Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/fvQbnOM1QnXW8nsuPtolBVBjhk8.roa
File: fvQbnOM1QnXW8nsuPtolBVBjhk8.roa (raw, json)
Hash identifier: dE+jiM/OpjAo3OHQchvBjgtUHBTjIyU0QtJxkwgzofM=
Subject key identifier: 7E:F4:1B:9C:E3:35:42:75:D6:F2:7B:2E:3E:DA:25:05:50:63:86:4F
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 01942444B327EBEC407A65F3F99C7378DA36
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/fvQbnOM1QnXW8nsuPtolBVBjhk8.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 94.247.137.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b3:27:eb:ec:40:7a:65:f3:f9:9c:73:78:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ef41b9ce3354275d6f27b2e3eda25055063864f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:14:a6:b7:d3:40:d6:8b:ed:82:50:dd:02:
2b:f5:82:46:ff:04:a7:61:58:d0:5d:b1:5e:28:c3:
ee:63:58:19:b1:6f:1a:86:6d:10:dd:c5:27:41:0b:
85:0e:49:77:2b:26:c9:75:81:14:ae:b7:f7:4f:64:
34:10:14:82:ac:b4:36:8a:98:ad:c0:37:d1:28:63:
b4:4c:76:e0:d0:5e:a5:bf:5c:9e:d2:ac:9f:b2:6d:
0a:a2:89:fb:f4:02:cd:f6:4a:43:4f:1c:bb:c0:78:
30:79:5c:e6:53:c8:6a:5a:03:19:e3:c6:f6:09:e2:
59:8c:9c:2d:46:2f:e8:ab:99:73:cd:68:29:38:b2:
72:be:82:ac:c1:0c:82:d6:3a:df:e9:fb:a8:34:92:
13:83:6b:68:19:cd:29:27:91:ea:ab:bd:09:7a:40:
12:c3:c0:fc:8b:89:a3:3f:64:d7:1a:01:e6:c9:46:
3e:f5:11:64:ec:c0:89:3c:32:b6:1a:ef:2d:95:be:
e0:ff:6e:b7:16:0a:eb:f2:9c:69:af:3b:c6:6d:43:
6a:7a:a4:53:a8:b2:c3:98:db:11:1b:c3:75:37:ae:
7a:cd:d3:5a:35:b1:e0:16:43:02:c1:62:d1:8a:b4:
ff:44:df:8f:18:73:65:1e:00:a6:7a:b9:d0:c1:e8:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:1B:9C:E3:35:42:75:D6:F2:7B:2E:3E:DA:25:05:50:63:86:4F
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/fvQbnOM1QnXW8nsuPtolBVBjhk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
146.19.84.0/24
176.116.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:89:a0:ae:c7:99:49:b9:22:28:a8:1e:e3:69:e6:ad:bd:02:
25:b9:dc:00:47:9a:b4:35:e3:46:5c:19:11:bb:88:bb:7b:c8:
f4:ff:c9:0f:f1:ea:c4:33:9d:74:0b:b9:3c:1f:65:85:53:f9:
e2:4f:16:87:fa:7c:a8:7d:1f:f1:7a:91:bd:74:26:c8:21:bd:
48:16:50:41:e3:20:24:b8:13:bd:9e:75:39:8e:e9:94:e2:98:
35:8b:98:c0:1c:7c:c2:0c:4b:e6:81:38:4e:98:ea:77:da:ca:
87:05:5a:28:74:ae:9c:b0:e3:7b:5d:e4:eb:d1:93:58:d6:e8:
3f:ae:f0:78:f4:da:c9:f8:bd:90:a9:e9:be:1b:3a:98:fc:ba:
c8:27:70:46:0f:6d:c9:c5:7e:77:b5:43:3a:c3:84:f4:93:ff:
9f:19:5c:2a:b9:68:a3:a3:f3:0e:cf:02:52:ff:7f:0c:ad:12:
eb:2a:3c:f3:3c:54:32:99:99:03:7f:19:5d:e8:10:81:c6:7a:
5b:14:41:df:42:7b:49:b6:d7:db:ff:eb:5b:74:45:d2:ce:e0:
e7:87:eb:da:4b:f7:bd:a1:99:c5:0c:ec:0b:58:77:82:fb:80:
ff:6f:52:10:d7:9c:ed:31:1a:e2:97:e7:b6:21:8c:fd:19:a2:
bb:8d:48:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRLMn6+xAemXz+ZxzeNo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWY0MWI5Y2UzMzU0Mjc1ZDZmMjdiMmUzZWRhMjUwNTUwNjM4NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsIUprfTQNaL7YJQ3QIr9YJG/wSn
YVjQXbFeKMPuY1gZsW8ahm0Q3cUnQQuFDkl3KybJdYEUrrf3T2Q0EBSCrLQ2ipit
wDfRKGO0THbg0F6lv1ye0qyfsm0Koon79ALN9kpDTxy7wHgweVzmU8hqWgMZ48b2
CeJZjJwtRi/oq5lzzWgpOLJyvoKswQyC1jrf6fuoNJITg2toGc0pJ5Hqq70JekAS
w8D8i4mjP2TXGgHmyUY+9RFk7MCJPDK2Gu8tlb7g/263Fgrr8pxprzvGbUNqeqRT
qLLDmNsRG8N1N656zdNaNbHgFkMCwWLRirT/RN+PGHNlHgCmernQwegbsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH70G5zjNUJ11vJ7Lj7aJQVQY4ZPMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEvZnZRYm5PTTFRblhXOG5zdVB0b2xCVkJqaGs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXveJAwQA
khNUAwQAsHQAMA0GCSqGSIb3DQEBCwUAA4IBAQCmiaCux5lJuSIoqB7jaeatvQIl
udwAR5q0NeNGXBkRu4i7e8j0/8kP8erEM510C7k8H2WFU/niTxaH+nyofR/xepG9
dCbIIb1IFlBB4yAkuBO9nnU5jumU4pg1i5jAHHzCDEvmgThOmOp32sqHBVoodK6c
sON7XeTr0ZNY1ug/rvB49NrJ+L2Qqem+GzqY/LrIJ3BGD23JxX53tUM6w4T0k/+f
GVwquWijo/MOzwJS/38MrRLrKjzzPFQymZkDfxld6BCBxnpbFEHfQntJttfb/+tb
dEXSzuDnh+vaS/e9oZnFDOwLWHeC+4D/b1IQ15ztMRril+e2IYz9GaK7jUh/
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:19 2025 by rpki-client