Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/s7awYrhPujEu-ZRGweV7KC1XVMo.roa
File: s7awYrhPujEu-ZRGweV7KC1XVMo.roa (raw, json)
Hash identifier: qDjaklj7okGt/N67lpsepn6cM5rI/Einb7VtSwhb734=
Subject key identifier: B3:B6:B0:62:B8:4F:BA:31:2E:F9:94:46:C1:E5:7B:28:2D:57:54:CA
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 0194266C0F7C71D7EC86BD42BFC7C688D72D
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/s7awYrhPujEu-ZRGweV7KC1XVMo.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 45.86.104.0/24 maxlen: 24
45.86.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0f:7c:71:d7:ec:86:bd:42:bf:c7:c6:88:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3b6b062b84fba312ef99446c1e57b282d5754ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:20:05:dd:b3:ad:06:21:33:13:31:81:e6:
da:d8:88:bf:bd:40:1e:a1:38:50:53:4e:43:6d:83:
3a:94:d3:71:66:9d:ad:5b:ce:5b:51:d9:09:64:af:
f5:ae:0b:89:92:26:04:4c:d8:46:e3:8c:f8:11:08:
57:30:d7:1b:81:22:3d:84:ca:68:64:ca:0b:22:ee:
4e:06:52:1f:46:4f:14:db:65:7b:6e:3b:bb:ff:36:
3c:e6:c8:a6:8d:0f:9d:47:84:c7:a5:56:27:03:da:
21:10:f7:0f:ee:ac:a5:48:e3:02:ad:af:f9:cb:fa:
4e:3c:4e:9a:ec:b1:8e:d1:84:1c:40:0f:00:78:de:
b3:56:1f:99:fd:b9:32:74:e5:95:7e:88:97:1d:a4:
83:ac:91:a1:45:a5:f2:df:96:a7:bd:dc:92:fb:f8:
e4:42:27:52:46:fd:b2:79:8b:b6:b0:2b:29:87:f8:
81:3f:0f:4b:e0:85:47:33:5b:8e:8d:64:66:42:79:
38:0d:08:5c:cc:60:2a:ae:78:85:34:07:fa:d4:a1:
18:b4:8a:a3:ed:f5:e6:f6:80:54:46:04:6c:59:ab:
ea:25:fa:73:3f:eb:83:b6:63:ca:e3:36:ad:81:33:
53:fd:a9:ed:bd:54:23:c3:4a:e1:f0:02:a9:28:e4:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B6:B0:62:B8:4F:BA:31:2E:F9:94:46:C1:E5:7B:28:2D:57:54:CA
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/s7awYrhPujEu-ZRGweV7KC1XVMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:02:5e:39:4f:a6:cd:e6:a6:6c:fb:4b:4c:97:0a:57:24:2e:
21:f7:de:be:3b:4e:a8:e0:85:98:d4:2c:97:d2:90:f5:4a:c5:
9c:2a:24:14:e9:71:3c:71:01:cb:85:e6:78:a2:e6:44:e0:f6:
d1:6c:94:3e:72:f1:57:70:fe:91:76:77:d9:79:0b:f0:ef:18:
c1:23:b3:ed:65:57:c8:9f:19:f8:f7:06:cc:58:a9:f0:2c:2e:
96:12:e7:bd:5c:03:b2:0b:fe:00:ca:10:0f:b5:1e:d3:e1:4f:
c9:98:79:db:84:09:24:17:4e:e9:7c:c8:dd:7a:80:aa:8d:20:
c1:68:fb:9f:dc:87:27:a1:78:5a:88:87:c3:20:9b:ef:82:65:
40:23:5b:bd:d4:8c:62:d7:71:ce:92:78:9a:36:82:5d:de:3e:
53:4c:12:87:81:c0:8c:26:25:42:e4:bd:06:e2:78:6c:7e:2b:
89:66:99:bc:de:44:b6:ba:07:d1:39:e3:f7:6d:ed:9f:37:ef:
34:f8:19:2a:d6:2c:37:af:47:d5:2a:f3:47:19:e2:dc:5e:db:
cc:f6:b0:b8:e3:8d:43:92:cc:98:11:c3:09:d0:b3:ad:1a:86:
f9:65:fa:7b:b1:40:8b:a2:47:d2:6d:0d:80:2a:93:33:15:60:
57:f0:b4:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbA98cdfshr1Cv8fGiNctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWEwOGU4NDIxZGYyZjI0NWM3Y2IzMzNlZTc2YTE0YTg4
ODJkNGEwHhcNMjUwMTAyMDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2I2YjA2MmI4NGZiYTMxMmVmOTk0NDZjMWU1N2IyODJkNTc1NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUEgBd2zrQYhMxMxgeba2Ii/vUAe
oThQU05DbYM6lNNxZp2tW85bUdkJZK/1rguJkiYETNhG44z4EQhXMNcbgSI9hMpo
ZMoLIu5OBlIfRk8U22V7bju7/zY85simjQ+dR4THpVYnA9ohEPcP7qylSOMCra/5
y/pOPE6a7LGO0YQcQA8AeN6zVh+Z/bkydOWVfoiXHaSDrJGhRaXy35anvdyS+/jk
QidSRv2yeYu2sCsph/iBPw9L4IVHM1uOjWRmQnk4DQhczGAqrniFNAf61KEYtIqj
7fXm9oBURgRsWavqJfpzP+uDtmPK4zatgTNT/antvVQjw0rh8AKpKOS3mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLO2sGK4T7oxLvmURsHleygtV1TKMB8GA1UdIwQY
MBaAFPzqCOhCHfLyRcfLMz7nahSoiC1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2Ut
YzA3N2UxNzAyYmM3LzEvczdhd1lyaFB1akV1LVpSR3dlVjdLQzFYVk1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lYTdlNjEtOThiMy00MTIwLTgzY2UtYzA3N2UxNzAyYmM3
LzEvX09vSTZFSWQ4dkpGeDhzelB1ZHFGS2lJTFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVZoMA0G
CSqGSIb3DQEBCwUAA4IBAQC2Al45T6bN5qZs+0tMlwpXJC4h996+O06o4IWY1CyX
0pD1SsWcKiQU6XE8cQHLheZ4ouZE4PbRbJQ+cvFXcP6RdnfZeQvw7xjBI7PtZVfI
nxn49wbMWKnwLC6WEue9XAOyC/4AyhAPtR7T4U/JmHnbhAkkF07pfMjdeoCqjSDB
aPuf3IcnoXhaiIfDIJvvgmVAI1u91Ixi13HOkniaNoJd3j5TTBKHgcCMJiVC5L0G
4nhsfiuJZpm83kS2ugfROeP3be2fN+80+Bkq1iw3r0fVKvNHGeLcXtvM9rC4441D
ksyYEcMJ0LOtGob5Zfp7sUCLokfSbQ2AKpMzFWBX8LTd
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:33 2025 by rpki-client