Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/fJrFHPzcXBxu52oPqkGqKY4yJAk.roa
File: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (raw, json)
Hash identifier: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=
Subject key identifier: 7C:9A:C5:1C:FC:DC:5C:1C:6E:E7:6A:0F:AA:41:AA:29:8E:32:24:09
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 0194258FB9B34BE7A057AED2465821F66C90
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/fJrFHPzcXBxu52oPqkGqKY4yJAk.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49983
IP address blocks: 91.212.196.0/24 maxlen: 24
109.71.96.0/21 maxlen: 21
185.19.168.0/22 maxlen: 22
2a00:17e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b9:b3:4b:e7:a0:57:ae:d2:46:58:21:f6:6c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9ac51cfcdc5c1c6ee76a0faa41aa298e322409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:59:c1:24:0e:32:c6:7f:fb:c5:15:57:b2:
e6:ca:dd:d1:a2:27:a1:3a:bf:12:d6:b4:69:51:44:
65:70:1d:ad:09:a4:c2:82:0e:dd:a4:a6:f8:0c:9e:
f1:44:35:eb:d3:86:6a:f6:37:7a:33:a8:8f:35:db:
e9:2a:68:71:b1:0c:ef:41:2e:25:b0:df:ef:fb:2e:
1f:b8:bd:dc:6d:e8:46:83:9c:f9:47:47:af:2a:9b:
25:93:e2:42:7d:2d:50:78:b6:24:3f:3c:f7:64:23:
ec:9e:65:ed:28:a2:4e:71:f3:99:3d:cb:e7:6d:65:
14:99:f0:57:71:02:17:d2:7d:ac:60:c8:bc:03:5f:
c5:41:01:64:f4:ec:ae:46:74:8d:1c:da:9c:a2:26:
e0:91:40:f4:56:1c:50:4b:00:a3:98:ee:df:95:4e:
37:0d:00:08:4d:6e:81:77:2c:9e:6c:9d:c9:10:aa:
c9:12:07:98:c5:c9:8d:71:d7:f4:11:55:7d:68:21:
2f:47:3f:4a:a8:71:b4:15:7e:21:97:f2:55:a7:29:
59:53:85:0e:be:87:8c:f1:19:1e:9d:89:da:1e:05:
26:6c:55:96:a1:f1:8f:b1:ca:31:58:0e:1b:d5:e6:
76:14:ee:e3:09:81:2d:36:d4:c3:f6:88:b8:a1:4e:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:C5:1C:FC:DC:5C:1C:6E:E7:6A:0F:AA:41:AA:29:8E:32:24:09
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/fJrFHPzcXBxu52oPqkGqKY4yJAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.196.0/24
109.71.96.0/21
185.19.168.0/22
IPv6:
2a00:17e0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:29:0d:b0:2f:fb:8a:82:2b:70:85:72:dc:11:f8:77:a5:d8:
2d:a7:b3:82:e6:2e:06:c9:a9:15:37:f9:9c:61:ec:48:33:b9:
ae:b5:58:07:9c:fb:60:ba:99:39:0e:fb:17:67:13:ef:54:1e:
92:52:1c:ae:0c:60:4e:14:52:60:71:95:ed:a5:de:a4:ad:9e:
92:24:f6:31:70:de:8f:0d:1e:22:62:04:27:7d:b9:5f:a1:10:
4e:f7:8e:a6:f9:46:58:6b:e9:b1:07:af:8e:75:89:04:6a:7e:
94:e4:86:ce:a9:08:d6:e8:55:f1:69:a0:59:e5:73:87:80:b3:
16:3e:03:31:5b:02:a0:9e:e6:cc:88:c1:77:a3:47:a7:b6:df:
db:b4:08:1c:20:d3:b5:0d:86:e9:e7:25:a7:b3:93:29:f0:c4:
88:cc:fc:f6:a0:3b:5b:bc:68:fc:0f:39:40:bb:c5:9f:50:27:
dd:a5:9b:d6:70:68:48:be:58:2d:4a:6f:4d:e7:de:89:bd:d6:
62:26:54:dc:d7:3f:9c:fb:dd:44:69:90:2e:61:ae:7b:df:f0:
bc:6d:1e:c9:a6:2f:91:9f:44:ab:7a:22:3d:cf:35:2b:04:ba:
44:92:72:e4:e6:b8:58:43:42:c0:6e:a5:6e:a9:7d:90:a5:6a:
7b:7a:f4:6a
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQlj7mzS+egV67SRlgh9myQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjUwMTAyMDU0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzlhYzUxY2ZjZGM1YzFjNmVlNzZhMGZhYTQxYWEyOThlMzIyNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5JZwSQOMsZ/+8UVV7Lmyt3Roieh
Or8S1rRpUURlcB2tCaTCgg7dpKb4DJ7xRDXr04Zq9jd6M6iPNdvpKmhxsQzvQS4l
sN/v+y4fuL3cbehGg5z5R0evKpslk+JCfS1QeLYkPzz3ZCPsnmXtKKJOcfOZPcvn
bWUUmfBXcQIX0n2sYMi8A1/FQQFk9OyuRnSNHNqcoibgkUD0VhxQSwCjmO7flU43
DQAITW6BdyyebJ3JEKrJEgeYxcmNcdf0EVV9aCEvRz9KqHG0FX4hl/JVpylZU4UO
voeM8RkenYnaHgUmbFWWofGPscoxWA4b1eZ2FO7jCYEtNtTD9oi4oU6i3QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHyaxRz83FwcbudqD6pBqimOMiQJMB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEvZkpyRkhQemNYQnh1NTJvUHFrR3FLWTR5SkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9TEAwQD
bUdgAwQCuROoMA0EAgACMAcDBQAqABfgMA0GCSqGSIb3DQEBCwUAA4IBAQBrKQ2w
L/uKgitwhXLcEfh3pdgtp7OC5i4GyakVN/mcYexIM7mutVgHnPtgupk5DvsXZxPv
VB6SUhyuDGBOFFJgcZXtpd6krZ6SJPYxcN6PDR4iYgQnfblfoRBO946m+UZYa+mx
B6+OdYkEan6U5IbOqQjW6FXxaaBZ5XOHgLMWPgMxWwKgnubMiMF3o0entt/btAgc
INO1DYbp5yWns5Mp8MSIzPz2oDtbvGj8DzlAu8WfUCfdpZvWcGhIvlgtSm9N596J
vdZiJlTc1z+c+91EaZAuYa573/C8bR7Jpi+Rn0SreiI9zzUrBLpEknLk5rhYQ0LA
bqVuqX2QpWp7evRq
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:43 2025 by rpki-client