Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa
File: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (raw, json)
Hash identifier: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=
Subject key identifier: 16:2A:B0:2A:2F:D0:F0:50:3D:4E:51:D5:8A:80:1F:B3:53:20:A8:E9
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCCF8C9E45B57C5B8960CD647A011
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202856
IP address blocks: 80.120.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cc:f8:c9:e4:5b:57:c5:b8:96:0c:d6:47:a0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162ab02a2fd0f0503d4e51d58a801fb35320a8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:cc:bf:63:cd:63:e9:a9:10:cc:55:14:c6:
4e:9b:cd:0b:62:00:76:bc:93:b8:cc:95:5e:33:a1:
4b:ff:b8:c4:45:d9:c4:e4:63:3c:1d:86:e3:ab:2c:
b5:7b:bf:9b:73:d7:44:ff:c5:2b:94:7a:23:9b:4f:
cb:9d:47:3d:41:f6:80:65:3d:fd:13:83:63:29:bb:
b9:36:90:11:60:b4:6a:7b:fa:4d:3d:19:fa:39:31:
b0:d2:c5:90:bf:9f:e0:12:4e:68:fb:10:78:f0:1d:
de:f0:50:e0:11:bd:a2:d7:41:8a:97:3d:18:2e:ab:
1f:a4:dd:a2:e6:12:17:f7:f7:32:71:32:ab:26:4a:
b0:20:aa:53:e9:f5:95:6d:e1:01:0d:5d:38:ee:9a:
0f:3c:9e:41:9b:8a:1c:13:79:8a:12:ad:02:1a:0c:
11:a2:52:85:1c:01:de:3d:f7:09:07:7c:65:f9:c9:
a4:eb:16:e8:97:81:8c:91:06:a6:c1:78:ae:df:ed:
55:44:a5:3e:46:49:2e:d6:4e:04:33:df:0e:dc:cf:
f0:8f:8b:21:d8:44:c9:dd:7d:c9:4b:3d:d9:9b:73:
4b:37:68:35:ef:35:cc:64:eb:87:dc:2c:03:97:ca:
84:5e:cb:09:0d:1c:e9:7c:5a:63:c4:74:c0:31:09:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2A:B0:2A:2F:D0:F0:50:3D:4E:51:D5:8A:80:1F:B3:53:20:A8:E9
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.145.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9f:6b:32:2d:26:1a:65:c4:67:6d:87:01:9d:bd:f2:d5:29:
98:96:b2:27:84:6a:9a:bb:43:e7:e0:cb:05:82:11:d4:50:df:
8b:d5:4c:f4:de:34:4c:28:35:38:8e:8d:2b:38:93:1c:f6:f7:
cf:43:a9:9b:cb:89:4d:9d:8c:90:77:17:01:e9:65:8e:5c:5c:
7f:ec:83:50:a0:40:da:8b:bd:2e:17:67:9b:fd:c8:4e:d8:d9:
25:d0:6f:3c:1c:c8:52:20:3d:bc:c0:00:03:0b:3f:57:db:03:
79:ff:19:4a:29:e6:ad:87:71:48:de:13:7b:21:7a:fd:b9:46:
62:78:65:62:33:f2:64:7c:45:22:ad:c5:19:8f:d3:a6:cb:58:
07:3d:ec:02:4e:89:bf:3b:34:15:a2:9c:3a:89:b4:9c:91:30:
17:81:0d:9d:b0:aa:df:62:a7:06:91:f4:46:2d:8e:a1:38:5b:
53:dd:55:dd:4e:b8:52:12:de:a4:e7:b3:58:a0:ad:f2:05:f4:
62:41:91:b8:ee:40:18:12:88:a8:6a:b1:c7:58:8a:ec:95:00:
06:c4:9b:08:6e:04:9d:33:10:52:6e:69:b4:cc:c3:fd:a9:09:
03:fa:4e:93:d2:b3:0a:e3:1c:5d:9f:c6:fb:62:dd:9c:30:6a:
db:d5:59:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8z4yeRbV8W4lgzWR6ARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjUwMTAyMDk0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJhYjAyYTJmZDBmMDUwM2Q0ZTUxZDU4YTgwMWZiMzUzMjBhOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWrMv2PNY+mpEMxVFMZOm80LYgB2
vJO4zJVeM6FL/7jERdnE5GM8HYbjqyy1e7+bc9dE/8UrlHojm0/LnUc9QfaAZT39
E4NjKbu5NpARYLRqe/pNPRn6OTGw0sWQv5/gEk5o+xB48B3e8FDgEb2i10GKlz0Y
LqsfpN2i5hIX9/cycTKrJkqwIKpT6fWVbeEBDV047poPPJ5Bm4ocE3mKEq0CGgwR
olKFHAHePfcJB3xl+cmk6xbol4GMkQamwXiu3+1VRKU+Rkku1k4EM98O3M/wj4sh
2ETJ3X3JSz3Zm3NLN2g17zXMZOuH3CwDl8qEXssJDRzpfFpjxHTAMQkAEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBYqsCov0PBQPU5R1YqAH7NTIKjpMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvRmlxd0tpX1E4RkE5VGxIVmlvQWZzMU1ncU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHiRMA0G
CSqGSIb3DQEBCwUAA4IBAQB5n2syLSYaZcRnbYcBnb3y1SmYlrInhGqau0Pn4MsF
ghHUUN+L1Uz03jRMKDU4jo0rOJMc9vfPQ6mby4lNnYyQdxcB6WWOXFx/7INQoEDa
i70uF2eb/chO2Nkl0G88HMhSID28wAADCz9X2wN5/xlKKeath3FI3hN7IXr9uUZi
eGViM/JkfEUircUZj9Omy1gHPewCTom/OzQVopw6ibSckTAXgQ2dsKrfYqcGkfRG
LY6hOFtT3VXdTrhSEt6k57NYoK3yBfRiQZG47kAYEoioarHHWIrslQAGxJsIbgSd
MxBSbmm0zMP9qQkD+k6T0rMK4xxdn8b7Yt2cMGrb1Vnh
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:41 2025 by rpki-client