Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/FXDFb34PBHFpzXqxsfO-MRRoL1w.roa
File: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (raw, json)
Hash identifier: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=
Subject key identifier: 15:70:C5:6F:7E:0F:04:71:69:CD:7A:B1:B1:F3:BE:31:14:68:2F:5C
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019420685580029C8923BF9664665943F4F5
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/FXDFb34PBHFpzXqxsfO-MRRoL1w.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33438
IP address blocks: 81.171.61.0/24 maxlen: 24
81.171.66.0/24 maxlen: 24
81.171.68.0/24 maxlen: 24
81.171.70.0/23 maxlen: 23
81.171.70.64/26 maxlen: 26
81.171.105.0/24 maxlen: 24
81.171.106.0/24 maxlen: 24
81.171.106.64/26 maxlen: 26
81.171.116.0/24 maxlen: 24
2001:4de0:200::/40 maxlen: 40
2001:4de0:400::/40 maxlen: 40
2001:4de0:402::/48 maxlen: 48
2001:4de0:500::/40 maxlen: 40
2001:4de0:600::/40 maxlen: 40
2001:4de0:700::/40 maxlen: 40
2001:4de0:1000::/48 maxlen: 48
2001:4de0:2000::/40 maxlen: 40
2001:4de0:2100::/40 maxlen: 40
2001:4de0:2105::/48 maxlen: 48
2001:4de0:2200::/40 maxlen: 40
2001:4de0:2202::/48 maxlen: 48
2001:4de0:2300::/40 maxlen: 40
2001:4de0:3000::/40 maxlen: 40
2001:4de0:3004::/48 maxlen: 48
2001:4de0:3100::/40 maxlen: 40
2001:4de0:4000::/40 maxlen: 40
2001:4de0:4100::/40 maxlen: 40
2001:4de0:4300::/40 maxlen: 40
2001:4de0:5010::/48 maxlen: 48
2001:4de0:6000::/40 maxlen: 40
2001:4de0:6102::/48 maxlen: 48
2001:4de0:6200::/40 maxlen: 40
2001:4de0:6300::/40 maxlen: 40
2001:4de0:7001::/48 maxlen: 48
2001:4de0:7002::/48 maxlen: 48
2001:4de0:7003::/48 maxlen: 48
2001:4de0:ac13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:55:80:02:9c:89:23:bf:96:64:66:59:43:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1570c56f7e0f047169cd7ab1b1f3be3114682f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:19:ee:fb:d1:ca:0f:e3:1a:26:4c:ef:19:
d6:87:e0:8e:0f:ff:d4:58:5a:10:16:52:6d:f7:52:
7c:e8:67:75:9e:ae:3a:bd:65:f2:37:25:17:58:b6:
04:97:88:8d:9f:23:b7:8e:8e:24:25:82:32:da:fb:
e0:b2:dc:7c:61:4e:eb:da:9e:4c:1d:73:1f:80:fb:
63:7f:36:86:04:a9:6e:35:54:67:0a:2c:a8:ff:d6:
38:9c:5d:13:5f:14:15:84:47:3d:bf:24:5f:f2:7b:
97:b5:44:61:bd:cb:aa:4d:94:2d:d0:72:55:07:80:
06:4f:8a:48:70:c5:c8:91:ef:7f:63:ef:a9:d6:a2:
e8:34:03:6a:57:05:21:7a:a3:e0:41:3f:df:cf:80:
50:70:a1:16:32:4f:96:80:47:95:c6:f8:d6:c6:b1:
af:e5:f3:aa:4b:a0:72:b9:11:11:e9:bc:c0:08:d7:
e2:64:1b:eb:53:0a:54:61:22:70:c3:41:14:1e:12:
54:3a:14:a1:6c:b3:34:6e:c2:1c:47:d1:18:15:77:
a0:9c:0a:1e:74:7a:fb:05:9a:83:02:56:ff:36:21:
5f:ba:7b:28:df:9b:cb:db:29:84:46:80:ef:78:a2:
4f:be:07:8d:9c:53:4e:c8:59:ca:11:26:3e:f0:9c:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:C5:6F:7E:0F:04:71:69:CD:7A:B1:B1:F3:BE:31:14:68:2F:5C
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/FXDFb34PBHFpzXqxsfO-MRRoL1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.61.0/24
81.171.66.0/24
81.171.68.0/24
81.171.70.0/23
81.171.105.0-81.171.106.255
81.171.116.0/24
IPv6:
2001:4de0:200::/40
2001:4de0:400::/38
2001:4de0:1000::/48
2001:4de0:2000::/38
2001:4de0:3000::/39
2001:4de0:4000::/39
2001:4de0:4300::/40
2001:4de0:5010::/48
2001:4de0:6000::/40
2001:4de0:6102::/48
2001:4de0:6200::/39
2001:4de0:7001::-2001:4de0:7003:ffff:ffff:ffff:ffff:ffff
2001:4de0:ac13::/48
Signature Algorithm: sha256WithRSAEncryption
20:bb:da:e1:5b:33:ad:37:5d:5b:0c:db:f5:fc:bc:96:8d:df:
70:a4:bb:2c:d8:4a:22:a1:d1:0a:a7:0d:0f:a7:c1:db:52:bf:
9d:96:30:46:75:12:c4:63:25:f1:e5:70:60:4e:01:29:7a:85:
80:62:90:73:75:d1:8e:4c:56:6e:13:0b:39:b2:07:88:ea:8d:
de:bd:4a:5f:e1:b8:58:18:c2:31:01:67:ae:6f:9b:dc:c0:46:
c4:a7:e3:19:c5:d7:22:b0:41:df:58:18:c3:4e:ce:6c:fa:0b:
56:4c:b8:12:00:2f:46:fb:1d:04:70:b1:19:8e:e0:a4:41:b4:
c4:b4:94:91:9e:8e:59:36:95:bf:7f:92:e8:dd:c1:a1:16:8c:
83:49:05:0f:99:89:4e:0a:ee:3c:51:fc:36:6e:e7:46:d7:a7:
c7:77:8c:fd:6e:69:45:e0:04:0a:38:df:19:b3:fd:11:cc:26:
54:ef:e2:f4:fd:f9:ef:ca:3a:df:41:ec:24:bc:3c:04:e5:36:
e0:51:ab:a5:32:d5:83:5d:61:92:bf:c7:3d:db:11:36:0e:d9:
46:5f:d6:b4:e2:5c:37:49:41:6d:8e:82:b2:91:a9:89:77:29:
0d:ae:16:28:02:47:b2:29:79:57:57:bc:75:2c:5e:26:42:6c:
47:fb:55:36
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZQgaFWAApyJI7+WZGZZQ/T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTcwYzU2ZjdlMGYwNDcxNjljZDdhYjFiMWYzYmUzMTE0NjgyZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4Z7vvRyg/jGiZM7xnWh+COD//U
WFoQFlJt91J86Gd1nq46vWXyNyUXWLYEl4iNnyO3jo4kJYIy2vvgstx8YU7r2p5M
HXMfgPtjfzaGBKluNVRnCiyo/9Y4nF0TXxQVhEc9vyRf8nuXtURhvcuqTZQt0HJV
B4AGT4pIcMXIke9/Y++p1qLoNANqVwUheqPgQT/fz4BQcKEWMk+WgEeVxvjWxrGv
5fOqS6ByuRER6bzACNfiZBvrUwpUYSJww0EUHhJUOhShbLM0bsIcR9EYFXegnAoe
dHr7BZqDAlb/NiFfunso35vL2ymERoDveKJPvgeNnFNOyFnKESY+8JxJ0QIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFBVwxW9+DwRxac16sbHzvjEUaC9cMB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvRlhERmIzNFBCSEZwelhxeHNmTy1NUlJvTDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDAyBAIAATAsAwQAUas9
AwQAUatCAwQAUatEAwQBUatGMAwDBABRq2kDBABRq2oDBABRq3QwfgQCAAIweAMG
ACABTeACAwYCIAFN4AQDBwAgAU3gEAADBgIgAU3gIAMGASABTeAwAwYBIAFN4EAD
BgAgAU3gQwMHACABTeBQEAMGACABTeBgAwcAIAFN4GECAwYBIAFN4GIwEgMHACAB
TeBwAQMHAiABTeBwAAMHACABTeCsEzANBgkqhkiG9w0BAQsFAAOCAQEAILva4Vsz
rTddWwzb9fy8lo3fcKS7LNhKIqHRCqcND6fB21K/nZYwRnUSxGMl8eVwYE4BKXqF
gGKQc3XRjkxWbhMLObIHiOqN3r1KX+G4WBjCMQFnrm+b3MBGxKfjGcXXIrBB31gY
w07ObPoLVky4EgAvRvsdBHCxGY7gpEG0xLSUkZ6OWTaVv3+S6N3BoRaMg0kFD5mJ
TgruPFH8Nm7nRtenx3eM/W5pReAECjjfGbP9EcwmVO/i9P3578o630HsJLw8BOU2
4FGrpTLVg11hkr/HPdsRNg7ZRl/WtOJcN0lBbY6CspGpiXcpDa4WKAJHsil5V1e8
dSxeJkJsR/tVNg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:07:07 2025 by rpki-client