Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/FVfeZmdBS01uRUol0vp78tTUSz0.roa
File: FVfeZmdBS01uRUol0vp78tTUSz0.roa (raw, json)
Hash identifier: 4aEgoAhQ3ch2tDNNzscmboR2LUYOG3WYhnAv1DkW2zA=
Subject key identifier: 15:57:DE:66:67:41:4B:4D:6E:45:4A:25:D2:FA:7B:F2:D4:D4:4B:3D
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 018CC49305380D01B167A020EB479C81DBB5
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/FVfeZmdBS01uRUol0vp78tTUSz0.roa
Signing time: Mon 01 Jan 2024 10:30:18 +0000
ROA not before: Mon 01 Jan 2024 10:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2072
IP address blocks: 193.51.165.0/24 maxlen: 24
195.83.166.0/24 maxlen: 24
193.50.0.0/24 maxlen: 24
193.50.2.0/24 maxlen: 24
193.50.1.0/24 maxlen: 24
193.54.195.0/24 maxlen: 24
193.51.128.128/25 maxlen: 25
195.221.157.0/24 maxlen: 24
195.221.159.0/24 maxlen: 24
195.221.158.0/24 maxlen: 24
193.54.225.0/24 maxlen: 24
195.221.160.0/24 maxlen: 24
195.221.162.0/24 maxlen: 24
195.221.161.0/24 maxlen: 24
195.83.222.0/24 maxlen: 24
195.83.221.0/24 maxlen: 24
195.83.223.0/24 maxlen: 24
193.50.68.0/24 maxlen: 24
193.50.67.0/24 maxlen: 24
193.49.22.0/24 maxlen: 24
193.50.201.0/24 maxlen: 24
193.51.128.56/29 maxlen: 29
194.57.241.0/26 maxlen: 26
194.57.241.0/24 maxlen: 24
193.51.66.0/24 maxlen: 24
193.51.65.0/24 maxlen: 24
193.51.128.48/29 maxlen: 29
193.49.163.0/24 maxlen: 24
194.57.183.0/24 maxlen: 24
194.199.85.0/24 maxlen: 24
194.199.84.0/24 maxlen: 24
194.199.83.0/24 maxlen: 24
194.199.86.0/24 maxlen: 24
194.199.88.0/24 maxlen: 24
194.199.87.0/24 maxlen: 24
194.199.90.0/24 maxlen: 24
194.199.89.0/24 maxlen: 24
2001:660:3020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:05:38:0d:01:b1:67:a0:20:eb:47:9c:81:db:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 10:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1557de6667414b4d6e454a25d2fa7bf2d4d44b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:73:9a:fa:db:74:fd:d3:28:1b:7b:80:cf:
b6:27:64:4f:f8:b4:2a:b1:a4:27:e8:94:41:b4:42:
30:7c:45:1b:8b:39:21:ab:30:c2:1b:f7:d2:0c:93:
89:04:1e:6e:a9:d5:22:83:b0:78:d5:14:94:46:94:
df:38:55:a0:78:5e:13:fd:1e:96:b2:8f:18:3b:b5:
80:a3:3d:12:c6:4e:f3:e9:36:a2:c5:3e:96:9c:bd:
17:f3:e0:50:4e:8d:98:31:d4:e8:0a:e6:11:43:50:
b0:72:23:92:e2:f8:b4:f6:66:6d:e0:ad:2d:2e:a4:
c6:46:c7:88:d0:ea:17:00:e0:be:eb:cd:11:e9:fc:
7c:87:82:f0:75:44:30:dd:f9:7d:95:cf:0e:1e:6e:
2b:96:a3:ec:eb:2c:39:d8:97:18:97:c4:9d:b7:98:
0f:d5:bd:18:28:00:56:bf:4d:52:5b:ca:ac:51:7b:
f4:01:78:ba:a9:5c:b4:0d:93:46:da:1b:ad:8e:cc:
98:83:f2:d6:97:5a:af:e1:39:da:fb:07:08:84:41:
0c:de:59:c4:a9:63:42:0b:0a:8a:71:64:93:be:b6:
ff:ca:16:be:dc:08:21:4b:32:66:36:23:dd:43:f7:
d2:49:fd:f6:9a:1d:79:b3:76:7d:a4:37:dc:4f:55:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:DE:66:67:41:4B:4D:6E:45:4A:25:D2:FA:7B:F2:D4:D4:4B:3D
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/FVfeZmdBS01uRUol0vp78tTUSz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.49.22.0/24
193.49.163.0/24
193.50.0.0-193.50.2.255
193.50.67.0-193.50.68.255
193.50.201.0/24
193.51.65.0-193.51.66.255
193.51.128.48/28
193.51.128.128/25
193.51.165.0/24
193.54.195.0/24
193.54.225.0/24
194.57.183.0/24
194.57.241.0/24
194.199.83.0-194.199.90.255
195.83.166.0/24
195.83.221.0-195.83.223.255
195.221.157.0-195.221.162.255
IPv6:
2001:660:3020::/48
Signature Algorithm: sha256WithRSAEncryption
2f:43:a9:5e:ce:30:b5:a1:19:6d:bd:29:d0:67:0e:17:3f:4e:
b7:1a:99:f9:34:c7:2d:91:69:6e:19:46:43:09:e4:f4:9b:6a:
3e:67:96:5f:08:8a:55:c3:7e:1a:99:c7:cd:6d:b3:31:f3:ae:
b9:0c:67:7a:a4:a9:cd:a2:5a:44:f6:5c:b7:69:32:c3:8a:2f:
da:c7:5b:9d:72:e0:b1:b3:cf:db:76:1e:18:ed:24:8f:6b:90:
e0:1c:d0:ea:69:66:f3:95:61:35:06:43:35:17:e3:05:18:0b:
08:1e:20:bc:80:d8:1a:1b:5d:f6:16:60:fe:47:3e:7c:46:27:
a0:c9:3c:92:d0:b8:e3:08:5e:0e:b8:00:a6:62:eb:47:ae:da:
10:eb:08:de:86:ac:68:ea:5d:7b:c6:bd:67:f2:7d:f3:db:2b:
bd:0b:da:fc:df:39:2d:2e:40:8c:d4:62:46:57:ac:43:a9:52:
93:12:92:fd:f3:73:b0:64:8f:99:c7:8a:1d:19:37:42:46:44:
69:0f:89:b6:96:25:0d:1a:9e:b5:9f:d8:e1:2f:06:db:96:90:
1c:6b:ba:83:9d:48:8a:7c:7a:57:7c:1b:1f:66:47:5a:a7:3f:
82:36:3e:af:a2:ea:e6:26:29:29:4d:98:bc:89:48:b4:d8:5c:
2e:4d:61:45
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYzEkwU4DQGxZ6Ag60ecgdu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjQwMTAxMTAzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTU3ZGU2NjY3NDE0YjRkNmU0NTRhMjVkMmZhN2JmMmQ0ZDQ0YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxFzmvrbdP3TKBt7gM+2J2RP+LQq
saQn6JRBtEIwfEUbizkhqzDCG/fSDJOJBB5uqdUig7B41RSURpTfOFWgeF4T/R6W
so8YO7WAoz0Sxk7z6TaixT6WnL0X8+BQTo2YMdToCuYRQ1CwciOS4vi09mZt4K0t
LqTGRseI0OoXAOC+680R6fx8h4LwdUQw3fl9lc8OHm4rlqPs6yw52JcYl8Sdt5gP
1b0YKABWv01SW8qsUXv0AXi6qVy0DZNG2hutjsyYg/LWl1qv4Tna+wcIhEEM3lnE
qWNCCwqKcWSTvrb/yha+3AghSzJmNiPdQ/fSSf32mh15s3Z9pDfcT1UmOwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFBVX3mZnQUtNbkVKJdL6e/LU1Es9MB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvRlZmZVptZEJTMDF1UlVvbDB2cDc4dFRVU3owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBngQCAAEwgZcDBADB
MRYDBADBMaMwCwMDAcEyAwQAwTICMAwDBADBMkMDBADBMkQDBADBMskwDAMEAMEz
QQMEAMEzQgMFBMEzgDADBQfBM4CAAwQAwTOlAwQAwTbDAwQAwTbhAwQAwjm3AwQA
wjnxMAwDBADCx1MDBADCx1oDBADDU6YwDAMEAMNT3QMEBcNTwDAMAwQAw92dAwQA
w92iMA8EAgACMAkDBwAgAQZgMCAwDQYJKoZIhvcNAQELBQADggEBAC9DqV7OMLWh
GW29KdBnDhc/Trcamfk0xy2RaW4ZRkMJ5PSbaj5nll8IilXDfhqZx81tszHzrrkM
Z3qkqc2iWkT2XLdpMsOKL9rHW51y4LGzz9t2HhjtJI9rkOAc0OppZvOVYTUGQzUX
4wUYCwgeILyA2BobXfYWYP5HPnxGJ6DJPJLQuOMIXg64AKZi60eu2hDrCN6GrGjq
XXvGvWfyffPbK70L2vzfOS0uQIzUYkZXrEOpUpMSkv3zc7Bkj5nHih0ZN0JGRGkP
ibaWJQ0anrWf2OEvBtuWkBxruoOdSIp8eld8Gx9mR1qnP4I2Pq+i6uYmKSlNmLyJ
SLTYXC5NYUU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:10:42 2025 by rpki-client