Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa
File: F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa (raw, json)
Hash identifier: zRsQaP7Nv1WM255tSSBh0dX4WTRA/us6qfJYP5qwxpA=
Subject key identifier: 17:9F:45:94:7F:F3:0D:53:94:91:0F:EC:BF:B4:20:90:DF:F6:FA:8F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5718E7BD06A79D17A84D5E29990C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201634
IP address blocks: 87.107.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:57:18:e7:bd:06:a7:9d:17:a8:4d:5e:29:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=179f45947ff30d5394910fecbfb42090dff6fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:92:df:51:a0:bc:c8:44:ef:c1:1d:ee:d5:
53:4b:3c:52:2e:01:78:19:cd:c2:12:70:ec:c8:6f:
c1:88:45:dc:f2:0a:3f:aa:23:7a:7b:1f:73:21:2c:
70:21:60:63:ea:40:c2:e7:a3:dc:f8:39:7c:51:fd:
3c:d0:f8:2e:97:ff:fb:9d:7a:27:8d:da:2b:90:0b:
6a:bc:86:63:9b:20:91:e4:72:ce:a3:14:ed:00:eb:
d1:7c:84:f8:6d:17:9b:58:8a:5b:a2:5b:9e:e9:41:
9a:41:bf:ca:8c:02:2e:62:78:24:16:54:19:d8:fa:
aa:89:00:d0:64:6e:e6:74:46:e1:39:ac:de:b7:4b:
a4:dc:37:6d:8a:d8:08:cc:ba:5a:ec:2a:92:f5:cb:
96:3c:a3:7d:fb:81:d9:ad:f3:57:73:04:54:29:60:
3a:2b:dc:0b:82:7b:72:77:c8:b9:d1:68:c4:47:3c:
3a:d3:83:83:14:f4:84:a2:69:4a:a7:57:6c:01:19:
ee:55:5c:24:5a:c6:ce:bf:e6:74:c2:8a:34:c9:14:
22:2b:ba:10:99:d9:af:26:56:54:1e:b3:50:4d:f1:
36:f1:2c:c2:03:96:ae:30:4f:74:8f:0a:23:de:36:
16:2d:be:78:a8:ad:25:d6:f2:1f:f7:08:40:7b:4a:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:45:94:7F:F3:0D:53:94:91:0F:EC:BF:B4:20:90:DF:F6:FA:8F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F59FlH_zDVOUkQ_sv7QgkN_2-o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.190.0/24
Signature Algorithm: sha256WithRSAEncryption
42:24:a1:0d:76:78:ad:6a:19:20:93:fc:ff:f2:f9:16:7c:57:
5a:30:c8:e9:7d:e0:9d:51:33:0b:b5:ce:11:03:51:18:d1:55:
45:29:26:2a:4d:42:ef:72:fe:8a:7d:b4:61:6a:c3:2b:de:3c:
f2:58:ef:5b:8e:d1:d8:37:0a:0f:eb:0c:9a:07:84:ff:c9:e5:
e6:d9:09:eb:f6:d8:84:40:8f:a9:e2:3d:9c:b0:14:bc:9c:3f:
29:cc:3e:ec:e1:ca:10:71:3c:1d:38:01:0e:e2:ed:3e:1a:8c:
ef:b6:1c:6b:94:8a:95:f7:03:cd:bb:ef:7c:f1:c0:f3:34:b9:
47:f1:29:82:be:ed:e8:34:43:90:5a:ec:82:77:f2:56:cf:f4:
68:0c:27:30:37:2f:8b:16:41:b8:9b:56:f2:46:14:a1:ba:b2:
76:34:a1:00:7a:4a:9c:48:24:cf:ba:4f:25:dc:92:c2:fa:14:
5d:97:47:3b:aa:92:ec:01:45:48:af:f3:47:06:54:61:c1:46:
48:34:c3:fd:03:35:49:b7:41:95:0a:e1:f8:8c:34:88:fa:e4:
25:02:fa:72:64:c4:cb:8e:f2:d3:e0:27:1e:54:4c:92:bb:32:
79:d2:18:9d:50:cf:bd:26:47:a4:b1:f3:96:d8:da:ce:c3:e7:
74:93:7a:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+lcY570Gp50XqE1eKZkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzlmNDU5NDdmZjMwZDUzOTQ5MTBmZWNiZmI0MjA5MGRmZjZmYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EKS31GgvMhE78Ed7tVTSzxSLgF4
Gc3CEnDsyG/BiEXc8go/qiN6ex9zISxwIWBj6kDC56Pc+Dl8Uf080Pgul//7nXon
jdorkAtqvIZjmyCR5HLOoxTtAOvRfIT4bRebWIpbolue6UGaQb/KjAIuYngkFlQZ
2PqqiQDQZG7mdEbhOazet0uk3DdtitgIzLpa7CqS9cuWPKN9+4HZrfNXcwRUKWA6
K9wLgntyd8i50WjERzw604ODFPSEomlKp1dsARnuVVwkWsbOv+Z0woo0yRQiK7oQ
mdmvJlZUHrNQTfE28SzCA5auME90jwoj3jYWLb54qK0l1vIf9whAe0rw9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBefRZR/8w1TlJEP7L+0IJDf9vqPMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvRjU5RmxIX3pEVk9Va1Ffc3Y3UWdrTl8yLW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2u+MA0G
CSqGSIb3DQEBCwUAA4IBAQBCJKENdnitahkgk/z/8vkWfFdaMMjpfeCdUTMLtc4R
A1EY0VVFKSYqTULvcv6KfbRhasMr3jzyWO9bjtHYNwoP6wyaB4T/yeXm2Qnr9tiE
QI+p4j2csBS8nD8pzD7s4coQcTwdOAEO4u0+GozvthxrlIqV9wPNu+988cDzNLlH
8SmCvu3oNEOQWuyCd/JWz/RoDCcwNy+LFkG4m1byRhShurJ2NKEAekqcSCTPuk8l
3JLC+hRdl0c7qpLsAUVIr/NHBlRhwUZINMP9AzVJt0GVCuH4jDSI+uQlAvpyZMTL
jvLT4CceVEySuzJ50hidUM+9JkeksfOW2NrOw+d0k3qA
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:35 2025 by rpki-client