Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/Fe3o1H2NZOXORu_5Q3H36pU8vac.roa
File: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (raw, json)
Hash identifier: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=
Subject key identifier: 15:ED:E8:D4:7D:8D:64:E5:CE:46:EF:F9:43:71:F7:EA:95:3C:BD:A7
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019425FC63E1626F7E26820CCB46D7796D75
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/Fe3o1H2NZOXORu_5Q3H36pU8vac.roa
Signing time: Thu 02 Jan 2025 07:48:05 +0000
ROA not before: Thu 02 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207080
IP address blocks: 185.194.113.0/24 maxlen: 24
2a14:5340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:63:e1:62:6f:7e:26:82:0c:cb:46:d7:79:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ede8d47d8d64e5ce46eff94371f7ea953cbda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:a6:ea:55:4f:d4:50:93:3d:40:69:28:6c:
ce:9c:f6:78:43:5c:81:84:23:d6:99:83:85:79:99:
fc:b2:13:f9:0a:59:49:85:41:01:0f:93:9f:16:df:
97:23:cd:68:c8:f9:44:5c:8e:0d:40:ec:41:fc:5b:
dc:17:c3:c1:d2:b7:f8:03:61:ee:98:d7:60:01:e6:
7d:99:02:13:34:b8:71:c4:55:04:18:54:e0:90:b6:
3d:d7:c8:e4:76:c9:54:89:d7:28:50:2a:c2:2b:15:
fc:d9:c9:4d:ac:89:3c:b7:0c:d8:78:bb:6f:14:e6:
47:60:60:8e:f9:e8:ce:b6:bd:80:a5:73:d4:16:d0:
3d:e9:cb:fa:b6:eb:31:65:30:80:d4:83:2c:3d:c6:
fa:12:26:a9:f4:e5:05:1e:bf:c0:12:4e:d3:e9:78:
9c:14:3f:18:fc:c2:aa:86:6c:95:6c:e9:6d:41:ab:
be:cf:12:46:32:65:e6:4a:65:a4:5c:fa:ab:5d:d7:
d9:61:61:71:1d:b5:d9:0d:5c:26:b3:65:84:c9:01:
37:ec:e8:5c:5e:98:7f:a8:92:ac:65:56:3a:a5:e0:
87:bc:ed:91:e5:17:c7:07:30:05:6f:07:de:cd:92:
2c:ad:17:b7:13:31:e8:05:75:a9:54:ff:42:e3:36:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:E8:D4:7D:8D:64:E5:CE:46:EF:F9:43:71:F7:EA:95:3C:BD:A7
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/Fe3o1H2NZOXORu_5Q3H36pU8vac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.113.0/24
IPv6:
2a14:5340::/29
Signature Algorithm: sha256WithRSAEncryption
0d:26:83:d0:f0:31:89:64:86:ba:ff:82:f6:5f:9b:bc:b4:24:
55:b2:88:c9:4c:b5:52:f9:7b:a6:c7:70:58:4a:0c:b6:a2:41:
5e:37:be:9f:5f:f8:88:77:09:12:a3:0a:6c:c7:dd:a8:9d:b2:
bb:ea:cb:0b:7d:ba:65:b8:dc:3e:20:80:84:d4:d0:7c:19:f9:
c2:32:30:a1:ce:d7:53:0d:29:14:dc:95:2f:a2:5d:74:ec:06:
8f:9b:a7:f0:e4:d9:50:eb:d2:4f:b5:ee:4b:d5:34:98:46:d1:
0b:6e:ca:fb:79:fb:88:f8:f5:c5:34:8d:81:93:2b:d3:d4:76:
e1:35:c3:2d:32:84:04:dd:d0:5d:c3:93:b9:65:ed:88:24:3e:
1c:a1:93:2e:81:c5:27:e3:c3:05:2e:44:e5:e0:26:02:0f:0b:
c9:b2:89:01:04:63:cf:8a:92:d5:40:f1:b4:d8:f7:50:bb:11:
c1:af:c3:76:ad:99:74:0f:cb:f0:36:5f:6b:d9:a5:9b:cf:93:
fd:9a:38:46:ff:44:31:1b:7d:22:33:38:00:f7:ee:da:89:6e:
65:0c:f7:12:74:3a:e3:5b:2e:75:6d:7c:8c:61:4f:f8:69:a3:
81:84:da:22:6a:e5:e3:cc:1d:74:68:5f:75:46:0c:ab:13:2b:
f5:a4:f4:64
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/GPhYm9+JoIMy0bXeW11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1
YjEwNjgwHhcNMjUwMTAyMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWVkZThkNDdkOGQ2NGU1Y2U0NmVmZjk0MzcxZjdlYTk1M2NiZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroGm6lVP1FCTPUBpKGzOnPZ4Q1yB
hCPWmYOFeZn8shP5CllJhUEBD5OfFt+XI81oyPlEXI4NQOxB/FvcF8PB0rf4A2Hu
mNdgAeZ9mQITNLhxxFUEGFTgkLY918jkdslUidcoUCrCKxX82clNrIk8twzYeLtv
FOZHYGCO+ejOtr2ApXPUFtA96cv6tusxZTCA1IMsPcb6Eiap9OUFHr/AEk7T6Xic
FD8Y/MKqhmyVbOltQau+zxJGMmXmSmWkXPqrXdfZYWFxHbXZDVwms2WEyQE37Ohc
Xph/qJKsZVY6peCHvO2R5RfHBzAFbwfezZIsrRe3EzHoBXWpVP9C4zY4NQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBXt6NR9jWTlzkbv+UNx9+qVPL2nMB8GA1UdIwQY
MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt
MGY1ZjA5YjJlYjE0LzEvRmUzbzFIMk5aT1hPUnVfNVEzSDM2cFU4dmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0
LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucJxMA0E
AgACMAcDBQMqFFNAMA0GCSqGSIb3DQEBCwUAA4IBAQANJoPQ8DGJZIa6/4L2X5u8
tCRVsojJTLVS+Xumx3BYSgy2okFeN76fX/iIdwkSowpsx92onbK76ssLfbpluNw+
IICE1NB8GfnCMjChztdTDSkU3JUvol107AaPm6fw5NlQ69JPte5L1TSYRtELbsr7
efuI+PXFNI2BkyvT1HbhNcMtMoQE3dBdw5O5Ze2IJD4coZMugcUn48MFLkTl4CYC
DwvJsokBBGPPipLVQPG02PdQuxHBr8N2rZl0D8vwNl9r2aWbz5P9mjhG/0QxG30i
MzgA9+7aiW5lDPcSdDrjWy51bXyMYU/4aaOBhNoiauXjzB10aF91RgyrEyv1pPRk
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:46 2025 by rpki-client