Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-feZXYDiYfHR7e4ZeX8KeYvPoL4.roa
File: 1-feZXYDiYfHR7e4ZeX8KeYvPoL4.roa (raw, json)
Hash identifier: USix1wOZJqwKepxb+dunrLx6XXxYIhAMOujodYRBxR0=
Subject key identifier: F9:F7:99:5D:80:E2:61:F1:D1:ED:EE:19:79:7F:0A:79:8B:CF:A0:BE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019465D9F9BD39DA3D88193BDC69D9554E30
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-feZXYDiYfHR7e4ZeX8KeYvPoL4.roa
Signing time: Tue 14 Jan 2025 17:26:11 +0000
ROA not before: Tue 14 Jan 2025 17:26:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 94.154.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:d9:f9:bd:39:da:3d:88:19:3b:dc:69:d9:55:4e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 14 17:26:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f7995d80e261f1d1edee19797f0a798bcfa0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:7a:a5:ea:31:09:39:70:e2:a0:33:6d:ca:
7c:50:ed:0b:2d:9b:80:2c:0e:af:ef:96:ce:1e:af:
db:5a:d7:fc:46:9d:5d:75:2e:99:85:2f:26:03:f9:
4e:0b:be:43:15:d5:ce:ef:6b:ab:b4:a0:0c:a9:e6:
b8:68:b3:4b:87:e5:76:86:c1:b5:0c:f7:1b:a3:d2:
9b:68:25:22:7a:fc:6d:68:96:65:fe:d5:f0:98:9d:
32:d5:50:c6:33:54:c0:58:e9:00:51:98:80:cb:f1:
32:de:c5:34:92:cb:0a:a0:44:32:5f:eb:96:fe:6e:
a0:e2:74:ca:9a:dd:ff:28:5b:59:1e:7f:1b:10:ad:
5a:66:0e:7d:9f:ff:b2:70:43:14:19:05:e9:83:67:
f4:83:78:87:1a:9f:60:89:f0:ff:45:b2:0f:d5:bb:
37:ac:72:b2:d6:a2:e7:6b:24:a0:13:fb:ea:c3:07:
d8:14:91:e7:97:0f:b5:a5:4e:74:fb:3e:dd:fc:37:
87:e8:80:b7:1d:35:6c:eb:f5:fb:38:c4:13:61:19:
bb:b8:ee:6e:74:10:df:3f:86:18:0f:01:c4:a4:c0:
6a:00:20:57:16:82:38:d0:76:cc:e9:e4:03:65:f6:
1c:5e:ca:29:1d:ae:7c:03:13:a3:ba:cb:66:e0:b3:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:99:5D:80:E2:61:F1:D1:ED:EE:19:79:7F:0A:79:8B:CF:A0:BE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-feZXYDiYfHR7e4ZeX8KeYvPoL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f7:b5:3a:42:f9:73:a8:67:99:91:23:d4:46:fe:df:bd:06:
e9:38:6c:bc:84:33:6f:5c:0d:59:32:6e:ea:68:d3:23:74:df:
64:c4:61:06:2a:74:ba:86:72:6a:17:44:33:a3:33:98:6b:ed:
7d:12:67:30:15:a2:24:b5:13:5f:23:0c:b3:72:03:60:60:dd:
2c:fb:ca:a9:53:2b:92:2f:44:11:1e:fd:88:63:95:e1:e9:2c:
80:54:db:ec:c0:7c:20:14:09:ef:04:ff:2d:be:39:f7:3e:92:
1d:e7:63:b0:96:8c:2a:76:80:aa:44:87:bf:88:c9:c1:97:fd:
0d:e1:b3:5d:d5:f8:7a:99:51:23:c7:25:70:de:3f:58:49:9c:
91:83:e3:7d:f6:bf:5b:b5:00:71:16:f8:69:5c:e1:2e:43:45:
75:57:40:28:eb:e4:47:43:38:15:80:80:8d:cb:82:61:e5:c4:
2c:40:62:4e:a7:0a:49:06:d4:c8:69:c7:80:50:59:df:b9:d1:
fb:fe:91:77:75:66:14:b2:37:5d:00:92:2e:c7:81:e8:26:39:
cb:88:31:36:03:df:ca:47:ce:de:e6:61:32:63:1a:a8:66:24:
ae:ca:8e:5c:b0:fd:75:cc:61:b4:01:54:b4:6b:d0:f8:ad:6e:
d6:6c:5a:dc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZRl2fm9Odo9iBk73GnZVU4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwMTE0MTcyNjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWY3OTk1ZDgwZTI2MWYxZDFlZGVlMTk3OTdmMGE3OThiY2ZhMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3d6peoxCTlw4qAzbcp8UO0LLZuA
LA6v75bOHq/bWtf8Rp1ddS6ZhS8mA/lOC75DFdXO72urtKAMqea4aLNLh+V2hsG1
DPcbo9KbaCUievxtaJZl/tXwmJ0y1VDGM1TAWOkAUZiAy/Ey3sU0kssKoEQyX+uW
/m6g4nTKmt3/KFtZHn8bEK1aZg59n/+ycEMUGQXpg2f0g3iHGp9gifD/RbIP1bs3
rHKy1qLnaySgE/vqwwfYFJHnlw+1pU50+z7d/DeH6IC3HTVs6/X7OMQTYRm7uO5u
dBDfP4YYDwHEpMBqACBXFoI40HbM6eQDZfYcXsopHa58AxOjustm4LNpBQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPn3mV2A4mHx0e3uGXl/CnmLz6C+MB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvMS1mZVpYWURpWWZIUjdlNFplWDhLZVl2UG9MNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0
My8xLzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6aITAN
BgkqhkiG9w0BAQsFAAOCAQEAbve1OkL5c6hnmZEj1Eb+370G6ThsvIQzb1wNWTJu
6mjTI3TfZMRhBip0uoZyahdEM6MzmGvtfRJnMBWiJLUTXyMMs3IDYGDdLPvKqVMr
ki9EER79iGOV4eksgFTb7MB8IBQJ7wT/Lb459z6SHedjsJaMKnaAqkSHv4jJwZf9
DeGzXdX4eplRI8clcN4/WEmckYPjffa/W7UAcRb4aVzhLkNFdVdAKOvkR0M4FYCA
jcuCYeXELEBiTqcKSQbUyGnHgFBZ37nR+/6Rd3VmFLI3XQCSLseB6CY5y4gxNgPf
ykfO3uZhMmMaqGYkrsqOXLD9dcxhtAFUtGvQ+K1u1mxa3A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:29 2025 by rpki-client