Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/d1Mc0OsWnepemmVerPa7kdZl1N8.roa
File: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (raw, json)
Hash identifier: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=
Subject key identifier: 77:53:1C:D0:EB:16:9D:EA:5E:9A:65:5E:AC:F6:BB:91:D6:65:D4:DF
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA43ECFA510F712E83984562978014
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/d1Mc0OsWnepemmVerPa7kdZl1N8.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 79.110.239.0/24 maxlen: 24
79.110.239.0/25 maxlen: 25
185.183.44.0/22 maxlen: 22
185.207.37.0/24 maxlen: 24
185.207.38.0/24 maxlen: 24
188.212.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:ec:fa:51:0f:71:2e:83:98:45:62:97:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77531cd0eb169dea5e9a655eacf6bb91d665d4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:7a:4a:66:b7:84:0f:27:41:74:e9:94:ca:
44:33:92:68:61:63:23:20:22:b5:2f:c4:fc:08:e2:
5f:2f:8a:78:a8:56:ec:6b:c8:fe:23:08:7b:fd:45:
57:48:6a:0b:80:f3:9c:d5:6a:af:3f:35:84:48:d1:
c5:61:8a:92:8f:c7:63:15:b7:42:9c:f3:3b:e1:1a:
26:da:b0:56:a0:86:7f:c1:4b:fa:a6:10:7f:43:db:
95:fa:48:b9:c5:af:0b:2a:9b:90:68:b9:f2:ed:28:
a1:d7:0c:37:65:27:ea:81:33:71:37:27:6b:ec:2f:
f9:ae:e9:75:25:c3:cc:f2:3b:4d:c0:c3:97:5f:6f:
b3:60:9c:2b:25:ab:c4:8a:eb:3e:a7:1f:d4:17:88:
cc:52:d4:2d:ae:46:f5:ec:d7:d1:e3:7f:ca:53:47:
67:71:fa:3b:a3:a9:e0:67:36:e7:d1:12:4c:e2:79:
b2:53:a1:da:30:d1:d4:83:ee:c8:1a:b0:34:1a:8d:
17:d9:8d:a3:76:11:7a:15:e3:5f:38:de:7b:85:1c:
8d:82:44:c7:28:9f:fe:1a:6c:31:82:45:d7:20:60:
04:3e:30:c8:59:d7:9e:f9:6c:53:3c:46:a2:a7:08:
cb:e2:04:c7:bf:42:62:d8:ef:2f:65:95:2f:ca:4f:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:53:1C:D0:EB:16:9D:EA:5E:9A:65:5E:AC:F6:BB:91:D6:65:D4:DF
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/d1Mc0OsWnepemmVerPa7kdZl1N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.239.0/24
185.183.44.0/22
185.207.37.0-185.207.38.255
188.212.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e4:31:d8:a1:43:22:25:1d:9d:3a:e6:23:1f:62:08:10:49:
80:8c:a9:8b:65:e1:af:e0:1b:7f:92:ce:29:a4:0b:b6:bc:94:
e2:d0:c5:83:b0:fd:72:a3:d5:cc:58:a2:8b:41:f3:63:ad:46:
24:7f:60:42:64:f8:68:89:f3:90:a7:91:91:80:24:76:50:d3:
fd:6c:51:78:4f:04:19:f0:16:9e:e6:40:93:c2:d2:8e:f6:48:
71:d8:1c:9e:52:e0:f6:48:a8:84:1b:b9:4c:dc:2d:29:28:e7:
32:1c:86:94:48:8c:d3:66:2f:6d:9a:e2:e6:da:64:0b:6f:66:
32:2d:34:f8:dd:39:ee:96:a5:09:df:10:37:5f:6d:64:14:78:
34:ac:e2:8c:f3:74:58:37:37:19:ca:cd:cd:3b:91:52:76:65:
0b:76:2e:b1:9e:c0:93:97:6a:b8:f8:90:19:a4:89:5f:9d:6c:
52:fe:b9:90:41:6d:5e:b7:b3:05:9e:da:d0:ea:53:79:b4:a2:
c2:8f:8d:cd:e8:d5:fe:6e:eb:9c:9a:17:ab:c6:33:09:ca:ac:
7b:9c:ee:ef:91:fa:a0:79:30:55:a8:91:b5:93:d3:f2:d9:b5:
4b:db:8d:c4:6a:ab:8a:c6:c7:1d:a1:eb:56:41:16:38:9a:cd:
2c:11:b2:e4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQf+kPs+lEPcS6DmEVil4AUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzUzMWNkMGViMTY5ZGVhNWU5YTY1NWVhY2Y2YmI5MWQ2NjVkNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cp6Sma3hA8nQXTplMpEM5JoYWMj
ICK1L8T8COJfL4p4qFbsa8j+Iwh7/UVXSGoLgPOc1WqvPzWESNHFYYqSj8djFbdC
nPM74Rom2rBWoIZ/wUv6phB/Q9uV+ki5xa8LKpuQaLny7Sih1ww3ZSfqgTNxNydr
7C/5rul1JcPM8jtNwMOXX2+zYJwrJavEius+px/UF4jMUtQtrkb17NfR43/KU0dn
cfo7o6ngZzbn0RJM4nmyU6HaMNHUg+7IGrA0Go0X2Y2jdhF6FeNfON57hRyNgkTH
KJ/+GmwxgkXXIGAEPjDIWdee+WxTPEaipwjL4gTHv0Ji2O8vZZUvyk89/wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFHdTHNDrFp3qXpplXqz2u5HWZdTfMB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvZDFNYzBPc1duZXBlbW1WZXJQYTdrZFpsMU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAT27vAwQC
ubcsMAwDBAC5zyUDBAC5zyYDBAG81AYwDQYJKoZIhvcNAQELBQADggEBAJzkMdih
QyIlHZ065iMfYggQSYCMqYtl4a/gG3+SzimkC7a8lOLQxYOw/XKj1cxYootB82Ot
RiR/YEJk+GiJ85CnkZGAJHZQ0/1sUXhPBBnwFp7mQJPC0o72SHHYHJ5S4PZIqIQb
uUzcLSko5zIchpRIjNNmL22a4ubaZAtvZjItNPjdOe6WpQnfEDdfbWQUeDSs4ozz
dFg3NxnKzc07kVJ2ZQt2LrGewJOXarj4kBmkiV+dbFL+uZBBbV63swWe2tDqU3m0
osKPjc3o1f5u65yaF6vGMwnKrHuc7u+R+qB5MFWokbWT0/LZtUvbjcRqq4rGxx2h
61ZBFjiazSwRsuQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:54 2025 by rpki-client