Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/_nLH4yuuFQfyAsGvM-Hn21cXD8E.roa
File: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (raw, json)
Hash identifier: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=
Subject key identifier: FE:72:C7:E3:2B:AE:15:07:F2:02:C1:AF:33:E1:E7:DB:57:17:0F:C1
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019426D9FDA6BBAEF42CA8DC38F9F030B8D3
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/_nLH4yuuFQfyAsGvM-Hn21cXD8E.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34711
IP address blocks: 195.64.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fd:a6:bb:ae:f4:2c:a8:dc:38:f9:f0:30:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe72c7e32bae1507f202c1af33e1e7db57170fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:15:24:29:6f:5c:7d:dc:4d:a8:92:a6:f5:
14:99:67:24:0f:8e:02:f9:9c:61:c8:f1:0c:92:b9:
ff:83:d2:04:5e:aa:1a:a8:0c:e2:8d:d6:f0:dc:06:
ff:fc:03:b5:06:8d:3e:9f:3e:7c:18:af:05:6e:e6:
33:37:5e:c1:3f:27:43:64:6f:cb:c9:9d:e2:5e:e9:
46:b8:46:30:a3:46:67:f6:0a:fe:ec:92:d8:10:ca:
09:b1:63:ff:03:56:1f:c9:5c:d3:70:bd:78:fb:ef:
15:cc:e1:1d:2d:04:a0:ab:eb:c0:9f:e7:10:e2:f9:
5a:81:80:cc:5e:ba:45:96:d1:3a:e1:08:b4:cb:11:
60:32:ed:53:25:f8:c5:34:f9:92:c7:71:5f:96:06:
b0:fd:83:fe:b4:60:7b:1f:7a:ae:0d:a6:08:3b:b4:
89:c3:02:27:2d:58:6e:9d:d9:3a:80:81:42:10:1e:
f8:8c:39:fd:64:da:bd:e3:af:b0:4e:26:09:cf:ef:
f6:62:49:d5:0b:1c:4b:58:9e:98:bb:8e:0c:8c:32:
89:52:50:0e:e2:27:f2:fb:ca:49:2d:91:94:dd:32:
6a:34:1d:ea:3f:5a:4b:4e:c8:a9:31:55:34:12:b1:
21:e2:b6:d9:3c:c7:c0:5d:91:f3:a3:ee:c2:5a:7c:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:C7:E3:2B:AE:15:07:F2:02:C1:AF:33:E1:E7:DB:57:17:0F:C1
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/_nLH4yuuFQfyAsGvM-Hn21cXD8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.178.0/23
Signature Algorithm: sha256WithRSAEncryption
13:72:30:48:2c:98:4f:58:d8:0d:7c:d9:05:39:95:13:42:3a:
7d:b8:c7:0a:53:91:d3:3e:b7:de:50:51:f9:16:82:58:a9:d5:
93:a6:3a:84:bc:02:e3:e8:8d:51:df:7a:3d:d2:c0:40:ab:a7:
ce:82:f6:d2:00:cc:b3:e5:ab:29:49:e1:4e:a6:1f:95:5a:e6:
bd:12:eb:5b:79:03:9c:50:9d:50:95:b7:5a:fc:fd:3c:24:72:
e6:01:88:9a:7a:7a:a3:c6:2b:ce:91:43:37:f3:93:77:96:20:
c9:26:31:c3:5f:35:ba:15:d0:db:25:c3:85:40:5a:48:db:53:
bb:fd:f3:41:60:fb:8c:38:3f:77:8e:29:60:8b:03:51:d0:a2:
13:01:bc:cb:bf:26:10:44:e6:a9:6f:ec:a5:5b:b3:be:db:1b:
c8:be:8c:9b:ec:d6:bd:39:f3:96:4e:30:04:f7:dc:66:72:a2:
44:4d:2f:2e:ea:a9:ae:bd:aa:8e:ac:7e:64:77:96:de:4e:ee:
b4:73:64:ef:09:39:5b:af:47:fb:b6:48:2a:23:e3:dd:23:c6:
a7:db:3b:7d:8c:e2:43:ec:53:e2:4a:99:96:d3:68:06:5c:27:
7d:a0:9d:6c:56:60:93:49:65:6d:f5:93:ea:ed:e9:df:ef:f4:
01:7f:94:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2f2mu670LKjcOPnwMLjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz
YzEzYmQwHhcNMjUwMTAyMTE1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTcyYzdlMzJiYWUxNTA3ZjIwMmMxYWYzM2UxZTdkYjU3MTcwZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z4VJClvXH3cTaiSpvUUmWckD44C
+ZxhyPEMkrn/g9IEXqoaqAzijdbw3Ab//AO1Bo0+nz58GK8FbuYzN17BPydDZG/L
yZ3iXulGuEYwo0Zn9gr+7JLYEMoJsWP/A1YfyVzTcL14++8VzOEdLQSgq+vAn+cQ
4vlagYDMXrpFltE64Qi0yxFgMu1TJfjFNPmSx3Fflgaw/YP+tGB7H3quDaYIO7SJ
wwInLVhundk6gIFCEB74jDn9ZNq946+wTiYJz+/2YknVCxxLWJ6Yu44MjDKJUlAO
4ify+8pJLZGU3TJqNB3qP1pLTsipMVU0ErEh4rbZPMfAXZHzo+7CWnzV0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5yx+MrrhUH8gLBrzPh59tXFw/BMB8GA1UdIwQY
MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt
YWQ5ZTFhMDUxMGI5LzEvX25MSDR5dXVGUWZ5QXNHdk0tSG4yMWNYRDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5
LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0CyMA0G
CSqGSIb3DQEBCwUAA4IBAQATcjBILJhPWNgNfNkFOZUTQjp9uMcKU5HTPrfeUFH5
FoJYqdWTpjqEvALj6I1R33o90sBAq6fOgvbSAMyz5aspSeFOph+VWua9EutbeQOc
UJ1Qlbda/P08JHLmAYiaenqjxivOkUM385N3liDJJjHDXzW6FdDbJcOFQFpI21O7
/fNBYPuMOD93jilgiwNR0KITAbzLvyYQROapb+ylW7O+2xvIvoyb7Na9OfOWTjAE
99xmcqJETS8u6qmuvaqOrH5kd5beTu60c2TvCTlbr0f7tkgqI+PdI8an2zt9jOJD
7FPiSpmW02gGXCd9oJ1sVmCTSWVt9ZPq7enf7/QBf5QM
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:15 2025 by rpki-client