Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/fc5qhRUu_bBsdB33TSVsq6f89o8.roa
File: fc5qhRUu_bBsdB33TSVsq6f89o8.roa (raw, json)
Hash identifier: lZbvlThe0e2vAA/qHSYCgpP/K95jAN4HZKyoWaj+RfI=
Subject key identifier: 7D:CE:6A:85:15:2E:FD:B0:6C:74:1D:F7:4D:25:6C:AB:A7:FC:F6:8F
Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial: 0194222039A87BC51311D98A7162B567C4FD
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/fc5qhRUu_bBsdB33TSVsq6f89o8.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15388
IP address blocks: 185.62.64.0/22 maxlen: 22
212.77.224.0/19 maxlen: 19
2a02:2800::/29 maxlen: 29
2a02:2800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:39:a8:7b:c5:13:11:d9:8a:71:62:b5:67:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dce6a85152efdb06c741df74d256caba7fcf68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:dd:3e:f6:49:48:4b:77:e1:dc:fe:aa:99:
42:7b:89:93:13:8f:ad:11:7c:8b:9b:68:32:b1:15:
cc:0c:ac:1e:a5:82:ac:28:6e:cd:c7:03:ad:8b:8a:
14:72:b2:0a:ec:6e:59:ce:7e:ce:d3:e6:20:48:f8:
ee:02:37:92:01:f3:a5:9e:fe:91:88:fa:11:89:ef:
19:4e:b2:f2:fe:5a:ff:f5:97:da:28:fe:bc:ee:a0:
d1:98:c8:eb:d3:07:13:6b:8e:b0:2c:d4:22:c7:6c:
7c:a2:aa:e8:50:75:78:07:48:27:02:08:50:91:91:
9a:b6:ef:09:ef:83:5a:4d:d0:59:d3:78:16:87:86:
32:5a:e9:64:57:d3:eb:86:bf:f4:5d:c3:74:99:92:
77:4c:1e:7f:44:5d:a0:f1:70:6f:1b:85:3e:e1:18:
e8:99:3e:4c:c4:91:91:35:68:e3:d1:69:12:c7:c1:
a2:6a:cb:20:33:01:96:40:8f:4c:9e:d9:02:a0:84:
f4:5f:7a:7f:62:23:e2:88:ec:c0:b9:25:f3:41:ed:
a5:60:26:8f:5f:cf:67:4e:32:e7:33:87:92:61:6a:
6f:b1:04:4f:b5:a7:92:97:5c:42:5d:07:7e:e7:7a:
9b:47:d5:8f:95:f3:95:ef:19:84:fb:27:cf:aa:75:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:6A:85:15:2E:FD:B0:6C:74:1D:F7:4D:25:6C:AB:A7:FC:F6:8F
X509v3 Authority Key Identifier:
keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/fc5qhRUu_bBsdB33TSVsq6f89o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.64.0/22
212.77.224.0/19
IPv6:
2a02:2800::/29
Signature Algorithm: sha256WithRSAEncryption
71:5c:1b:48:69:b1:f5:aa:d6:66:3f:76:43:35:b1:12:63:29:
58:97:7e:d4:8d:74:82:ae:39:69:8f:2b:ba:94:24:67:d1:f0:
f0:8a:f3:e6:73:d0:24:59:9f:77:b6:f0:ce:a0:e3:1b:1c:ab:
4e:25:c2:a6:0e:98:f8:03:7e:bc:93:19:85:fa:50:fc:4d:fc:
4d:62:43:03:f7:f0:98:f7:e6:f0:64:fb:66:9b:88:0c:e2:0b:
dd:09:08:4a:06:d1:1e:0b:4c:de:40:c1:95:41:03:21:ec:cc:
ba:d6:9e:9d:81:1f:f3:3b:41:60:a3:b3:69:bf:6a:e9:c0:1a:
1e:d1:e0:b5:4b:e1:39:5a:46:de:d7:a5:f1:da:25:cf:49:59:
c5:01:af:08:b2:88:a4:9b:78:fa:b2:d5:37:0c:7d:99:c3:7f:
86:e8:86:4d:b3:bb:34:e2:a3:36:ad:9d:f9:85:c5:6f:5f:a4:
e5:52:14:84:0f:eb:67:47:04:a5:29:c2:de:d4:5e:ef:0a:98:
4d:a9:b9:da:5d:36:7a:3e:13:25:55:50:3c:2b:8a:74:a9:23:
38:bf:07:c4:ac:ec:d5:ac:77:01:3f:54:31:58:4c:76:a7:1f:
7e:a4:0a:98:49:a6:1e:bd:08:ae:15:11:80:37:79:ed:a0:f7:
28:94:44:24
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQiIDmoe8UTEdmKcWK1Z8T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODhiNTZiZDllMDE2ZjliYzUyMWFmNGRjMjQ5ZTZkMTI1
NmIxZGYwHhcNMjUwMTAxMTM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGNlNmE4NTE1MmVmZGIwNmM3NDFkZjc0ZDI1NmNhYmE3ZmNmNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxrdPvZJSEt34dz+qplCe4mTE4+t
EXyLm2gysRXMDKwepYKsKG7NxwOti4oUcrIK7G5Zzn7O0+YgSPjuAjeSAfOlnv6R
iPoRie8ZTrLy/lr/9ZfaKP687qDRmMjr0wcTa46wLNQix2x8oqroUHV4B0gnAghQ
kZGatu8J74NaTdBZ03gWh4YyWulkV9Prhr/0XcN0mZJ3TB5/RF2g8XBvG4U+4Rjo
mT5MxJGRNWjj0WkSx8GiassgMwGWQI9MntkCoIT0X3p/YiPiiOzAuSXzQe2lYCaP
X89nTjLnM4eSYWpvsQRPtaeSl1xCXQd+53qbR9WPlfOV7xmE+yfPqnUYiwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFH3OaoUVLv2wbHQd900lbKun/PaPMB8GA1UdIwQY
MBaAFMCItWvZ4Bb5vFIa9Nwknm0SVrHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lpMWE5bmdGdm04VWhyMDNDU2ViUkpXc2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNWFjNDYtNGM1OS00YjNlLWI3MWUt
YmVjZjEyODYyNDk3LzEvZmM1cWhSVXVfYkJzZEIzM1RTVnNxNmY4OW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNWFjNDYtNGM1OS00YjNlLWI3MWUtYmVjZjEyODYyNDk3
LzEvd0lpMWE5bmdGdm04VWhyMDNDU2ViUkpXc2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuT5AAwQF
1E3gMA0EAgACMAcDBQMqAigAMA0GCSqGSIb3DQEBCwUAA4IBAQBxXBtIabH1qtZm
P3ZDNbESYylYl37UjXSCrjlpjyu6lCRn0fDwivPmc9AkWZ93tvDOoOMbHKtOJcKm
Dpj4A368kxmF+lD8TfxNYkMD9/CY9+bwZPtmm4gM4gvdCQhKBtEeC0zeQMGVQQMh
7My61p6dgR/zO0Fgo7Npv2rpwBoe0eC1S+E5Wkbe16Xx2iXPSVnFAa8Isoikm3j6
stU3DH2Zw3+G6IZNs7s04qM2rZ35hcVvX6TlUhSED+tnRwSlKcLe1F7vCphNqbna
XTZ6PhMlVVA8K4p0qSM4vwfErOzVrHcBP1QxWEx2px9+pAqYSaYevQiuFRGAN3nt
oPcolEQk
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:51 2025 by rpki-client