Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa
File: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (raw, json)
Hash identifier: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=
Subject key identifier: 15:17:BA:6A:E6:73:71:23:95:3E:D6:7A:43:9C:AF:8C:31:E5:CD:2D
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BE7CDCB24A029A0759850426C5C81
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 46.227.72.0/21 maxlen: 21
78.40.40.0/21 maxlen: 21
81.21.208.0/20 maxlen: 20
81.27.0.0/20 maxlen: 20
93.94.168.0/21 maxlen: 21
185.53.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e7:cd:cb:24:a0:29:a0:75:98:50:42:6c:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1517ba6ae6737123953ed67a439caf8c31e5cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:70:7f:a0:c2:47:9f:d1:64:64:8a:fd:67:
cc:1f:75:6b:d9:ad:40:60:f2:0c:d6:c4:c3:43:38:
87:46:82:3c:4b:53:0a:9b:a7:b8:28:90:c8:f8:55:
1e:85:96:3f:40:93:88:f8:1f:16:fc:e4:40:e4:d9:
37:6f:d0:fb:32:a9:b2:f7:57:6e:0c:3c:d3:c6:8d:
65:62:aa:ca:ca:71:41:9d:b2:df:65:ee:03:98:78:
35:2e:b9:1f:24:06:0b:15:79:dd:66:26:ca:30:fa:
8e:77:ed:86:44:82:97:58:ef:3c:8a:4c:76:58:25:
84:eb:73:75:26:8c:f2:9e:ed:65:8a:b3:26:d7:1f:
6f:da:30:06:c0:66:86:47:ae:fc:c1:da:a6:ac:22:
7c:f4:fe:af:24:3e:71:65:ea:ba:e7:81:0c:08:20:
df:6c:e2:71:74:fa:ab:fc:27:f8:ae:48:87:13:e9:
10:6f:e8:b9:7d:a8:55:b8:62:b9:f5:32:50:8a:7a:
64:76:a3:25:24:9a:54:43:28:1d:cd:28:cc:d1:87:
3b:4d:d9:17:04:f8:9c:81:8a:64:56:41:64:38:ac:
e4:b2:a1:d2:e7:e6:69:a0:98:13:0f:41:91:8f:e7:
2c:30:5f:0d:ed:ac:3f:f6:9b:f7:a7:85:7f:fb:ae:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:BA:6A:E6:73:71:23:95:3E:D6:7A:43:9C:AF:8C:31:E5:CD:2D
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.72.0/21
78.40.40.0/21
81.21.208.0/20
81.27.0.0/20
93.94.168.0/21
185.53.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c7:9f:da:8a:85:c2:ba:e6:c1:c0:b7:e2:db:a0:76:25:7d:
66:50:ee:db:b7:ab:f1:a4:be:18:15:8f:ae:b4:cb:be:5e:70:
4d:72:59:0e:99:d4:67:da:53:50:40:0f:a4:47:c8:79:32:d7:
0c:75:be:04:59:4f:d4:e8:0b:d2:01:2f:cc:f1:3c:4c:39:53:
44:e5:24:67:37:6f:7d:dc:ef:af:eb:e7:be:3a:8a:d4:c0:23:
36:ce:74:f1:9f:3c:ea:92:a4:75:d8:11:f8:8b:08:9a:ee:59:
ab:0d:49:2f:1c:00:ec:3d:2a:19:0e:8c:72:44:cc:84:4f:08:
4f:21:aa:f6:f3:cf:d7:4c:e1:56:e4:60:52:b1:cf:d7:4d:75:
32:a6:a7:13:5c:f7:04:f7:96:57:0f:44:57:ec:83:e5:0e:d9:
69:64:77:ce:b1:42:ef:c0:c8:0f:85:45:20:31:29:22:0e:3d:
05:ab:9a:47:26:f4:61:39:b7:ff:29:f1:cd:87:3b:43:0d:ed:
45:fa:fb:74:e8:74:93:6a:2f:3a:54:e3:a0:a8:e0:d8:72:fd:
49:26:fe:40:fd:6d:53:41:4d:1e:02:9a:40:db:f8:96:50:c7:
f9:d8:e2:31:18:32:20:cc:02:44:32:8b:4a:83:db:dd:a9:ff:
3b:f8:c9:d8
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQma+fNyySgKaB1mFBCbFyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1
YmUxOTAwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTE3YmE2YWU2NzM3MTIzOTUzZWQ2N2E0MzljYWY4YzMxZTVjZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaNwf6DCR5/RZGSK/WfMH3Vr2a1A
YPIM1sTDQziHRoI8S1MKm6e4KJDI+FUehZY/QJOI+B8W/ORA5Nk3b9D7Mqmy91du
DDzTxo1lYqrKynFBnbLfZe4DmHg1LrkfJAYLFXndZibKMPqOd+2GRIKXWO88ikx2
WCWE63N1Jozynu1lirMm1x9v2jAGwGaGR678wdqmrCJ89P6vJD5xZeq654EMCCDf
bOJxdPqr/Cf4rkiHE+kQb+i5fahVuGK59TJQinpkdqMlJJpUQygdzSjM0Yc7TdkX
BPicgYpkVkFkOKzksqHS5+ZpoJgTD0GRj+csMF8N7aw/9pv3p4V/+64xAwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBUXumrmc3EjlT7WekOcr4wx5c0tMB8GA1UdIwQY
MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt
NjA4NTY0ODM5ZmQwLzEvRlJlNmF1WnpjU09WUHRaNlE1eXZqREhselMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw
LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDLuNIAwQD
TigoAwQEURXQAwQEURsAAwQDXV6oAwQCuTXUMA0GCSqGSIb3DQEBCwUAA4IBAQAK
x5/aioXCuubBwLfi26B2JX1mUO7bt6vxpL4YFY+utMu+XnBNclkOmdRn2lNQQA+k
R8h5MtcMdb4EWU/U6AvSAS/M8TxMOVNE5SRnN2993O+v6+e+OorUwCM2znTxnzzq
kqR12BH4iwia7lmrDUkvHADsPSoZDoxyRMyETwhPIar288/XTOFW5GBSsc/XTXUy
pqcTXPcE95ZXD0RX7IPlDtlpZHfOsULvwMgPhUUgMSkiDj0Fq5pHJvRhObf/KfHN
hztDDe1F+vt06HSTai86VOOgqODYcv1JJv5A/W1TQU0eAppA2/iWUMf52OIxGDIg
zAJEMotKg9vdqf87+MnY
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:43 2025 by rpki-client