Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/F4qvGIYkJR23AR8i3U55htWfFrA.roa
File: F4qvGIYkJR23AR8i3U55htWfFrA.roa (raw, json)
Hash identifier: sLcl2GBXiso+t+Z5Jf9zcobxR79ID28gM2VuGSdiFAw=
Subject key identifier: 17:8A:AF:18:86:24:25:1D:B7:01:1F:22:DD:4E:79:86:D5:9F:16:B0
Certificate issuer: /CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Certificate serial: 019422FBD51379523FEA53DC2D996FA61836
Authority key identifier: 81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/F4qvGIYkJR23AR8i3U55htWfFrA.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197965
IP address blocks: 93.180.72.0/21 maxlen: 21
93.180.72.0/24 maxlen: 24
93.180.73.0/24 maxlen: 24
93.180.74.0/24 maxlen: 24
93.180.75.0/24 maxlen: 24
93.180.76.0/24 maxlen: 24
93.180.77.0/24 maxlen: 24
93.180.78.0/24 maxlen: 24
93.180.79.0/24 maxlen: 24
185.176.16.0/22 maxlen: 22
185.176.16.0/24 maxlen: 24
185.176.17.0/24 maxlen: 24
185.176.18.0/24 maxlen: 24
185.176.19.0/24 maxlen: 24
2a00:4c40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d5:13:79:52:3f:ea:53:dc:2d:99:6f:a6:18:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eee17fdbcb09dbbceef663c6157b5fe3081ff4
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=178aaf188624251db7011f22dd4e7986d59f16b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:2b:ee:8e:0b:7f:ac:89:28:8d:c2:96:23:
65:47:c9:a9:70:fa:e7:cb:e7:f0:ee:50:aa:28:95:
c7:1a:bb:c8:05:94:84:ee:6f:24:9d:15:bd:52:93:
5b:36:b8:67:c5:94:45:a8:70:2f:37:9a:13:05:69:
cc:4b:51:f0:34:de:5b:07:4d:9c:5f:aa:53:df:03:
55:49:60:07:64:3d:49:b8:b4:0e:8b:f9:e9:37:6d:
1d:79:4b:0d:78:5b:62:1b:81:30:80:3e:9c:ee:2a:
62:e2:6d:a7:81:47:16:10:2a:0a:ab:47:a3:28:10:
fc:07:e2:8b:3b:31:c1:a2:05:0d:fe:3c:4d:cc:07:
47:76:ec:1b:b6:3d:48:86:48:90:c4:2d:3a:89:8a:
16:5a:49:bf:b0:a6:80:b1:73:03:29:16:f5:92:bb:
9c:2e:a0:3e:ad:2a:c1:1c:ec:6c:60:0a:1d:86:bd:
8d:50:2e:ba:94:40:db:03:cb:d9:ba:51:97:a2:6e:
0e:28:39:58:44:52:46:d8:63:fb:5b:bf:5a:2b:4a:
78:1c:2b:af:eb:2c:e1:65:49:83:f6:de:8d:be:c9:
c2:12:ec:2e:fc:12:75:74:b4:b2:82:a5:4d:6a:3b:
f8:9c:59:bc:f3:9b:40:36:b7:f4:66:5b:29:f0:55:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:AF:18:86:24:25:1D:B7:01:1F:22:DD:4E:79:86:D5:9F:16:B0
X509v3 Authority Key Identifier:
keyid:81:EE:E1:7F:DB:CB:09:DB:BC:EE:F6:63:C6:15:7B:5F:E3:08:1F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7hf9vLCdu87vZjxhV7X-MIH_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/F4qvGIYkJR23AR8i3U55htWfFrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/650a6b-4826-4c1e-a972-48ad14ba7498/1/ge7hf9vLCdu87vZjxhV7X-MIH_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.72.0/21
185.176.16.0/22
IPv6:
2a00:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
a6:44:b7:71:79:76:b8:91:4d:0c:26:ab:5f:a0:24:9f:50:57:
87:64:bd:ce:41:91:2b:b5:54:52:5b:c5:3e:95:21:f8:24:91:
e0:a3:e5:7f:dd:b7:24:3c:2e:60:65:d9:99:44:e5:b0:0c:0a:
85:13:29:cf:4c:cd:cb:df:84:25:75:e1:60:fc:25:e0:ef:df:
d4:ec:6e:c3:1d:13:e5:95:b7:c5:c3:8e:6d:dd:0e:a8:ed:f4:
12:c6:bb:ed:29:68:87:76:68:fd:f3:45:00:ff:7a:3a:0f:6b:
eb:5f:23:9f:3a:f1:22:5b:e1:ac:21:fa:49:5c:d0:77:b4:9e:
56:2a:39:1d:3e:c6:5a:e4:6e:2b:4b:03:86:67:6c:bb:3e:ec:
0a:ce:17:6d:19:37:7e:73:77:b1:05:ca:0b:c1:a8:03:65:09:
7d:55:52:27:f5:2b:b5:9d:60:78:d1:c6:e5:7d:de:35:7e:01:
63:33:e7:37:6e:60:6a:57:ee:0b:6f:a6:40:e8:e3:0e:dc:87:
09:d1:3a:7e:4c:54:60:28:4b:4e:35:12:69:67:88:99:08:c2:
97:50:af:22:73:66:ae:45:81:86:29:f5:39:f4:51:b3:ff:5a:
8d:79:85:87:da:71:0a:92:da:ee:2d:2b:0e:e1:cd:a1:92:50:
54:cb:a3:51
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQi+9UTeVI/6lPcLZlvphg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVlMTdmZGJjYjA5ZGJiY2VlZjY2M2M2MTU3YjVmZTMw
ODFmZjQwHhcNMjUwMTAxMTc0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhhYWYxODg2MjQyNTFkYjcwMTFmMjJkZDRlNzk4NmQ1OWYxNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5sr7o4Lf6yJKI3CliNlR8mpcPrn
y+fw7lCqKJXHGrvIBZSE7m8knRW9UpNbNrhnxZRFqHAvN5oTBWnMS1HwNN5bB02c
X6pT3wNVSWAHZD1JuLQOi/npN20deUsNeFtiG4EwgD6c7ipi4m2ngUcWECoKq0ej
KBD8B+KLOzHBogUN/jxNzAdHduwbtj1IhkiQxC06iYoWWkm/sKaAsXMDKRb1kruc
LqA+rSrBHOxsYAodhr2NUC66lEDbA8vZulGXom4OKDlYRFJG2GP7W79aK0p4HCuv
6yzhZUmD9t6NvsnCEuwu/BJ1dLSygqVNajv4nFm885tANrf0Zlsp8FUUrQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBeKrxiGJCUdtwEfIt1OeYbVnxawMB8GA1UdIwQY
MBaAFIHu4X/bywnbvO72Y8YVe1/jCB/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3aGY5dkxDZHU4N3ZaanhoVjdYLU1JSF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82NTBhNmItNDgyNi00YzFlLWE5NzIt
NDhhZDE0YmE3NDk4LzEvRjRxdkdJWWtKUjIzQVI4aTNVNTVodFdmRnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82NTBhNmItNDgyNi00YzFlLWE5NzItNDhhZDE0YmE3NDk4
LzEvZ2U3aGY5dkxDZHU4N3ZaanhoVjdYLU1JSF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXbRIAwQC
ubAQMA0EAgACMAcDBQAqAExAMA0GCSqGSIb3DQEBCwUAA4IBAQCmRLdxeXa4kU0M
JqtfoCSfUFeHZL3OQZErtVRSW8U+lSH4JJHgo+V/3bckPC5gZdmZROWwDAqFEynP
TM3L34QldeFg/CXg79/U7G7DHRPllbfFw45t3Q6o7fQSxrvtKWiHdmj980UA/3o6
D2vrXyOfOvEiW+GsIfpJXNB3tJ5WKjkdPsZa5G4rSwOGZ2y7PuwKzhdtGTd+c3ex
BcoLwagDZQl9VVIn9Su1nWB40cblfd41fgFjM+c3bmBqV+4Lb6ZA6OMO3IcJ0Tp+
TFRgKEtONRJpZ4iZCMKXUK8ic2auRYGGKfU59FGz/1qNeYWH2nEKktruLSsO4c2h
klBUy6NR
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:02 2025 by rpki-client