Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/fhK3spdizh-j08bDgQWAIWcvZm4.roa
File: fhK3spdizh-j08bDgQWAIWcvZm4.roa (raw, json)
Hash identifier: Nz0rdH67w5QKkf0wMH2IazVmlZq7Iwuz9Y5nbjtBWvw=
Subject key identifier: 7E:12:B7:B2:97:62:CE:1F:A3:D3:C6:C3:81:05:80:21:67:2F:66:6E
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0194C0F7B4CAA370C31F09F77D183B61664C
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/fhK3spdizh-j08bDgQWAIWcvZm4.roa
Signing time: Sat 01 Feb 2025 10:04:06 +0000
ROA not before: Sat 01 Feb 2025 10:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31313
IP address blocks: 176.126.252.0/24 maxlen: 24
176.126.253.0/24 maxlen: 24
176.126.254.0/24 maxlen: 24
176.126.255.0/24 maxlen: 24
185.57.80.0/24 maxlen: 24
185.57.81.0/24 maxlen: 24
185.57.82.0/24 maxlen: 24
185.57.83.0/24 maxlen: 24
185.233.148.0/24 maxlen: 24
185.233.149.0/24 maxlen: 24
185.233.150.0/24 maxlen: 24
185.233.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c0:f7:b4:ca:a3:70:c3:1f:09:f7:7d:18:3b:61:66:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Feb 1 10:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e12b7b29762ce1fa3d3c6c381058021672f666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:da:e0:5b:fd:be:3c:28:1f:3e:84:84:e3:
79:a5:68:7a:f3:19:15:aa:5b:f6:ca:b1:44:07:f7:
29:af:4d:f8:cf:d6:8d:33:1c:e8:f1:6b:e2:49:d1:
ab:fb:11:38:11:1a:76:48:47:39:9b:42:32:94:1d:
07:a8:5e:5d:21:72:19:95:74:f6:02:34:37:ea:81:
cd:81:d5:0e:3b:6d:29:fc:60:67:5f:d6:84:af:f9:
b8:13:53:5e:cb:a8:e4:14:1d:78:a8:3b:db:11:d1:
31:a9:80:d3:bb:b6:4d:7e:4d:23:7d:23:eb:8e:22:
ec:77:2d:30:cb:3c:51:57:14:b9:e1:ee:95:a7:5d:
4a:bc:39:e6:17:2f:e6:0e:90:6a:9b:39:98:a0:c5:
03:2e:7e:1c:58:76:df:57:7c:e1:18:fd:a1:35:93:
c5:70:bb:5d:be:a9:c4:14:17:eb:56:f8:ec:aa:96:
13:76:9a:1a:93:64:9e:20:2e:04:3b:4c:3d:f5:5f:
2c:5d:1d:21:aa:ff:d3:11:f1:75:98:8f:54:d9:e3:
3a:97:98:8b:06:2c:68:69:9e:e9:d1:59:8f:34:63:
d3:3d:cc:9d:20:e9:a0:40:4d:e7:f0:0b:0e:8e:8f:
dd:44:b6:4c:a7:49:67:8c:08:2e:97:6e:0a:48:b7:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:12:B7:B2:97:62:CE:1F:A3:D3:C6:C3:81:05:80:21:67:2F:66:6E
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/fhK3spdizh-j08bDgQWAIWcvZm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.252.0/22
185.57.80.0/22
185.233.148.0/22
Signature Algorithm: sha256WithRSAEncryption
77:a3:f2:a1:d3:ae:4a:6f:40:5d:8b:21:ec:c9:88:88:96:34:
4b:c6:be:9d:17:da:98:ac:dc:21:0b:47:5a:d1:29:56:70:bd:
4d:e0:bf:10:97:fc:67:6d:1e:6d:ae:f0:35:b6:20:32:d6:6a:
a6:03:1b:cf:85:af:6e:aa:8d:94:23:bf:18:05:12:fa:86:d0:
7e:84:0a:c2:a9:30:47:74:58:69:83:70:83:ac:9c:4f:d1:12:
ea:9c:63:9f:04:61:27:b4:f5:68:c4:aa:e2:d2:cd:fc:fd:d8:
b9:1f:aa:9a:b5:37:1e:61:94:2c:24:66:42:bd:a7:c1:2a:60:
1c:54:84:db:f5:7d:7a:79:6c:0d:17:5f:db:c2:6f:d4:26:e0:
eb:29:83:32:29:bb:66:f4:75:9e:4a:37:41:5f:61:b7:8b:e8:
06:c6:70:37:a6:22:cc:91:8e:bb:20:7c:3e:68:8c:45:0d:f9:
05:1b:35:7b:32:b8:65:22:47:b2:bd:9f:4d:41:45:3f:e4:e5:
09:2f:07:1f:ff:07:81:2b:fb:6a:fa:2c:6c:cb:5b:51:b5:14:
88:6d:de:61:00:45:9f:0c:a7:57:15:d4:26:34:d2:74:62:f5:
03:30:08:21:75:12:fe:ad:a5:d3:ca:35:76:55:29:d0:07:39:
91:16:96:50
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZTA97TKo3DDHwn3fRg7YWZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjUwMjAxMTAwNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTEyYjdiMjk3NjJjZTFmYTNkM2M2YzM4MTA1ODAyMTY3MmY2NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4va4Fv9vjwoHz6EhON5pWh68xkV
qlv2yrFEB/cpr034z9aNMxzo8WviSdGr+xE4ERp2SEc5m0IylB0HqF5dIXIZlXT2
AjQ36oHNgdUOO20p/GBnX9aEr/m4E1Ney6jkFB14qDvbEdExqYDTu7ZNfk0jfSPr
jiLsdy0wyzxRVxS54e6Vp11KvDnmFy/mDpBqmzmYoMUDLn4cWHbfV3zhGP2hNZPF
cLtdvqnEFBfrVvjsqpYTdpoak2SeIC4EO0w99V8sXR0hqv/TEfF1mI9U2eM6l5iL
BixoaZ7p0VmPNGPTPcydIOmgQE3n8AsOjo/dRLZMp0lnjAgul24KSLdzdwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH4St7KXYs4fo9PGw4EFgCFnL2ZuMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvZmhLM3NwZGl6aC1qMDhiRGdRV0FJV2N2Wm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCsH78AwQC
uTlQAwQCuemUMA0GCSqGSIb3DQEBCwUAA4IBAQB3o/Kh065Kb0BdiyHsyYiIljRL
xr6dF9qYrNwhC0da0SlWcL1N4L8Ql/xnbR5trvA1tiAy1mqmAxvPha9uqo2UI78Y
BRL6htB+hArCqTBHdFhpg3CDrJxP0RLqnGOfBGEntPVoxKri0s38/di5H6qatTce
YZQsJGZCvafBKmAcVITb9X16eWwNF1/bwm/UJuDrKYMyKbtm9HWeSjdBX2G3i+gG
xnA3piLMkY67IHw+aIxFDfkFGzV7MrhlIkeyvZ9NQUU/5OUJLwcf/weBK/tq+ixs
y1tRtRSIbd5hAEWfDKdXFdQmNNJ0YvUDMAghdRL+raXTyjV2VSnQBzmRFpZQ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:24 2025 by rpki-client