Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/RaCiF_wlRBv1c3DOLHu-KxK7FWY.roa
File: RaCiF_wlRBv1c3DOLHu-KxK7FWY.roa (raw, json)
Hash identifier: M5stLFx7nzGkYqZqahgfB4wmPPPvuI61g48xlxh8dko=
Subject key identifier: 45:A0:A2:17:FC:25:44:1B:F5:73:70:CE:2C:7B:BE:2B:12:BB:15:66
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 01941FFA2E428E5E7C012B07ABFC80EDB49A
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/RaCiF_wlRBv1c3DOLHu-KxK7FWY.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210513
IP address blocks: 62.3.56.0/24 maxlen: 24
185.65.255.0/24 maxlen: 24
2a12:100::/29 maxlen: 29
2a12:100:1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:42:8e:5e:7c:01:2b:07:ab:fc:80:ed:b4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45a0a217fc25441bf57370ce2c7bbe2b12bb1566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:bf:3f:76:b7:62:04:92:88:cf:c1:e1:ba:
b1:e0:6a:6d:dc:a0:28:ad:04:9f:06:09:82:e9:fb:
93:dd:f1:9e:a6:ff:51:6c:80:fe:d8:08:e9:8e:e3:
af:4c:92:31:31:73:be:bf:72:3d:a5:25:89:f3:35:
75:c5:a1:fc:ac:ae:8b:f2:25:09:cd:37:91:9d:90:
fd:ff:80:ab:64:83:0f:4c:f1:fe:fe:dc:75:e0:d8:
b4:52:8b:1d:2f:1d:c9:49:d4:2e:af:bd:66:e5:ed:
a3:d8:90:a7:dd:4c:7d:23:aa:15:6b:02:b8:38:2e:
54:30:65:ad:20:2c:18:2f:36:08:d5:ca:2b:cb:14:
c9:46:01:8a:91:8d:d8:18:e0:19:59:00:c1:42:75:
93:91:1a:e9:e9:ba:35:8b:2c:44:77:ea:b0:fd:92:
97:7e:54:c7:00:2c:e6:2e:d2:2e:bb:ef:28:c2:53:
22:a7:8a:8d:8c:a5:d8:c1:b8:1b:f9:fb:91:72:b3:
7c:d4:e4:07:63:d4:af:e1:7a:15:92:40:11:5c:71:
fb:73:01:9d:f1:0d:7b:58:32:b4:4b:3f:43:14:3e:
1b:17:7d:c3:4b:87:a3:f4:53:9e:cc:21:1c:d1:4f:
ea:f3:7f:27:8b:48:52:a2:4e:17:ef:4c:7b:09:b1:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:A2:17:FC:25:44:1B:F5:73:70:CE:2C:7B:BE:2B:12:BB:15:66
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/RaCiF_wlRBv1c3DOLHu-KxK7FWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
185.65.255.0/24
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
b0:d3:1b:50:b7:45:4a:1a:d0:99:af:02:ff:00:61:f7:65:b8:
34:4e:f8:40:2a:6f:81:2c:71:a7:f0:db:27:78:a3:7d:11:27:
d3:fb:3a:a4:c8:00:ce:5b:bc:9a:ad:e3:d5:cd:1f:37:bd:b9:
a7:94:e2:16:a5:ea:be:f2:29:12:49:66:b2:31:2e:f6:0f:11:
37:73:32:0a:8d:06:87:a7:fe:6e:e2:c2:aa:68:f0:6c:54:20:
81:a4:3a:21:b3:27:ea:30:6c:1e:3d:57:e9:6e:ba:ec:c0:27:
97:a8:17:83:20:0b:e3:eb:51:c8:a4:e2:38:36:6a:70:32:a0:
9a:bb:41:2d:13:81:bb:35:b5:de:3a:01:49:f5:be:fc:0d:dd:
8c:66:cf:2d:d8:00:52:fa:87:08:e0:3d:72:fa:2e:6e:31:00:
4b:f2:40:d6:7a:3d:9b:6b:ed:40:12:91:c2:e2:49:38:5f:16:
3f:e5:45:dc:a8:3b:dd:89:d0:de:93:36:b4:60:e4:3f:fe:fd:
b5:cd:fa:8b:23:d0:38:21:99:dd:ce:72:b5:f2:f3:72:e8:fe:
e4:72:71:df:1c:9b:45:2e:ba:96:be:d1:64:1a:9f:14:3c:2c:
be:3d:f6:00:e7:1a:dd:5c:bd:9f:ec:06:8e:59:a4:ae:f5:c0:
5e:90:0b:d0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+i5Cjl58ASsHq/yA7bSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjUwMTAxMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWEwYTIxN2ZjMjU0NDFiZjU3MzcwY2UyYzdiYmUyYjEyYmIxNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYG/P3a3YgSSiM/B4bqx4Gpt3KAo
rQSfBgmC6fuT3fGepv9RbID+2AjpjuOvTJIxMXO+v3I9pSWJ8zV1xaH8rK6L8iUJ
zTeRnZD9/4CrZIMPTPH+/tx14Ni0UosdLx3JSdQur71m5e2j2JCn3Ux9I6oVawK4
OC5UMGWtICwYLzYI1coryxTJRgGKkY3YGOAZWQDBQnWTkRrp6bo1iyxEd+qw/ZKX
flTHACzmLtIuu+8owlMip4qNjKXYwbgb+fuRcrN81OQHY9Sv4XoVkkARXHH7cwGd
8Q17WDK0Sz9DFD4bF33DS4ej9FOezCEc0U/q838ni0hSok4X70x7CbFAhwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEWgohf8JUQb9XNwzix7visSuxVmMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvUmFDaUZfd2xSQnYxYzNET0xIdS1LeEs3RldZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAPgM4AwQA
uUH/MA0EAgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQCw0xtQt0VKGtCZ
rwL/AGH3Zbg0TvhAKm+BLHGn8NsneKN9ESfT+zqkyADOW7yarePVzR83vbmnlOIW
peq+8ikSSWayMS72DxE3czIKjQaHp/5u4sKqaPBsVCCBpDohsyfqMGwePVfpbrrs
wCeXqBeDIAvj61HIpOI4NmpwMqCau0EtE4G7NbXeOgFJ9b78Dd2MZs8t2ABS+ocI
4D1y+i5uMQBL8kDWej2ba+1AEpHC4kk4XxY/5UXcqDvdidDekza0YOQ//v21zfqL
I9A4IZndznK18vNy6P7kcnHfHJtFLrqWvtFkGp8UPCy+PfYA5xrdXL2f7AaOWaSu
9cBekAvQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:19 2025 by rpki-client