Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-1pziKVnJdnaZPUbyMLDjWqW4_g.roa
File: 1-1pziKVnJdnaZPUbyMLDjWqW4_g.roa (raw, json)
Hash identifier: CTQV/nibox04vtPy3HZ47vXkDRdG0chce/FhKTidiJk=
Subject key identifier: FB:5A:73:88:A5:67:25:D9:DA:64:F5:1B:C8:C2:C3:8D:6A:96:E3:F8
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0193E8F26665167A3AB141D8DF7A71720934
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-1pziKVnJdnaZPUbyMLDjWqW4_g.roa
Signing time: Sat 21 Dec 2024 11:20:20 +0000
ROA not before: Sat 21 Dec 2024 11:20:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202984
IP address blocks: 185.39.205.0/24 maxlen: 24
2a09:e2c0::/30 maxlen: 30
2a09:e2c4::/30 maxlen: 30
2a10:4107::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:f2:66:65:16:7a:3a:b1:41:d8:df:7a:71:72:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Dec 21 11:20:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5a7388a56725d9da64f51bc8c2c38d6a96e3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:d1:f0:96:0c:cb:9c:42:83:35:ae:a1:1e:
92:c5:31:a8:18:ef:9e:9f:fb:47:b4:4a:de:3d:88:
79:98:9d:8a:57:33:e5:d3:8d:2c:8f:47:4d:02:63:
1a:e2:5a:cf:ae:83:7e:5d:a0:44:b0:54:b8:d6:d5:
79:e2:ca:e7:d9:34:30:5a:59:c1:73:89:99:87:ea:
c1:75:88:cd:7c:77:6e:40:8b:23:c4:53:ad:65:f0:
09:e5:23:6e:7c:19:4a:1e:6b:07:9f:b7:fa:f0:ac:
0a:23:a4:5f:38:7d:dc:1a:c2:ec:59:f9:9d:d2:45:
6d:f2:a9:3c:80:65:b6:91:6d:b8:8e:ea:84:09:d5:
e0:bc:c2:04:2b:99:81:a8:d6:1d:45:84:55:b3:4c:
28:3a:ce:25:b8:8a:e4:96:6a:fc:a4:a1:dd:b3:17:
d8:ca:90:c9:a8:be:ce:c4:99:bd:76:bc:c6:07:3d:
b0:9e:ff:31:e3:f7:92:b1:5c:28:ef:c9:50:52:84:
d3:91:4f:7b:56:82:41:56:8e:8d:20:25:2a:a6:35:
f8:66:52:ad:47:0f:3c:36:0a:9b:e7:54:17:c9:b9:
a3:6d:52:63:b7:ff:8d:ca:ea:41:9b:de:7a:57:71:
4c:99:6d:d2:67:b7:ba:d2:ae:64:df:31:33:ec:37:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5A:73:88:A5:67:25:D9:DA:64:F5:1B:C8:C2:C3:8D:6A:96:E3:F8
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-1pziKVnJdnaZPUbyMLDjWqW4_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
IPv6:
2a09:e2c0::/29
2a10:4107::/32
Signature Algorithm: sha256WithRSAEncryption
1b:02:7e:70:96:5c:6d:cf:78:d0:3b:27:98:1b:47:26:df:47:
b4:d2:96:59:44:0e:3a:0e:b6:9b:70:89:80:b9:44:a1:79:b9:
9e:cc:13:5e:00:90:2e:3e:48:19:69:97:93:34:4f:d1:fb:b1:
2b:73:39:58:f2:26:89:3a:0b:4d:7e:cc:7f:cf:b8:23:da:95:
8f:9e:c4:5d:91:5d:16:33:09:a4:5d:1b:12:32:1c:16:2b:01:
9c:ff:90:12:2f:47:22:ca:7b:83:16:de:cf:03:1c:f5:8c:08:
06:80:28:5d:e9:a2:c5:78:0a:44:5d:29:df:49:c9:69:55:df:
75:0b:8e:06:bf:de:e9:b6:71:4d:a2:fd:c4:45:71:de:82:ec:
af:3e:02:97:25:da:33:8a:29:c4:66:44:80:e3:6a:93:6c:52:
ec:16:fe:9f:79:e6:43:81:75:66:2f:25:6b:94:c4:47:91:d7:
75:ca:f7:e2:5d:38:bc:3a:59:d8:74:b6:b6:90:61:65:09:db:
33:00:65:bb:15:82:c3:cc:17:4c:ae:70:1e:ab:cf:22:6b:bd:
d1:b8:f1:02:dc:ee:2b:9e:1f:17:33:bd:9a:bc:11:51:42:7e:
f9:ae:08:3e:21:8f:d3:63:bf:45:a7:94:cf:cf:27:aa:e5:16:
c2:31:6d:77
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZPo8mZlFno6sUHY33pxcgk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQxMjIxMTEyMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjVhNzM4OGE1NjcyNWQ5ZGE2NGY1MWJjOGMyYzM4ZDZhOTZlM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzTR8JYMy5xCgzWuoR6SxTGoGO+e
n/tHtErePYh5mJ2KVzPl040sj0dNAmMa4lrProN+XaBEsFS41tV54srn2TQwWlnB
c4mZh+rBdYjNfHduQIsjxFOtZfAJ5SNufBlKHmsHn7f68KwKI6RfOH3cGsLsWfmd
0kVt8qk8gGW2kW24juqECdXgvMIEK5mBqNYdRYRVs0woOs4luIrklmr8pKHdsxfY
ypDJqL7OxJm9drzGBz2wnv8x4/eSsVwo78lQUoTTkU97VoJBVo6NICUqpjX4ZlKt
Rw88Ngqb51QXybmjbVJjt/+NyupBm956V3FMmW3SZ7e60q5k3zEz7DfZAQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFPtac4ilZyXZ2mT1G8jCw41qluP4MB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvMS0xcHppS1ZuSmRuYVpQVWJ5TUxEaldxVzRfZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmUvMWZhNmEzLThkYzUtNGMzNS1hNDliLTE3MWMzNjdiZTc4
Mi8xL2RRaEhYX0RZN0pZRE5nRnVEZ1FpR3BqbDdQSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQmMCQwDAQCAAEwBgMEALknzTAU
BAIAAjAOAwUDKgniwAMFACoQQQcwDQYJKoZIhvcNAQELBQADggEBABsCfnCWXG3P
eNA7J5gbRybfR7TSlllEDjoOtptwiYC5RKF5uZ7ME14AkC4+SBlpl5M0T9H7sStz
OVjyJok6C01+zH/PuCPalY+exF2RXRYzCaRdGxIyHBYrAZz/kBIvRyLKe4MW3s8D
HPWMCAaAKF3posV4CkRdKd9JyWlV33ULjga/3um2cU2i/cRFcd6C7K8+Apcl2jOK
KcRmRIDjapNsUuwW/p955kOBdWYvJWuUxEeR13XK9+JdOLw6Wdh0traQYWUJ2zMA
ZbsVgsPMF0yucB6rzyJrvdG48QLc7iueHxczvZq8EVFCfvmuCD4hj9Njv0WnlM/P
J6rlFsIxbXc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:33 2025 by rpki-client