8:EE:88:6F:0D:13:87:DC:A9:24:2C:72:39:FF
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA4634624BBD0F39D269CD06D5DD5D
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 264617
IP address blocks: 43.245.119.0/24 maxlen: 24
45.113.238.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
147.185.250.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:34:62:4b:bd:0f:39:d2:69:cd:06:d5:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553750b8f2e0b8ee886f0d1387dca9242c7239ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:2c:a4:81:b4:40:10:42:bc:95:de:9b:5a:
18:88:cf:d8:ce:a4:bb:8c:4e:7d:8a:9f:23:4a:b4:
71:a6:10:86:a9:ba:46:ea:e2:be:19:ef:9b:dd:72:
e1:2a:c8:08:53:16:d0:4e:eb:76:4c:0d:9b:ed:a1:
8b:01:aa:4a:44:a1:bd:e1:26:a3:c2:32:f6:c5:11:
37:6a:32:70:12:77:fc:79:ec:97:b0:e9:38:ef:87:
54:12:b7:09:28:f2:d1:76:fd:01:85:9f:15:da:8b:
46:0c:b7:6e:4f:84:29:54:cb:38:cd:18:d9:41:15:
a4:ee:3d:fb:48:c0:f1:d4:45:2a:41:ad:ef:db:6d:
5d:b2:d3:86:70:80:92:61:19:68:3d:2b:5c:39:7a:
89:41:44:36:b7:e6:06:8f:7e:56:02:21:92:7d:e6:
fe:8b:a2:98:79:98:4f:2c:13:0a:9a:77:94:9f:34:
e2:8f:2d:43:ee:4e:15:39:e7:bd:47:bd:eb:fc:70:
2a:b3:3e:7f:92:69:f3:31:7f:7b:36:a8:67:e8:ca:
17:a0:72:b2:d7:54:b3:cb:4c:b8:73:f3:00:25:d7:
65:25:21:36:40:55:ec:2e:97:38:4b:d9:67:0c:25:
13:a8:4e:20:7b:72:5e:9e:92:47:47:5e:6c:02:93:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:50:B8:F2:E0:B8:EE:88:6F:0D:13:87:DC:A9:24:2C:72:39:FF
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.119.0/24
45.113.238.0/24
147.185.217.0/24
147.185.250.0/24
193.36.86.0/24
193.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6e:13:ec:fb:5d:fa:e0:30:6a:e0:76:f0:f5:de:5d:f5:85:
11:f7:e9:10:9d:59:42:63:79:e0:dc:d9:97:c3:95:67:72:ed:
ca:2f:39:c6:8a:dd:fe:27:ef:50:14:32:07:cf:cd:76:0f:ae:
b5:e6:61:91:c8:65:f8:77:ab:19:73:9c:4d:47:d6:bc:88:66:
bd:69:c5:47:e4:da:1e:b4:1c:24:f2:17:71:1a:79:4d:d2:63:
3f:40:72:aa:4d:b5:52:b7:27:d3:c1:5e:de:88:3e:6f:42:72:
79:47:b4:69:02:5c:8f:fc:93:b1:30:be:78:93:fc:84:f5:42:
d6:6f:94:d0:59:1e:2e:23:06:85:12:a5:2f:04:e6:db:f8:67:
e1:11:6e:12:ea:44:4f:51:aa:0e:7c:c9:d0:3c:ac:1e:33:d7:
46:bb:4c:49:53:8e:5f:bc:da:3b:3c:9b:09:d5:bf:5a:b6:78:
63:37:d3:68:7d:8b:75:e6:69:b9:95:2c:3a:81:95:17:5d:3f:
f7:5f:88:71:3a:5b:d5:b2:3a:e6:f8:86:a1:cd:b6:d9:d4:74:
f8:7f:a0:3d:79:f4:99:f2:b6:48:af:f5:7b:5c:3f:b2:c0:5e:
04:2f:12:cd:10:e3:40:e6:2c:8d:2b:b6:66:d8:20:35:48:69:
70:3d:e7:ed
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQf+kY0Yku9DznSac0G1d1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjUwMTAxMDM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTM3NTBiOGYyZTBiOGVlODg2ZjBkMTM4N2RjYTkyNDJjNzIzOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKYspIG0QBBCvJXem1oYiM/YzqS7
jE59ip8jSrRxphCGqbpG6uK+Ge+b3XLhKsgIUxbQTut2TA2b7aGLAapKRKG94Saj
wjL2xRE3ajJwEnf8eeyXsOk474dUErcJKPLRdv0BhZ8V2otGDLduT4QpVMs4zRjZ
QRWk7j37SMDx1EUqQa3v221dstOGcICSYRloPStcOXqJQUQ2t+YGj35WAiGSfeb+
i6KYeZhPLBMKmneUnzTijy1D7k4VOee9R73r/HAqsz5/kmnzMX97Nqhn6MoXoHKy
11Szy0y4c/MAJddlJSE2QFXsLpc4S9lnDCUTqE4ge3JenpJHR15sApNWhQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFU3ULjy4LjuiG8NE4fcqSQscjn/MB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvVlRkUXVQTGd1TzZJYncwVGg5eXBKQ3h5T2Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAK/V3AwQA
LXHuAwQAk7nZAwQAk7n6AwQAwSRWAwQAwSSsMA0GCSqGSIb3DQEBCwUAA4IBAQBZ
bhPs+1364DBq4Hbw9d5d9YUR9+kQnVlCY3ng3NmXw5Vncu3KLznGit3+J+9QFDIH
z812D6615mGRyGX4d6sZc5xNR9a8iGa9acVH5NoetBwk8hdxGnlN0mM/QHKqTbVS
tyfTwV7eiD5vQnJ5R7RpAlyP/JOxML54k/yE9ULWb5TQWR4uIwaFEqUvBObb+Gfh
EW4S6kRPUaoOfMnQPKweM9dGu0xJU45fvNo7PJsJ1b9atnhjN9NofYt15mm5lSw6
gZUXXT/3X4hxOlvVsjrm+IahzbbZ1HT4f6A9efSZ8rZIr/V7XD+ywF4ELxLNEONA
5iyNK7Zm2CA1SGlwPeft
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:40 2025 by rpki-client