Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/o4_pEwPipmYi6C3PXNhpC7by3MA.roa
File: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (raw, json)
Hash identifier: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=
Subject key identifier: A3:8F:E9:13:03:E2:A6:66:22:E8:2D:CF:5C:D8:69:0B:B6:F2:DC:C0
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA41771482D8E791AAC4B13D24F3C4
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/o4_pEwPipmYi6C3PXNhpC7by3MA.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20853
IP address blocks: 194.29.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:77:14:82:d8:e7:91:aa:c4:b1:3d:24:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a38fe91303e2a66622e82dcf5cd8690bb6f2dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:ba:19:a3:5a:b2:b9:4f:4a:ba:3f:c0:c4:
5d:e3:b9:62:20:44:f1:c5:6f:69:55:fd:2e:a1:48:
b1:d1:7a:7a:28:01:9f:d1:18:fd:7f:36:bb:25:bf:
bc:8f:65:06:14:06:4e:b5:b8:b1:c2:c9:ba:4e:bd:
fb:e7:e7:78:fb:bc:9d:69:aa:35:93:75:8e:89:f7:
7d:78:9a:3b:51:5b:6d:cb:d9:ef:39:bb:05:74:ac:
9b:5c:9f:54:c6:88:b5:04:bb:bd:27:12:3a:6e:a1:
3a:17:93:dd:a7:e8:d2:9a:7e:71:34:11:07:c9:50:
fc:d4:71:ba:94:92:de:e6:79:52:ac:fe:dd:dd:98:
fa:99:30:49:70:f8:fe:99:1b:88:7f:73:62:9f:6b:
51:fc:00:42:10:5e:e3:27:0f:b9:3f:90:8a:50:44:
1f:71:b1:21:ff:c5:36:af:46:3f:b4:9c:3c:d5:9f:
59:d4:e1:7c:90:5f:13:ac:03:e6:18:a2:2a:1b:e1:
69:6c:a1:e2:aa:ff:0f:86:56:cc:06:b6:25:02:2d:
7b:89:7f:e7:58:50:11:90:2d:3a:80:a1:5e:50:ef:
85:5b:27:28:12:e6:ae:1d:e0:68:96:e5:2a:e3:a0:
a3:02:b0:2a:73:ac:9b:81:98:01:11:77:28:da:b3:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:E9:13:03:E2:A6:66:22:E8:2D:CF:5C:D8:69:0B:B6:F2:DC:C0
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/o4_pEwPipmYi6C3PXNhpC7by3MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.67.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7f:36:13:b7:9b:41:c4:b3:3d:90:44:1e:97:a4:a5:21:7c:
21:57:3f:89:dd:af:78:3d:17:5d:be:24:7a:7f:f2:37:8f:64:
88:0e:5b:ea:ab:37:3b:61:d6:07:2a:26:eb:c8:99:cf:93:ce:
f6:b5:77:e6:33:9e:ea:cb:25:6c:36:0e:ef:e1:ad:bf:a4:c6:
47:c3:28:d8:22:1b:da:f9:33:42:d1:88:31:12:80:7d:f3:6a:
f1:0c:d5:81:fa:60:40:32:30:4a:71:fe:d2:18:1f:14:9e:63:
fc:6a:16:15:2a:4b:80:f8:c4:75:63:94:9d:51:48:de:94:49:
23:90:2b:18:ca:53:2a:61:74:78:e2:b4:76:6a:d8:7c:ff:57:
37:45:2f:50:d4:07:8f:78:60:0b:d5:8c:1a:f7:ef:79:45:0d:
26:a6:1d:d6:7c:b8:ef:db:cd:38:6c:d6:ec:16:7c:14:51:79:
48:2b:80:22:07:2e:df:b6:0f:fc:b0:7f:f2:23:70:75:fc:00:
c9:2d:85:42:32:81:a5:af:83:31:b2:70:02:53:60:75:cc:40:
9c:7b:b6:d6:97:26:63:47:58:61:51:bb:3f:ef:b7:d6:8d:78:
90:88:20:4b:54:f4:38:2f:79:29:04:9f:de:28:c0:cf:07:ba:
3a:24:29:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kF3FILY55GqxLE9JPPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzhmZTkxMzAzZTJhNjY2MjJlODJkY2Y1Y2Q4NjkwYmI2ZjJkY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZW6GaNasrlPSro/wMRd47liIETx
xW9pVf0uoUix0Xp6KAGf0Rj9fza7Jb+8j2UGFAZOtbixwsm6Tr375+d4+7ydaao1
k3WOifd9eJo7UVtty9nvObsFdKybXJ9Uxoi1BLu9JxI6bqE6F5Pdp+jSmn5xNBEH
yVD81HG6lJLe5nlSrP7d3Zj6mTBJcPj+mRuIf3Nin2tR/ABCEF7jJw+5P5CKUEQf
cbEh/8U2r0Y/tJw81Z9Z1OF8kF8TrAPmGKIqG+FpbKHiqv8PhlbMBrYlAi17iX/n
WFARkC06gKFeUO+FWycoEuauHeBoluUq46CjArAqc6ybgZgBEXco2rPmrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOP6RMD4qZmIugtz1zYaQu28tzAMB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvbzRfcEV3UGlwbVlpNkMzUFhOaHBDN2J5M01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh1DMA0G
CSqGSIb3DQEBCwUAA4IBAQCSfzYTt5tBxLM9kEQel6SlIXwhVz+J3a94PRddviR6
f/I3j2SIDlvqqzc7YdYHKibryJnPk872tXfmM57qyyVsNg7v4a2/pMZHwyjYIhva
+TNC0YgxEoB982rxDNWB+mBAMjBKcf7SGB8UnmP8ahYVKkuA+MR1Y5SdUUjelEkj
kCsYylMqYXR44rR2ath8/1c3RS9Q1AePeGAL1Ywa9+95RQ0mph3WfLjv2804bNbs
FnwUUXlIK4AiBy7ftg/8sH/yI3B1/ADJLYVCMoGlr4MxsnACU2B1zECce7bWlyZj
R1hhUbs/77fWjXiQiCBLVPQ4L3kpBJ/eKMDPB7o6JCkJ
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:27 2025 by rpki-client