Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-wL0N3qZ8rs8ySw2QO1QIBMZjdc.roa
File: 1-wL0N3qZ8rs8ySw2QO1QIBMZjdc.roa (raw, json)
Hash identifier: m2PqgZ0dSf41k+0j4NeI65a/m+x01qR9j6yX/ioNplk=
Subject key identifier: FB:02:F4:37:7A:99:F2:BB:3C:C9:2C:36:40:ED:50:20:13:19:8D:D7
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0193909BCD2E72076810CD18A3AEE292F81C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-wL0N3qZ8rs8ySw2QO1QIBMZjdc.roa
Signing time: Wed 04 Dec 2024 07:39:09 +0000
ROA not before: Wed 04 Dec 2024 07:39:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.4.0/22 maxlen: 22
5.178.9.0/24 maxlen: 24
5.178.10.0/24 maxlen: 24
5.178.11.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.14.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/24 maxlen: 24
46.23.101.0/24 maxlen: 24
46.23.102.0/24 maxlen: 24
46.23.103.0/24 maxlen: 24
62.217.128.0/19 maxlen: 19
62.217.128.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.132.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.135.0/24 maxlen: 24
62.217.136.0/24 maxlen: 24
62.217.137.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.139.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.143.0/24 maxlen: 24
62.217.144.0/24 maxlen: 24
62.217.145.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.150.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.152.0/24 maxlen: 24
62.217.153.0/24 maxlen: 24
62.217.154.0/24 maxlen: 24
62.217.155.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
88.151.199.0/24 maxlen: 24
109.205.208.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:9b:cd:2e:72:07:68:10:cd:18:a3:ae:e2:92:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 4 07:39:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb02f4377a99f2bb3cc92c3640ed502013198dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:d2:b4:ff:cb:9c:66:fe:b2:ba:f4:6b:06:
fb:53:97:ed:8f:84:79:70:44:7e:94:08:fb:13:03:
bc:b3:d7:fc:6b:aa:ac:82:05:80:a1:78:e4:5b:c8:
32:36:1f:9e:29:7a:66:43:da:30:f7:b4:87:d8:89:
97:1b:65:12:32:b1:7d:cb:39:5e:70:23:c3:02:2e:
ae:89:ae:7e:a2:02:23:e9:d6:e1:e9:84:64:fd:80:
36:4e:96:94:1a:ad:25:bb:20:8b:8b:21:83:d2:64:
fc:34:25:8e:4b:36:7d:72:b1:4d:e7:ef:e2:46:8e:
36:b5:bb:2d:57:bb:48:c2:13:0f:fa:3d:58:cc:2e:
e9:17:b7:47:e8:71:5a:2f:7d:95:3f:4d:cc:39:b8:
de:39:b7:7d:ca:68:e3:da:e4:29:df:26:20:39:15:
44:e6:a4:62:08:2f:0d:94:40:a4:bd:a0:26:af:7a:
70:ea:0e:eb:1d:3f:26:f7:77:5c:1b:40:65:ff:63:
57:80:94:e2:e2:e8:41:da:49:d2:c2:f8:c5:01:fa:
b1:1c:f4:da:b2:38:36:b7:6c:1e:78:43:69:6b:5d:
1c:9f:15:9f:a6:44:3d:c8:23:1e:72:14:72:4a:b4:
d5:c4:85:58:5d:7c:70:2d:54:5c:ac:f4:3f:ff:3b:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:F4:37:7A:99:F2:BB:3C:C9:2C:36:40:ED:50:20:13:19:8D:D7
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-wL0N3qZ8rs8ySw2QO1QIBMZjdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.4.0/22
5.178.9.0-5.178.15.255
46.23.100.0/22
62.217.128.0/19
88.151.199.0/24
109.205.208.0/24
185.81.217.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:a2:19:ff:9f:ee:89:d4:fc:12:5e:25:4e:10:0c:77:84:b0:
d3:01:4d:5d:ec:55:b5:89:df:f6:75:82:06:48:df:a8:dc:fd:
e3:39:2a:bb:cc:08:05:46:d1:dc:4a:6d:bf:44:0a:d4:14:0c:
61:6f:6e:a7:f6:95:e9:98:60:9d:8b:f1:c2:a9:a8:1e:b0:92:
42:89:82:1d:91:0c:7e:05:82:d8:e3:cb:e9:5e:6e:df:18:f8:
0a:0f:ab:a1:39:86:47:db:8f:9d:60:f3:8c:85:bf:f6:31:af:
1c:f6:85:51:ff:97:c1:e5:b1:94:48:7b:ca:8f:1f:c6:37:b8:
81:77:bc:f7:67:af:f6:51:2c:18:c5:c0:2e:69:53:2b:02:7a:
54:d2:60:de:50:b7:17:f3:de:f9:03:c8:0e:9b:62:52:16:1d:
f5:9f:0f:08:bb:68:76:38:32:25:a5:34:d9:bf:4c:54:9e:79:
d3:09:b4:61:ac:87:05:28:50:10:ff:e0:ca:8e:82:98:d5:5f:
96:61:60:78:75:c9:70:f1:ad:37:4f:d4:59:0b:c5:ac:55:f5:
72:8d:b9:04:02:d5:b0:dc:ff:4c:b4:d8:ab:d8:e4:21:14:42:
f7:d9:d7:f6:15:e0:60:43:00:8a:fe:5b:9e:9c:b1:2e:e2:57:
84:34:64:e1
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZOQm80ucgdoEM0Yo67ikvgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQxMjA0MDczOTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjAyZjQzNzdhOTlmMmJiM2NjOTJjMzY0MGVkNTAyMDEzMTk4ZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixXStP/LnGb+srr0awb7U5ftj4R5
cER+lAj7EwO8s9f8a6qsggWAoXjkW8gyNh+eKXpmQ9ow97SH2ImXG2USMrF9yzle
cCPDAi6uia5+ogIj6dbh6YRk/YA2TpaUGq0luyCLiyGD0mT8NCWOSzZ9crFN5+/i
Ro42tbstV7tIwhMP+j1YzC7pF7dH6HFaL32VP03MObjeObd9ymjj2uQp3yYgORVE
5qRiCC8NlECkvaAmr3pw6g7rHT8m93dcG0Bl/2NXgJTi4uhB2knSwvjFAfqxHPTa
sjg2t2weeENpa10cnxWfpkQ9yCMechRySrTVxIVYXXxwLVRcrPQ//zuTFwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFPsC9Dd6mfK7PMksNkDtUCATGY3XMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvMS13TDBOM3FaOHJzOHlTdzJRTzFRSUJNWmpkYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBm
Mi8xL2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBRBggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAgWyBDAM
AwQABbIJAwQEBbIAAwQCLhdkAwQFPtmAAwQAWJfHAwQAbc3QAwQAuVHZAwQCvEAI
MA0GCSqGSIb3DQEBCwUAA4IBAQCkohn/n+6J1PwSXiVOEAx3hLDTAU1d7FW1id/2
dYIGSN+o3P3jOSq7zAgFRtHcSm2/RArUFAxhb26n9pXpmGCdi/HCqagesJJCiYId
kQx+BYLY48vpXm7fGPgKD6uhOYZH24+dYPOMhb/2Ma8c9oVR/5fB5bGUSHvKjx/G
N7iBd7z3Z6/2USwYxcAuaVMrAnpU0mDeULcX8975A8gOm2JSFh31nw8Iu2h2ODIl
pTTZv0xUnnnTCbRhrIcFKFAQ/+DKjoKY1V+WYWB4dclw8a03T9RZC8WsVfVyjbkE
AtWw3P9MtNir2OQhFEL32df2FeBgQwCK/luenLEu4leENGTh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:40 2025 by rpki-client