Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/FZT_BTCcPvUDg2WMebmfcMFfqlk.roa
File: FZT_BTCcPvUDg2WMebmfcMFfqlk.roa (raw, json)
Hash identifier: 9tnNWNBi7xBlzEQuuTA6YbXDIlQAtmVWyk/P9qheXMo=
Subject key identifier: 15:94:FF:05:30:9C:3E:F5:03:83:65:8C:79:B9:9F:70:C1:5F:AA:59
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 019424449544C5B3EA2A798E3E6453EFD93C
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/FZT_BTCcPvUDg2WMebmfcMFfqlk.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.101.0/24 maxlen: 24
185.1.104.0/24 maxlen: 24
2001:7f8:bc::/48 maxlen: 48
2001:7f8:be::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:95:44:c5:b3:ea:2a:79:8e:3e:64:53:ef:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1594ff05309c3ef50383658c79b99f70c15faa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:25:34:04:f2:3a:1d:2e:91:78:b4:72:9c:
da:b6:3c:8f:78:58:b9:eb:a3:9d:da:83:bb:9e:dc:
08:ba:ab:2e:0d:4b:bc:60:5d:02:10:66:05:fb:13:
55:85:34:97:87:18:32:ee:9a:9d:01:a0:eb:63:3f:
47:23:8c:ad:d4:37:41:f6:ef:21:19:2e:81:e0:ef:
4e:c8:33:47:11:bc:73:9c:1e:07:dd:23:7f:20:bf:
7a:2f:bd:ac:d8:73:5c:55:18:bb:74:1c:33:c7:2a:
26:ce:66:6b:20:30:27:ea:2a:7e:56:71:10:4f:19:
6f:08:48:e1:99:d0:98:ed:76:e8:eb:c3:ab:32:1f:
1e:a9:98:d7:0e:4a:59:95:65:be:1e:fd:1c:a9:9d:
aa:9d:99:c2:34:5b:b1:2f:72:22:48:c3:1e:5f:a2:
fb:5a:77:a9:9c:3f:80:b3:7f:9b:d2:cb:84:c1:03:
fb:35:d8:f5:0a:f7:80:87:98:67:4f:3a:ff:ae:ef:
40:4d:bd:23:74:5d:3b:12:15:5c:3c:ae:ca:a3:1a:
8c:80:3d:5a:02:cb:66:a3:45:1e:25:90:b5:2a:ea:
9a:32:d5:b8:6c:16:1e:15:73:9d:25:25:79:e3:3b:
3d:f4:15:6a:76:61:96:f5:11:ad:40:7d:67:0a:57:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:94:FF:05:30:9C:3E:F5:03:83:65:8C:79:B9:9F:70:C1:5F:AA:59
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/FZT_BTCcPvUDg2WMebmfcMFfqlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.101.0/24
185.1.104.0/24
IPv6:
2001:7f8:bc::/48
2001:7f8:be::/48
Signature Algorithm: sha256WithRSAEncryption
07:a5:9b:74:22:1e:7c:90:ce:8f:4b:90:50:eb:a6:ce:44:e4:
0e:df:ec:5e:94:23:9a:21:23:4c:33:c1:16:42:f3:00:25:42:
6b:5d:93:f0:8a:ed:22:46:79:f1:67:7d:c6:cd:a7:5f:49:eb:
ee:30:33:be:6b:f9:67:77:2d:f5:e8:b3:68:e5:d2:8b:91:9f:
b7:c5:22:2c:10:56:c4:33:c8:b1:f3:b5:91:19:82:d6:07:9c:
ca:25:1c:82:d0:5e:26:a6:29:28:d9:6e:fe:65:a1:7d:07:46:
43:f8:72:6e:86:f6:23:1e:da:04:cc:fa:13:f5:ca:ac:25:01:
b1:d9:97:28:9f:7d:0c:e3:a6:5e:d0:94:b2:e7:06:8d:22:ea:
8d:4d:c4:f9:ab:1b:d7:d1:1c:3b:c6:56:38:4f:f0:56:75:1a:
67:1c:47:81:4d:36:63:43:af:bc:b9:0a:49:72:36:97:9e:d3:
3a:32:51:56:a4:1d:79:9f:90:b5:8e:2e:86:14:98:22:c4:56:
c6:be:4b:cc:ef:94:19:9d:8f:cd:57:61:10:ee:e5:38:5b:1c:
91:bf:d2:9d:7c:ee:1b:aa:a7:8e:f0:4d:34:be:fe:ca:37:a3:
01:62:d7:7d:bd:11:7a:31:9b:63:b3:de:ac:d2:8f:5a:7a:df:
5c:fc:ee:d4
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQkRJVExbPqKnmOPmRT79k8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzRhMzVhYmZhODJkNTQ5ZTQ5MDcwNGQ2OGJiZTY1ODAw
NWQ2M2MwHhcNMjUwMTAxMjM0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTk0ZmYwNTMwOWMzZWY1MDM4MzY1OGM3OWI5OWY3MGMxNWZhYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WslNATyOh0ukXi0cpzatjyPeFi5
66Od2oO7ntwIuqsuDUu8YF0CEGYF+xNVhTSXhxgy7pqdAaDrYz9HI4yt1DdB9u8h
GS6B4O9OyDNHEbxznB4H3SN/IL96L72s2HNcVRi7dBwzxyomzmZrIDAn6ip+VnEQ
TxlvCEjhmdCY7Xbo68OrMh8eqZjXDkpZlWW+Hv0cqZ2qnZnCNFuxL3IiSMMeX6L7
WnepnD+As3+b0suEwQP7Ndj1CveAh5hnTzr/ru9ATb0jdF07EhVcPK7KoxqMgD1a
Astmo0UeJZC1KuqaMtW4bBYeFXOdJSV54zs99BVqdmGW9RGtQH1nClfvjwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBWU/wUwnD71A4NljHm5n3DBX6pZMB8GA1UdIwQY
MBaAFMM0o1q/qC1UnkkHBNaLvmWABdY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMt
MjczODg0YjUzYzZlLzEvRlpUX0JUQ2NQdlVEZzJXTWVibWZjTUZmcWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMtMjczODg0YjUzYzZl
LzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAuQFlAwQA
uQFoMBgEAgACMBIDBwAgAQf4ALwDBwAgAQf4AL4wDQYJKoZIhvcNAQELBQADggEB
AAelm3QiHnyQzo9LkFDrps5E5A7f7F6UI5ohI0wzwRZC8wAlQmtdk/CK7SJGefFn
fcbNp19J6+4wM75r+Wd3LfXos2jl0ouRn7fFIiwQVsQzyLHztZEZgtYHnMolHILQ
XiamKSjZbv5loX0HRkP4cm6G9iMe2gTM+hP1yqwlAbHZlyiffQzjpl7QlLLnBo0i
6o1NxPmrG9fRHDvGVjhP8FZ1GmccR4FNNmNDr7y5CklyNpee0zoyUVakHXmfkLWO
LoYUmCLEVsa+S8zvlBmdj81XYRDu5ThbHJG/0p187huqp47wTTS+/so3owFi1329
EXoxm2Oz3qzSj1p631z87tQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:13 2025 by rpki-client