Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8YFjhJllAvnuj7iLErGij7HrSXA.roa
File: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (raw, json)
Hash identifier: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=
Subject key identifier: F1:81:63:84:99:65:02:F9:EE:8F:B8:8B:12:B1:A2:8F:B1:EB:49:70
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479F1186A8803087996B3C8C4B591A
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8YFjhJllAvnuj7iLErGij7HrSXA.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152586
IP address blocks: 178.239.174.0/24 maxlen: 24
193.176.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9f:11:86:a8:80:30:87:99:6b:3c:8c:4b:59:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1816384996502f9ee8fb88b12b1a28fb1eb4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:85:cf:dd:f1:95:ee:de:16:12:74:d7:73:
48:8c:a7:1c:e2:1c:35:88:a6:c2:85:dd:60:d2:0f:
a0:55:0b:67:50:3a:81:b1:6c:eb:04:58:eb:ab:8c:
a1:ce:1a:e5:b3:d0:1f:b1:de:01:71:de:ac:6c:9a:
c8:cb:07:36:32:ae:f3:f4:68:dc:ab:83:41:e3:99:
06:49:3e:65:12:85:62:45:07:ea:8e:e6:de:b1:2f:
77:8c:06:75:51:db:ea:19:57:e4:0a:19:be:ef:f1:
d1:b2:19:12:e9:67:dc:9a:0c:8a:1d:54:09:95:7d:
44:31:f4:45:7f:ce:60:41:85:90:e5:6b:13:05:f4:
b6:4b:1d:ec:09:fd:6f:e8:4c:aa:e7:2c:d0:dd:6b:
b1:6e:75:0d:c6:54:48:b2:b2:7f:26:c5:e3:d6:53:
73:37:d6:51:93:56:48:77:79:fe:0e:d5:66:ef:6d:
7b:a0:01:f5:bc:5b:d5:bf:3e:04:ec:ef:3d:22:10:
21:08:43:48:4b:fa:e6:f7:03:5a:d7:17:1b:aa:b3:
8c:ca:01:48:82:b0:7a:d7:55:07:81:9b:5c:0e:df:
43:e9:56:78:bd:97:a9:3f:b8:d6:ea:2e:44:71:ce:
2b:08:c5:cd:f8:c0:0a:c8:27:1d:6c:b3:50:c6:ed:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:63:84:99:65:02:F9:EE:8F:B8:8B:12:B1:A2:8F:B1:EB:49:70
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8YFjhJllAvnuj7iLErGij7HrSXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.174.0/24
193.176.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:bc:b6:b9:f4:bb:f1:c3:5c:57:e1:14:0f:99:8b:6a:4b:2a:
53:58:47:d1:50:fd:8e:7e:21:58:fb:21:85:2a:08:8e:5f:fa:
58:b4:9a:5d:0a:a6:57:c7:b2:a0:9f:3e:7e:46:bd:0e:48:9a:
46:34:4e:fd:86:5a:7f:90:d2:d8:fc:e8:02:da:5f:19:3f:c4:
8f:54:7f:76:c9:d5:05:ef:c8:ab:39:40:7a:fe:20:48:1a:8e:
44:3f:01:77:77:98:81:55:aa:00:3b:35:c4:6a:a2:4e:dd:77:
4a:5f:0b:fe:d5:3b:92:17:51:59:d7:c2:22:85:66:f7:f0:2b:
0a:45:6e:29:59:7d:a9:46:c7:4e:6f:fe:5a:69:e9:9f:be:64:
b7:4c:e4:0f:81:f1:7a:a0:f8:0d:38:e7:e7:0a:a3:f3:fa:a3:
fa:52:6a:25:d2:82:39:f7:51:5c:df:82:15:de:3a:9c:d8:8b:
25:e4:df:28:90:99:bf:1a:19:6e:db:bf:05:5b:b0:93:36:e0:
1b:88:4d:63:d8:c3:3c:fa:3d:a0:f4:f0:18:8e:b9:c7:62:17:
89:fe:a9:17:a7:2e:5e:76:d5:31:43:71:63:b7:b4:34:eb:64:
bd:39:58:92:00:c5:68:75:07:42:25:ef:94:cb:dc:2a:56:e1:
af:20:2b:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR58RhqiAMIeZazyMS1kaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjUwMTAyMTM0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTgxNjM4NDk5NjUwMmY5ZWU4ZmI4OGIxMmIxYTI4ZmIxZWI0OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi6Fz93xle7eFhJ013NIjKcc4hw1
iKbChd1g0g+gVQtnUDqBsWzrBFjrq4yhzhrls9Afsd4Bcd6sbJrIywc2Mq7z9Gjc
q4NB45kGST5lEoViRQfqjubesS93jAZ1UdvqGVfkChm+7/HRshkS6WfcmgyKHVQJ
lX1EMfRFf85gQYWQ5WsTBfS2Sx3sCf1v6Eyq5yzQ3WuxbnUNxlRIsrJ/JsXj1lNz
N9ZRk1ZId3n+DtVm7217oAH1vFvVvz4E7O89IhAhCENIS/rm9wNa1xcbqrOMygFI
grB611UHgZtcDt9D6VZ4vZepP7jW6i5Ecc4rCMXN+MAKyCcdbLNQxu0bowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPGBY4SZZQL57o+4ixKxoo+x60lwMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvOFlGamhKbGxBdm51ajdpTEVyR2lqN0hyU1hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu+uAwQA
wbAcMA0GCSqGSIb3DQEBCwUAA4IBAQB6vLa59Lvxw1xX4RQPmYtqSypTWEfRUP2O
fiFY+yGFKgiOX/pYtJpdCqZXx7Kgnz5+Rr0OSJpGNE79hlp/kNLY/OgC2l8ZP8SP
VH92ydUF78irOUB6/iBIGo5EPwF3d5iBVaoAOzXEaqJO3XdKXwv+1TuSF1FZ18Ii
hWb38CsKRW4pWX2pRsdOb/5aaemfvmS3TOQPgfF6oPgNOOfnCqPz+qP6Umol0oI5
91Fc34IV3jqc2Isl5N8okJm/Ghlu278FW7CTNuAbiE1j2MM8+j2g9PAYjrnHYheJ
/qkXpy5edtUxQ3Fjt7Q062S9OViSAMVodQdCJe+Uy9wqVuGvICs2
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:31 2025 by rpki-client