Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fN6-ucvixEMwzfEXNRUOgkq3p3w.roa
File: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (raw, json)
Hash identifier: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=
Subject key identifier: 7C:DE:BE:B9:CB:E2:C4:43:30:CD:F1:17:35:15:0E:82:4A:B7:A7:7C
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4EBF9C5DE4F448C777E9514250EF
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fN6-ucvixEMwzfEXNRUOgkq3p3w.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200005
IP address blocks: 217.112.151.0/24 maxlen: 24
217.112.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:bf:9c:5d:e4:f4:48:c7:77:e9:51:42:50:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cdebeb9cbe2c44330cdf11735150e824ab7a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a9:40:20:28:d1:bc:fc:92:19:8b:30:71:18:
c0:8d:e1:e0:f8:b8:c4:a2:c1:75:a6:27:a7:78:e5:
76:fe:e7:82:e5:1f:ac:41:fc:83:56:24:70:1d:9b:
bf:fc:8a:ef:c9:e9:c1:bb:3d:cd:db:13:cb:96:28:
32:65:f5:21:c0:51:65:ac:6b:e0:77:3c:30:7e:f1:
f4:3c:1d:ae:f3:e8:86:8c:01:f0:91:c0:7e:43:89:
96:2c:19:d1:2b:fa:d6:6f:fc:87:c0:cc:49:0f:e7:
0e:3c:23:12:28:67:69:db:8c:8b:d4:40:af:58:12:
cf:e6:1d:42:27:84:f7:a2:5c:9d:5b:2f:15:f0:c6:
cf:af:49:40:30:9d:c5:62:02:54:68:e3:e7:d9:71:
6f:42:83:bf:83:9e:a2:dc:87:57:1f:e1:90:95:e0:
46:94:0b:79:f2:40:41:9f:08:07:05:9e:29:8c:af:
04:70:b8:67:99:bb:95:f6:05:36:7e:14:e9:6f:82:
18:d7:cc:12:53:2b:4f:80:35:bf:ba:85:79:9b:37:
64:b1:aa:bf:d3:33:e9:27:c6:9b:1b:d9:ce:23:58:
74:e5:43:59:11:2c:f5:ed:64:6b:8f:63:ab:71:07:
93:db:7d:07:35:46:8a:0c:da:36:d9:3d:27:61:cf:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:BE:B9:CB:E2:C4:43:30:CD:F1:17:35:15:0E:82:4A:B7:A7:7C
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fN6-ucvixEMwzfEXNRUOgkq3p3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.112.151.0/24
217.112.158.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0d:d1:d9:74:ed:7a:83:bf:ba:fa:a9:d7:67:d7:81:53:c0:
9b:bb:35:96:82:c0:72:ab:9c:d1:30:8e:39:11:ad:37:ae:10:
61:40:e1:c0:80:0e:98:b9:f4:ae:7f:de:24:4a:9d:70:c9:5f:
3e:bb:25:b9:0a:8a:04:47:67:f0:17:63:90:49:a9:f8:dc:bc:
fd:b6:f9:63:b3:fc:05:c2:94:1e:61:32:12:5b:5b:0e:41:90:
97:f7:2f:45:52:08:08:9c:94:b2:6c:82:31:7b:5b:a3:5b:92:
67:14:b9:f0:e2:7e:6d:02:c6:1f:b9:68:05:4d:d1:6c:e1:de:
f5:15:d6:83:7e:6f:9d:78:a3:94:f0:69:99:12:73:f5:d9:cb:
24:96:8b:59:c4:bc:d8:da:b3:0c:87:d2:01:6a:16:c6:65:98:
49:c2:1a:24:53:7a:4b:3f:33:75:41:81:32:05:94:7d:fb:d3:
ef:9f:e1:8d:ea:cc:3e:89:1d:9c:10:a4:c9:05:dd:bc:e8:46:
ab:a8:87:4d:a0:22:bd:21:c6:30:6e:e7:1a:03:d7:52:1d:b2:
a5:79:ff:dd:0f:e4:53:06:44:9b:1a:d4:36:95:91:5d:4b:f6:
8c:72:06:cd:a6:e4:76:fc:31:e5:fb:f3:4e:15:c3:49:e5:38:
f4:7c:9b:dc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+k6/nF3k9EjHd+lRQlDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2RlYmViOWNiZTJjNDQzMzBjZGYxMTczNTE1MGU4MjRhYjdhNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qlAICjRvPySGYswcRjAjeHg+LjE
osF1pieneOV2/ueC5R+sQfyDViRwHZu//IrvyenBuz3N2xPLligyZfUhwFFlrGvg
dzwwfvH0PB2u8+iGjAHwkcB+Q4mWLBnRK/rWb/yHwMxJD+cOPCMSKGdp24yL1ECv
WBLP5h1CJ4T3olydWy8V8MbPr0lAMJ3FYgJUaOPn2XFvQoO/g56i3IdXH+GQleBG
lAt58kBBnwgHBZ4pjK8EcLhnmbuV9gU2fhTpb4IY18wSUytPgDW/uoV5mzdksaq/
0zPpJ8abG9nOI1h05UNZESz17WRrj2OrcQeT230HNUaKDNo22T0nYc8ptQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHzevrnL4sRDMM3xFzUVDoJKt6d8MB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvZk42LXVjdml4RU13emZFWE5SVU9na3EzcDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2XCXAwQA
2XCeMA0GCSqGSIb3DQEBCwUAA4IBAQA5DdHZdO16g7+6+qnXZ9eBU8CbuzWWgsBy
q5zRMI45Ea03rhBhQOHAgA6YufSuf94kSp1wyV8+uyW5CooER2fwF2OQSan43Lz9
tvljs/wFwpQeYTISW1sOQZCX9y9FUggInJSybIIxe1ujW5JnFLnw4n5tAsYfuWgF
TdFs4d71FdaDfm+deKOU8GmZEnP12csklotZxLzY2rMMh9IBahbGZZhJwhokU3pL
PzN1QYEyBZR9+9Pvn+GN6sw+iR2cEKTJBd286EarqIdNoCK9IcYwbucaA9dSHbKl
ef/dD+RTBkSbGtQ2lZFdS/aMcgbNpuR2/DHl+/NOFcNJ5Tj0fJvc
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:06:41 2025 by rpki-client