Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMEvE8lRSqQ-c4n53FDffBkErx8.roa
File: FMEvE8lRSqQ-c4n53FDffBkErx8.roa (raw, json)
Hash identifier: GlA1THHMaPutrg5iNRsJwfVrQRoJ41Dni2qIntaImAw=
Subject key identifier: 14:C1:2F:13:C9:51:4A:A4:3E:73:89:F9:DC:50:DF:7C:19:04:AF:1F
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B35D6EE1E1FB5BEBB0DECAA1891F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMEvE8lRSqQ-c4n53FDffBkErx8.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42619
IP address blocks: 193.59.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b3:5d:6e:e1:e1:fb:5b:eb:b0:de:ca:a1:89:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14c12f13c9514aa43e7389f9dc50df7c1904af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:40:68:ef:ed:be:eb:37:e1:c1:f1:1b:39:
9c:ef:f7:0e:61:ee:a2:d6:02:c3:39:9a:db:65:76:
a7:4d:63:6d:9b:86:ae:6f:22:8f:74:13:45:8e:ad:
fa:d4:a2:11:78:ba:b4:45:81:d7:eb:f3:e5:da:37:
dc:65:ac:64:74:84:50:79:5c:1d:c9:71:90:82:08:
46:39:67:9b:69:46:c9:c1:71:fd:d6:24:c6:76:5a:
4a:1a:bd:05:46:17:c4:24:4b:71:7e:78:ec:f0:cc:
1c:ac:b2:81:a7:e4:38:95:3c:9c:85:9a:7d:0d:25:
cc:1d:6f:f3:bb:9e:e5:77:3d:64:2e:5b:be:b1:20:
b9:3f:79:61:17:06:5c:26:12:7b:9b:0b:0f:5f:5c:
b2:44:c5:e5:f4:37:16:e7:d4:98:24:cc:a8:d7:48:
9d:23:0a:d6:79:76:ca:5f:a5:94:2d:df:f3:9b:63:
51:92:e3:a7:73:2a:7c:84:75:50:0e:5e:56:65:c4:
03:0a:df:63:17:35:3e:db:c6:80:fe:32:14:07:92:
a8:4a:47:f4:0d:d7:ab:eb:d4:58:45:50:85:80:f3:
4d:28:37:1e:56:8d:30:62:4c:8b:5d:e7:c4:ce:47:
ad:23:04:a3:be:3f:92:f8:91:72:83:55:a8:86:e0:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:2F:13:C9:51:4A:A4:3E:73:89:F9:DC:50:DF:7C:19:04:AF:1F
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMEvE8lRSqQ-c4n53FDffBkErx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:30:ff:3b:63:c4:77:1a:27:59:69:a6:0c:40:77:df:9c:d6:
03:5a:ee:e2:ca:d4:0b:a8:e9:20:14:22:c9:ee:b0:f2:ae:58:
51:a3:8e:4f:5b:3d:42:73:00:98:ff:2c:c0:56:77:7c:79:8c:
0d:aa:2f:e0:80:3f:6f:79:a9:5d:2d:24:4d:26:9b:47:c3:04:
58:cf:9a:f6:4a:09:10:90:e4:e2:54:00:72:6d:00:54:c2:c0:
ea:b5:d5:cb:47:b5:86:18:bb:76:e5:55:23:0e:5f:07:0c:cb:
ae:83:37:36:31:73:e8:70:b1:39:32:de:7b:8e:4f:fd:6f:1c:
c4:a0:ab:fe:46:c5:3d:00:97:33:c4:e3:32:da:c4:1c:fa:b9:
af:ff:bf:aa:6c:23:fb:05:2a:ff:6c:a1:00:d1:57:c2:03:cb:
64:3d:26:5c:64:94:56:00:dc:23:8d:50:a1:e0:f1:7f:0a:0e:
bc:62:bb:ed:ac:79:cb:3d:06:10:43:9e:79:7f:52:75:32:51:
04:1f:e8:4b:67:d6:64:f0:b7:d1:2e:dd:12:b0:a3:ed:c2:81:
61:77:01:6f:46:b2:e1:d9:d5:94:20:fc:07:a8:63:da:4a:37:
5b:5c:a0:2f:96:d5:48:53:83:75:52:0d:56:1b:3f:79:32:17:
81:1e:8a:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ7NdbuHh+1vrsN7KoYkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjUwMTAxMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGMxMmYxM2M5NTE0YWE0M2U3Mzg5ZjlkYzUwZGY3YzE5MDRhZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ9AaO/tvus34cHxGzmc7/cOYe6i
1gLDOZrbZXanTWNtm4aubyKPdBNFjq361KIReLq0RYHX6/Pl2jfcZaxkdIRQeVwd
yXGQgghGOWebaUbJwXH91iTGdlpKGr0FRhfEJEtxfnjs8MwcrLKBp+Q4lTychZp9
DSXMHW/zu57ldz1kLlu+sSC5P3lhFwZcJhJ7mwsPX1yyRMXl9DcW59SYJMyo10id
IwrWeXbKX6WULd/zm2NRkuOncyp8hHVQDl5WZcQDCt9jFzU+28aA/jIUB5KoSkf0
Dder69RYRVCFgPNNKDceVo0wYkyLXefEzketIwSjvj+S+JFyg1WohuCgBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTBLxPJUUqkPnOJ+dxQ33wZBK8fMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvRk1FdkU4bFJTcVEtYzRuNTNGRGZmQmtFcng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTs8MA0G
CSqGSIb3DQEBCwUAA4IBAQAuMP87Y8R3GidZaaYMQHffnNYDWu7iytQLqOkgFCLJ
7rDyrlhRo45PWz1CcwCY/yzAVnd8eYwNqi/ggD9vealdLSRNJptHwwRYz5r2SgkQ
kOTiVABybQBUwsDqtdXLR7WGGLt25VUjDl8HDMuugzc2MXPocLE5Mt57jk/9bxzE
oKv+RsU9AJczxOMy2sQc+rmv/7+qbCP7BSr/bKEA0VfCA8tkPSZcZJRWANwjjVCh
4PF/Cg68YrvtrHnLPQYQQ555f1J1MlEEH+hLZ9Zk8LfRLt0SsKPtwoFhdwFvRrLh
2dWUIPwHqGPaSjdbXKAvltVIU4N1Ug1WGz95MheBHopZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:31:19 2025 by rpki-client