Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/NFmYzWkBl0tEXVCAjimOMbeZ05w.roa
File: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (raw, json)
Hash identifier: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=
Subject key identifier: 34:59:98:CD:69:01:97:4B:44:5D:50:80:8E:29:8E:31:B7:99:D3:9C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E43B5B171A1C75B9A3B844B189D2A
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/NFmYzWkBl0tEXVCAjimOMbeZ05w.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16611
IP address blocks: 213.145.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:b5:b1:71:a1:c7:5b:9a:3b:84:4b:18:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=345998cd6901974b445d50808e298e31b799d39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:d3:56:b5:77:e2:45:f2:53:b9:e7:f2:c8:
55:9c:c7:bd:45:d8:95:e9:82:8a:3b:4f:5b:cd:fd:
63:ea:aa:55:22:d2:fe:8f:a9:3a:e7:ce:82:d1:2b:
70:a3:f4:b7:09:8e:45:5c:9a:24:62:1a:8d:8a:a4:
ca:e8:9f:b2:d1:0d:98:d9:b9:36:7e:c6:2b:c9:6e:
27:fc:86:54:01:58:f1:7b:10:11:f8:38:16:d4:7f:
7d:62:b6:75:58:5a:bc:ae:90:6c:2f:18:c0:07:ac:
0a:11:d0:2c:0c:d8:20:24:99:39:79:d9:3f:78:0e:
a7:0a:59:68:cb:4e:0f:45:df:93:48:b3:fd:6b:b6:
51:30:43:f2:d7:f1:3f:bd:a5:88:46:82:40:ca:31:
0c:67:2c:ba:3e:76:92:7f:2a:50:96:55:26:5d:54:
7a:64:ac:fd:33:c7:47:1b:87:51:4c:ff:94:56:15:
5f:04:63:7a:58:d4:2a:a3:27:fd:f4:88:c9:b8:0d:
d1:15:18:aa:86:42:4a:5d:4d:0c:44:cf:c4:85:3b:
2f:2c:9a:e1:37:b8:54:d3:22:ac:40:3a:15:85:c7:
a3:c8:af:20:a9:f3:3c:84:62:91:42:2a:e2:3f:ce:
7a:73:be:95:eb:d4:39:b4:92:13:30:c7:d0:b0:9a:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:98:CD:69:01:97:4B:44:5D:50:80:8E:29:8E:31:B7:99:D3:9C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/NFmYzWkBl0tEXVCAjimOMbeZ05w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:5d:be:a5:de:97:ed:ba:25:28:d3:c6:91:a8:e0:18:2b:6a:
39:73:99:23:9e:a7:f1:f2:2c:7f:14:3c:67:f0:7c:c6:32:ea:
af:10:15:04:8c:80:8c:6d:58:97:bb:f6:11:12:0d:56:a5:d8:
0a:3c:dc:94:3a:6c:5f:4c:da:bd:ff:0c:38:36:54:cc:44:32:
57:48:16:4c:59:fa:53:63:5a:71:42:aa:af:73:5c:24:34:fd:
14:91:d0:1f:9a:51:7d:04:b9:83:a6:af:8d:a6:a9:ae:51:2e:
44:e6:18:2c:50:bc:0d:66:7a:ce:b4:a0:fe:4b:35:e7:ae:ac:
3f:eb:7d:dc:98:55:f8:01:dd:bd:43:e8:86:47:e5:c5:ab:60:
01:1b:12:65:ca:45:41:c9:d8:c7:6f:0c:36:0f:2f:80:f9:f5:
bb:61:a6:b9:23:aa:76:72:fd:48:5a:24:a1:96:31:af:8a:bb:
46:8c:54:86:db:7c:56:8e:8b:c3:b9:32:31:a3:d6:4f:54:1d:
6b:1e:d1:41:2f:a5:61:b6:05:60:a6:d1:63:4d:a9:f8:4b:25:
ae:84:fd:3d:cf:49:55:0e:13:ac:dd:32:2d:6b:63:33:87:86:
0b:02:87:31:f0:83:ec:94:81:30:c0:04:36:ed:86:c0:3e:c2:
af:5f:5f:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijkO1sXGhx1uaO4RLGJ0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwMTAxMTU0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDU5OThjZDY5MDE5NzRiNDQ1ZDUwODA4ZTI5OGUzMWI3OTlkMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucvTVrV34kXyU7nn8shVnMe9RdiV
6YKKO09bzf1j6qpVItL+j6k6586C0Stwo/S3CY5FXJokYhqNiqTK6J+y0Q2Y2bk2
fsYryW4n/IZUAVjxexAR+DgW1H99YrZ1WFq8rpBsLxjAB6wKEdAsDNggJJk5edk/
eA6nClloy04PRd+TSLP9a7ZRMEPy1/E/vaWIRoJAyjEMZyy6PnaSfypQllUmXVR6
ZKz9M8dHG4dRTP+UVhVfBGN6WNQqoyf99IjJuA3RFRiqhkJKXU0MRM/EhTsvLJrh
N7hU0yKsQDoVhcejyK8gqfM8hGKRQiriP856c76V69Q5tJITMMfQsJpYdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDRZmM1pAZdLRF1QgI4pjjG3mdOcMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTkZtWXpXa0JsMHRFWFZDQWppbU9NYmVaMDV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFXMA0G
CSqGSIb3DQEBCwUAA4IBAQCwXb6l3pftuiUo08aRqOAYK2o5c5kjnqfx8ix/FDxn
8HzGMuqvEBUEjICMbViXu/YREg1WpdgKPNyUOmxfTNq9/ww4NlTMRDJXSBZMWfpT
Y1pxQqqvc1wkNP0UkdAfmlF9BLmDpq+NpqmuUS5E5hgsULwNZnrOtKD+SzXnrqw/
633cmFX4Ad29Q+iGR+XFq2ABGxJlykVBydjHbww2Dy+A+fW7Yaa5I6p2cv1IWiSh
ljGvirtGjFSG23xWjovDuTIxo9ZPVB1rHtFBL6VhtgVgptFjTan4SyWuhP09z0lV
DhOs3TIta2Mzh4YLAocx8IPslIEwwAQ27YbAPsKvX1/1
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:11 2025 by rpki-client