Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/VsFuiofejDNus4q-XJuiSHwgNg0.roa
File: VsFuiofejDNus4q-XJuiSHwgNg0.roa (raw, json)
Hash identifier: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=
Subject key identifier: 56:C1:6E:8A:87:DE:8C:33:6E:B3:8A:BE:5C:9B:A2:48:7C:20:36:0D
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0194221F515229FC55618ADCD9C2BC9120AA
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/VsFuiofejDNus4q-XJuiSHwgNg0.roa
Signing time: Wed 01 Jan 2025 13:47:45 +0000
ROA not before: Wed 01 Jan 2025 13:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5420
IP address blocks: 192.40.72.0/24 maxlen: 24
192.40.73.0/24 maxlen: 24
192.40.74.0/24 maxlen: 24
192.40.75.0/24 maxlen: 24
2001:67c:21a4::/48 maxlen: 48
2a06:f040::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:51:52:29:fc:55:61:8a:dc:d9:c2:bc:91:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56c16e8a87de8c336eb38abe5c9ba2487c20360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:fa:bf:01:8c:57:af:5e:8b:7c:fe:97:f9:
1e:14:9a:90:28:1a:c6:5c:e5:8c:b2:f6:0e:65:ff:
e4:d0:79:2f:7e:e3:0d:30:d0:46:4a:c7:9e:ef:cd:
bd:19:77:0c:7d:84:83:dc:64:c8:05:34:72:ed:61:
4b:93:49:8d:63:6f:98:fd:1a:e9:5a:f9:64:42:9c:
e3:28:48:4b:9f:91:81:aa:0f:cc:14:08:b5:2e:5b:
4a:88:69:0a:1b:f1:28:c7:12:cf:16:be:4a:c1:a7:
19:d6:cd:ac:ec:ab:b7:9f:e2:58:10:70:bb:f8:bf:
84:de:b0:dc:98:8a:3b:30:84:c7:55:dc:4f:6f:03:
a2:2b:77:fa:ba:eb:a9:28:17:f9:03:10:ee:d7:cd:
35:c4:54:7b:57:69:5f:91:39:3a:87:4c:52:48:36:
cd:5a:1d:3b:42:ef:27:77:00:7d:84:56:e9:d4:fe:
3a:3f:77:c9:be:4f:d3:a0:f2:8a:cc:31:b1:59:1a:
60:61:b7:c4:18:81:9a:8e:39:95:0d:79:88:9f:4c:
5a:e5:93:01:d9:64:42:c0:dd:eb:d0:bc:2b:2f:c9:
29:b5:cc:0f:99:c9:dc:5d:29:44:07:4a:69:a8:07:
9d:e7:b7:f4:01:8e:c1:1b:26:9c:6d:c0:c8:3c:42:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:6E:8A:87:DE:8C:33:6E:B3:8A:BE:5C:9B:A2:48:7C:20:36:0D
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/VsFuiofejDNus4q-XJuiSHwgNg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.72.0/22
IPv6:
2001:67c:21a4::/48
2a06:f040::/32
Signature Algorithm: sha256WithRSAEncryption
9e:6f:c5:c2:ae:be:d9:6e:99:99:c8:8d:14:97:62:84:02:44:
6b:ad:3a:13:1a:a5:93:0f:3a:0b:e1:82:54:36:20:74:eb:e1:
ec:59:ad:2e:d6:62:89:a3:12:b5:18:bc:5f:22:f0:bd:f2:f8:
e1:b5:a2:a8:9f:5b:ff:38:ed:d3:fd:46:dc:84:0a:fa:76:b7:
38:f5:3a:7d:de:0c:20:4b:9f:92:90:62:33:db:6e:72:40:e1:
ee:7e:13:d1:44:83:f5:9f:6c:be:2a:f7:f5:43:08:35:af:36:
b1:18:06:8a:f9:54:ee:7b:86:5a:d0:85:a3:5d:cb:bd:49:12:
89:57:15:37:bd:8d:54:cc:42:0d:f8:5b:86:da:a5:9e:e4:90:
4c:87:32:73:e7:45:f4:ec:06:f2:a7:14:6e:b7:11:52:dc:a0:
48:4e:d9:d4:91:99:ab:d0:31:92:73:0d:f7:3d:71:18:1d:6f:
49:d3:a6:fc:36:81:c8:4d:51:b0:da:b8:a0:dd:cb:48:95:dd:
62:25:1e:1a:bd:8f:90:39:0f:35:a4:41:2e:79:5b:f3:5a:f6:
23:ac:e6:3b:aa:c8:ac:5a:fd:54:64:b6:9a:d0:33:62:60:6c:
d3:44:b1:24:44:40:9b:3b:1a:70:fa:82:54:e9:4c:9b:24:e1:
24:95:74:f1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQiH1FSKfxVYYrc2cK8kSCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk
YTExMjYwHhcNMjUwMTAxMTM0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmMxNmU4YTg3ZGU4YzMzNmViMzhhYmU1YzliYTI0ODdjMjAzNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tf6vwGMV69ei3z+l/keFJqQKBrG
XOWMsvYOZf/k0HkvfuMNMNBGSsee7829GXcMfYSD3GTIBTRy7WFLk0mNY2+Y/Rrp
WvlkQpzjKEhLn5GBqg/MFAi1LltKiGkKG/EoxxLPFr5KwacZ1s2s7Ku3n+JYEHC7
+L+E3rDcmIo7MITHVdxPbwOiK3f6uuupKBf5AxDu1801xFR7V2lfkTk6h0xSSDbN
Wh07Qu8ndwB9hFbp1P46P3fJvk/ToPKKzDGxWRpgYbfEGIGajjmVDXmIn0xa5ZMB
2WRCwN3r0LwrL8kptcwPmcncXSlEB0ppqAed57f0AY7BGyacbcDIPEJv4wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFbBboqH3owzbrOKvlybokh8IDYNMB8GA1UdIwQY
MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw
LWI1YWJmNDQwZTg5My8xL1ZzRnVpb2ZlakROdXM0cS1YSnVpU0h3Z05nMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgwLWI1YWJmNDQwZTg5
My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMAwEAgABMAYDBALAKEgw
FgQCAAIwEAMHACABBnwhpAMFACoG8EAwDQYJKoZIhvcNAQELBQADggEBAJ5vxcKu
vtlumZnIjRSXYoQCRGutOhMapZMPOgvhglQ2IHTr4exZrS7WYomjErUYvF8i8L3y
+OG1oqifW/847dP9RtyECvp2tzj1On3eDCBLn5KQYjPbbnJA4e5+E9FEg/WfbL4q
9/VDCDWvNrEYBor5VO57hlrQhaNdy71JEolXFTe9jVTMQg34W4bapZ7kkEyHMnPn
RfTsBvKnFG63EVLcoEhO2dSRmavQMZJzDfc9cRgdb0nTpvw2gchNUbDauKDdy0iV
3WIlHhq9j5A5DzWkQS55W/Na9iOs5juqyKxa/VRktprQM2JgbNNEsSREQJs7GnD6
glTpTJsk4SSVdPE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:04 2025 by rpki-client