Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa
File: AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa (raw, json)
Hash identifier: e8L77a5kg61puuX03oiiqxMg/6Zhg3a40JEKuTihNS4=
Subject key identifier: 00:54:1F:73:A2:71:3E:CD:16:6E:D5:C4:7D:95:10:5B:A7:26:B4:7C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01941FFA1809910B35CF9BD70364E7032462
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207249
IP address blocks: 78.159.130.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:09:91:0b:35:cf:9b:d7:03:64:e7:03:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00541f73a2713ecd166ed5c47d95105ba726b47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:09:7c:25:dd:e1:ae:2a:9f:a4:b9:e3:dc:
79:55:65:f6:48:3e:ec:3d:1f:57:f7:22:29:97:e4:
d6:fa:6d:6e:aa:9d:79:b3:25:2a:e5:94:35:76:76:
f0:63:e5:cb:e2:a6:8c:24:6b:ac:7b:fc:b1:23:60:
39:a5:ff:e6:7f:c3:b6:1a:56:37:0b:13:e0:c8:56:
21:b2:57:cc:e9:b3:f9:1b:60:f7:42:fd:ea:0c:96:
65:49:67:cb:00:a9:a1:59:48:ab:5f:bb:59:1d:bc:
b6:44:50:37:2b:41:87:4c:7c:77:6a:27:40:13:07:
1d:f3:ee:d7:a1:c0:fd:c5:cf:a7:56:c6:00:41:62:
b7:2e:df:10:18:54:d8:d2:04:d7:77:ef:b5:e0:79:
aa:72:d6:6e:ab:db:ae:f6:3e:e6:4f:09:40:7a:4a:
5c:2e:f4:6d:a9:9d:48:35:17:d4:6b:59:6c:ec:29:
35:dd:a9:db:56:a8:51:3a:12:c8:14:af:1a:08:cd:
3a:52:bc:1c:9a:c7:70:e3:40:5e:24:03:81:d1:67:
dd:ef:1e:76:97:c5:6b:42:ed:d6:64:b3:f0:a3:95:
5f:92:0a:34:e0:e6:76:0a:c4:0e:61:22:46:fb:54:
f1:fd:4f:a1:ed:0f:6e:9f:8b:05:08:4e:40:20:b0:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:54:1F:73:A2:71:3E:CD:16:6E:D5:C4:7D:95:10:5B:A7:26:B4:7C
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.130.0/24
93.152.233.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3d:11:a5:f4:14:02:4d:b1:3e:1f:63:bb:e3:fb:b8:3a:0c:
37:51:e0:cd:10:68:15:18:53:a7:3a:0c:6b:9c:c4:ac:76:41:
96:38:70:32:1c:68:9c:09:bc:12:8c:1a:cb:bf:d7:1d:a9:2e:
5a:51:4c:50:14:ca:a0:09:36:a3:8a:bb:3e:53:3d:16:e8:0d:
c9:65:88:2f:10:9b:11:64:4f:85:70:bd:f4:57:7b:d0:e7:ae:
6e:a8:71:e0:6c:0b:54:27:86:86:d4:29:cb:e6:cb:09:45:6d:
99:05:84:bf:a1:d4:29:2e:84:f1:fb:d2:61:c9:79:ee:eb:9e:
3d:3f:84:f1:ce:68:1f:6a:26:10:d0:75:9c:5f:fd:8d:6f:9f:
0d:d7:b7:af:6c:52:d9:2f:29:2f:8f:d7:fa:15:3b:dc:f9:2c:
15:1a:71:dd:86:b0:58:3a:83:c6:03:9c:ca:25:20:d8:a3:df:
11:14:cb:6a:58:b0:f0:36:6c:b2:57:59:7d:0f:e8:60:1a:d7:
21:e7:51:0c:42:02:08:91:9e:be:04:2f:9f:55:73:7e:e5:5f:
bd:d4:ad:f4:2a:90:02:2a:84:f1:e4:39:b0:a5:04:5f:35:ff:
e0:4d:34:3d:17:d4:6d:24:88:6b:4e:ce:69:b3:15:60:9c:c8:
1d:5a:ac:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+hgJkQs1z5vXA2TnAyRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUwMTAxMDM0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDU0MWY3M2EyNzEzZWNkMTY2ZWQ1YzQ3ZDk1MTA1YmE3MjZiNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFsJfCXd4a4qn6S549x5VWX2SD7s
PR9X9yIpl+TW+m1uqp15syUq5ZQ1dnbwY+XL4qaMJGuse/yxI2A5pf/mf8O2GlY3
CxPgyFYhslfM6bP5G2D3Qv3qDJZlSWfLAKmhWUirX7tZHby2RFA3K0GHTHx3aidA
Ewcd8+7XocD9xc+nVsYAQWK3Lt8QGFTY0gTXd++14HmqctZuq9uu9j7mTwlAekpc
LvRtqZ1INRfUa1ls7Ck13anbVqhROhLIFK8aCM06Urwcmsdw40BeJAOB0Wfd7x52
l8VrQu3WZLPwo5Vfkgo04OZ2CsQOYSJG+1Tx/U+h7Q9un4sFCE5AILBMEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFABUH3OicT7NFm7VxH2VEFunJrR8MB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvQUZRZmM2SnhQczBXYnRYRWZaVVFXNmNtdEh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATp+CAwQA
XZjpMA0GCSqGSIb3DQEBCwUAA4IBAQB3PRGl9BQCTbE+H2O74/u4Ogw3UeDNEGgV
GFOnOgxrnMSsdkGWOHAyHGicCbwSjBrLv9cdqS5aUUxQFMqgCTajirs+Uz0W6A3J
ZYgvEJsRZE+FcL30V3vQ565uqHHgbAtUJ4aG1CnL5ssJRW2ZBYS/odQpLoTx+9Jh
yXnu6549P4TxzmgfaiYQ0HWcX/2Nb58N17evbFLZLykvj9f6FTvc+SwVGnHdhrBY
OoPGA5zKJSDYo98RFMtqWLDwNmyyV1l9D+hgGtch51EMQgIIkZ6+BC+fVXN+5V+9
1K30KpACKoTx5DmwpQRfNf/gTTQ9F9RtJIhrTs5psxVgnMgdWqwu
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:26 2025 by rpki-client