Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/f_zA5VXQiZFgOmSt_2meFyO-Irc.roa
File: f_zA5VXQiZFgOmSt_2meFyO-Irc.roa (raw, json)
Hash identifier: hcXBeCt6JJT4Qf33k2zNsi+ncR9i9j5FrSCdAB5oE0Y=
Subject key identifier: 7F:FC:C0:E5:55:D0:89:91:60:3A:64:AD:FF:69:9E:17:23:BE:22:B7
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 0194274827E5B56A43DBF87779A2659F4672
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/f_zA5VXQiZFgOmSt_2meFyO-Irc.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213038
IP address blocks: 31.220.151.0/24 maxlen: 24
89.36.197.0/24 maxlen: 24
89.40.170.0/24 maxlen: 24
89.42.24.0/24 maxlen: 24
185.145.252.0/24 maxlen: 24
185.145.253.0/24 maxlen: 24
185.145.254.0/24 maxlen: 24
185.145.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:e5:b5:6a:43:db:f8:77:79:a2:65:9f:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffcc0e555d08991603a64adff699e1723be22b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:c1:ec:c0:67:6e:b6:a7:df:41:da:96:18:
61:d2:0e:6d:08:67:0a:8b:5f:39:ca:36:f6:1e:f7:
f7:71:5d:91:4b:d8:e7:bc:74:f5:a2:38:1b:01:ac:
b6:bb:b8:69:dc:f9:c8:c2:df:18:9a:1d:f3:e3:1d:
c4:d2:0f:ae:b1:13:05:7e:d9:8c:ca:46:5c:f4:1b:
93:4d:d8:0a:9c:68:be:80:89:86:4d:31:93:68:4a:
a7:0e:21:be:2e:ab:7a:bc:59:67:d2:2e:24:ad:14:
e9:c4:13:ac:2d:55:4d:f7:0d:13:32:05:56:9e:e0:
0c:fd:ed:28:72:70:d6:06:f7:15:51:1f:4e:f3:86:
dc:51:fd:11:04:7d:f1:3c:67:51:65:a8:d2:b1:a7:
99:cb:84:f3:8c:bf:5e:53:76:e1:72:42:7f:1b:75:
86:7b:54:2e:33:99:9b:a5:8e:6c:20:c4:20:5d:3c:
a0:95:7d:03:2c:26:53:77:ab:fa:70:0e:83:b0:f6:
b6:96:a7:4f:77:3d:53:fe:d7:4c:de:69:5e:8a:e0:
1f:5c:8d:9e:a4:dc:33:6c:91:21:4c:88:e1:90:ac:
26:f8:73:8e:15:4d:34:01:b0:6c:3a:03:f8:2c:35:
06:10:67:9c:32:b2:8f:77:47:d4:d8:bf:b3:b4:89:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:C0:E5:55:D0:89:91:60:3A:64:AD:FF:69:9E:17:23:BE:22:B7
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/f_zA5VXQiZFgOmSt_2meFyO-Irc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.151.0/24
89.36.197.0/24
89.40.170.0/24
89.42.24.0/24
185.145.252.0/22
Signature Algorithm: sha256WithRSAEncryption
00:6b:fd:b8:0a:9f:0e:72:38:8d:38:ea:f8:cb:c2:43:4b:08:
c0:70:83:c4:d7:ca:6a:b9:49:15:2d:57:70:7e:f2:0f:2c:fb:
bb:5d:f9:8b:8e:19:7c:f6:20:dc:07:07:1f:e8:5e:f8:80:88:
f9:9a:6c:e9:aa:c9:08:e6:5a:6e:07:73:c3:74:f1:75:1c:0b:
cb:cc:30:71:14:e0:31:06:ce:08:f0:cf:2a:34:48:fb:af:01:
26:76:6d:08:ae:7e:80:40:47:01:c7:61:42:6d:7f:26:3f:6e:
50:dd:65:5d:32:e9:b6:c4:37:11:54:86:82:58:4d:6a:f4:60:
47:22:67:0c:57:68:a2:c2:c0:9d:7a:af:de:1c:db:6e:59:5a:
51:c7:ed:cc:42:af:dc:64:af:0d:96:98:bb:8d:62:79:0c:d8:
5f:93:c5:6c:b6:26:75:b4:89:95:f7:37:72:ae:db:37:59:f6:
89:ae:55:99:41:af:26:02:f7:62:ae:38:d5:d3:1e:91:8b:9c:
3f:1f:ff:27:3d:c2:06:f7:97:4d:05:bc:fd:83:9c:43:21:9e:
0e:2b:20:72:07:36:99:b6:0a:bf:57:3c:e0:a5:74:b4:a6:08:
8c:fa:fc:fe:64:c1:a6:66:1b:4e:9e:b1:a8:6f:56:f8:7c:68:
4e:92:29:08
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQnSCfltWpD2/h3eaJln0ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjAxNzcxZDFjYzhmZDExNGM0NmE2MTYyMDZhYTRjNTlk
YmRjMTkwHhcNMjUwMTAyMTM1MDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmZjYzBlNTU1ZDA4OTkxNjAzYTY0YWRmZjY5OWUxNzIzYmUyMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/DB7MBnbran30Halhhh0g5tCGcK
i185yjb2Hvf3cV2RS9jnvHT1ojgbAay2u7hp3PnIwt8Ymh3z4x3E0g+usRMFftmM
ykZc9BuTTdgKnGi+gImGTTGTaEqnDiG+Lqt6vFln0i4krRTpxBOsLVVN9w0TMgVW
nuAM/e0ocnDWBvcVUR9O84bcUf0RBH3xPGdRZajSsaeZy4TzjL9eU3bhckJ/G3WG
e1QuM5mbpY5sIMQgXTyglX0DLCZTd6v6cA6DsPa2lqdPdz1T/tdM3mleiuAfXI2e
pNwzbJEhTIjhkKwm+HOOFU00AbBsOgP4LDUGEGecMrKPd0fU2L+ztIl3nwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH/8wOVV0ImRYDpkrf9pnhcjviK3MB8GA1UdIwQY
MBaAFEbwF3HRzI/RFMRqYWIGqkxZ29wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZTU3YTMtYTE4MS00NWRmLWI0YWUt
MzE2ZjZkYWJmZmJmLzEvZl96QTVWWFFpWkZnT21TdF8ybWVGeU8tSXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZTU3YTMtYTE4MS00NWRmLWI0YWUtMzE2ZjZkYWJmZmJm
LzEvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH9yXAwQA
WSTFAwQAWSiqAwQAWSoYAwQCuZH8MA0GCSqGSIb3DQEBCwUAA4IBAQAAa/24Cp8O
cjiNOOr4y8JDSwjAcIPE18pquUkVLVdwfvIPLPu7XfmLjhl89iDcBwcf6F74gIj5
mmzpqskI5lpuB3PDdPF1HAvLzDBxFOAxBs4I8M8qNEj7rwEmdm0Irn6AQEcBx2FC
bX8mP25Q3WVdMum2xDcRVIaCWE1q9GBHImcMV2iiwsCdeq/eHNtuWVpRx+3MQq/c
ZK8Nlpi7jWJ5DNhfk8VstiZ1tImV9zdyrts3WfaJrlWZQa8mAvdirjjV0x6Ri5w/
H/8nPcIG95dNBbz9g5xDIZ4OKyByBzaZtgq/VzzgpXS0pgiM+vz+ZMGmZhtOnrGo
b1b4fGhOkikI
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:59:36 2025 by rpki-client