Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/xC0wmbykWBet3_qKUu_r-M_9tp0.roa
File: xC0wmbykWBet3_qKUu_r-M_9tp0.roa (raw, json)
Hash identifier: 1T/Cg4IYO24264fgN36fPAMh86PpYcMWohR2TII14MM=
Subject key identifier: C4:2D:30:99:BC:A4:58:17:AD:DF:FA:8A:52:EF:EB:F8:CF:FD:B6:9D
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019498CAE3F72ED1190A7DA60EF929CB3E88
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/xC0wmbykWBet3_qKUu_r-M_9tp0.roa
Signing time: Fri 24 Jan 2025 14:50:20 +0000
ROA not before: Fri 24 Jan 2025 14:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 94.247.137.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
2a11:7e41::/48 maxlen: 48
2a11:7e41:1::/48 maxlen: 48
2a11:7e41:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:ca:e3:f7:2e:d1:19:0a:7d:a6:0e:f9:29:cb:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jan 24 14:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c42d3099bca45817addffa8a52efebf8cffdb69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:d5:76:0d:83:cc:46:71:65:5c:14:55:e0:
06:40:4c:a2:b6:bf:84:de:6e:bf:d9:05:d7:a9:9c:
c5:5b:61:8d:1f:19:df:d2:c8:3b:52:6f:92:47:80:
ae:7a:6a:31:85:c5:f8:07:31:4d:bc:d6:f9:63:10:
dc:fe:f9:4f:69:0d:a7:03:2d:54:74:1e:16:93:0e:
f7:2a:b7:e9:b6:3e:41:c5:15:f5:46:28:09:70:ff:
13:d3:ba:7a:77:21:9f:4f:ce:98:e0:d6:d8:65:44:
35:84:9a:c5:86:7c:3b:53:f5:ba:aa:71:69:6b:66:
0a:9b:d6:46:d7:5f:1e:4f:37:6f:dd:e8:9c:20:21:
ef:b1:b3:18:d9:1c:1f:7d:aa:b3:97:71:8d:be:6b:
ae:d9:c3:fa:1b:6d:ba:25:d3:15:4e:ad:81:2d:75:
36:52:56:63:83:e9:f6:24:d6:e2:19:dc:68:23:ac:
5a:85:40:b8:73:15:a0:fe:5b:26:6c:06:bd:3f:83:
b5:1f:1c:29:2c:2b:94:4f:fa:7a:b7:da:e5:f1:14:
9d:27:7b:80:24:65:41:cb:5a:45:0c:eb:a8:23:74:
da:fd:fa:c7:d6:76:36:8b:5b:1d:27:ec:b0:80:66:
30:6c:86:d4:20:14:b1:60:90:04:a9:86:2a:6a:2a:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:30:99:BC:A4:58:17:AD:DF:FA:8A:52:EF:EB:F8:CF:FD:B6:9D
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/xC0wmbykWBet3_qKUu_r-M_9tp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.137.0/24
146.19.84.0/24
176.116.0.0/24
IPv6:
2a11:7e41::-2a11:7e41:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:ff:e8:ab:14:00:6d:15:7a:70:c1:be:34:15:4f:a4:21:ca:
ac:6c:de:70:0a:02:ae:95:0c:d9:34:52:27:30:4d:81:ba:63:
cd:23:d8:40:94:aa:d9:d7:f6:2d:8c:07:ab:ed:71:bd:b5:b6:
66:58:68:f6:2d:cb:5b:03:05:29:93:14:5e:df:a3:7d:3a:ec:
82:3e:b3:aa:ff:aa:83:a1:71:8b:bf:78:b0:88:39:e7:ca:e0:
0b:c6:e3:63:f1:99:39:68:1f:1d:06:22:6b:ac:4b:02:81:3b:
99:73:a9:0f:0d:48:8d:52:22:51:44:51:af:c9:81:b6:cb:b5:
19:3f:8d:ed:ac:87:07:27:5d:65:7e:a7:3c:92:da:12:fa:a4:
05:b5:e1:56:3e:c9:ed:3a:bb:84:5e:18:8c:75:bd:af:65:77:
bc:f9:c3:19:9d:18:3e:4c:f6:36:7a:05:af:ab:02:3a:50:07:
e9:9f:b6:3e:cc:ae:74:bc:dc:a2:55:7e:91:c3:36:f4:78:1f:
ce:d0:13:c7:b7:19:f4:a3:f5:ba:95:43:90:70:cd:6a:dc:64:
b5:b5:37:d8:42:32:66:41:1b:d2:43:40:7e:4c:de:96:cf:e5:
55:b2:3c:24:6d:93:83:ce:a3:02:f0:2a:13:1f:8d:e6:e6:64:
bf:59:43:10
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZSYyuP3LtEZCn2mDvkpyz6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjUwMTI0MTQ1MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDJkMzA5OWJjYTQ1ODE3YWRkZmZhOGE1MmVmZWJmOGNmZmRiNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8jVdg2DzEZxZVwUVeAGQEyitr+E
3m6/2QXXqZzFW2GNHxnf0sg7Um+SR4CuemoxhcX4BzFNvNb5YxDc/vlPaQ2nAy1U
dB4Wkw73Krfptj5BxRX1RigJcP8T07p6dyGfT86Y4NbYZUQ1hJrFhnw7U/W6qnFp
a2YKm9ZG118eTzdv3eicICHvsbMY2Rwffaqzl3GNvmuu2cP6G226JdMVTq2BLXU2
UlZjg+n2JNbiGdxoI6xahUC4cxWg/lsmbAa9P4O1HxwpLCuUT/p6t9rl8RSdJ3uA
JGVBy1pFDOuoI3Ta/frH1nY2i1sdJ+ywgGYwbIbUIBSxYJAEqYYqaipxoQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFMQtMJm8pFgXrd/6ilLv6/jP/badMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEveEMwd21ieWtXQmV0M19xS1V1X3ItTV85dHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAXveJAwQA
khNUAwQAsHQAMBgEAgACMBIwEAMFACoRfkEDBwAqEX5BAAIwDQYJKoZIhvcNAQEL
BQADggEBAHv/6KsUAG0VenDBvjQVT6Qhyqxs3nAKAq6VDNk0UicwTYG6Y80j2ECU
qtnX9i2MB6vtcb21tmZYaPYty1sDBSmTFF7fo3067II+s6r/qoOhcYu/eLCIOefK
4AvG42PxmTloHx0GImusSwKBO5lzqQ8NSI1SIlFEUa/JgbbLtRk/je2shwcnXWV+
pzyS2hL6pAW14VY+ye06u4ReGIx1va9ld7z5wxmdGD5M9jZ6Ba+rAjpQB+mftj7M
rnS83KJVfpHDNvR4H87QE8e3GfSj9bqVQ5BwzWrcZLW1N9hCMmZBG9JDQH5M3pbP
5VWyPCRtk4POowLwKhMfjebmZL9ZQxA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:51:58 2025 by rpki-client