Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa
File: fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa (raw, json)
Hash identifier: 5G8k94mJ+piuCkdBnO5V9g3FiuOM9TQAN0h6Zu9iGPI=
Subject key identifier: 7E:17:64:CC:34:E9:20:8C:D7:23:B5:11:F9:14:6A:7E:7F:32:60:AF
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B96AA066BD5BE481C1C939420791
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49154
IP address blocks: 212.188.64.0/22 maxlen: 22
212.188.64.0/23 maxlen: 23
212.188.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b9:6a:a0:66:bd:5b:e4:81:c1:c9:39:42:07:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e1764cc34e9208cd723b511f9146a7e7f3260af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:1f:b2:8b:bb:fb:f5:58:a2:68:f9:ba:14:
c7:be:8b:4d:21:dc:f1:46:cc:fe:ab:0f:00:a2:93:
95:86:56:e7:c2:8c:8d:f3:1e:ba:e7:77:98:9b:d2:
7b:2c:61:df:fd:7d:f5:eb:d1:83:a4:19:59:ab:e1:
f8:fc:2f:1c:2a:fb:cf:e5:5d:95:6f:03:58:6d:0d:
4c:aa:9d:c1:a2:f4:8d:6d:41:42:be:30:19:57:cd:
78:09:b3:5a:ff:38:f4:c9:24:08:54:74:59:b0:e5:
04:0d:de:2f:b3:e2:a9:d7:59:28:53:c3:05:b4:a3:
d2:cd:fa:13:a8:20:c9:38:e1:5f:85:4d:a2:e9:04:
26:4a:3c:ff:ff:3b:e2:63:b5:89:6f:45:06:77:35:
89:d8:00:6f:6d:f9:c5:dd:46:f5:8d:8b:10:e7:53:
bd:bd:ac:7f:8e:f5:39:9c:48:ae:69:95:b8:34:c3:
a9:d7:78:db:36:45:da:6b:9a:10:6a:9c:f9:0e:92:
a9:c7:bc:26:34:fe:5e:97:8d:a0:3c:f1:27:a5:e1:
e9:93:7d:32:e5:ac:2a:6d:c9:d6:8e:d0:76:13:a5:
f3:b8:02:51:77:51:9c:30:c0:81:d3:34:a3:b0:4e:
40:28:26:58:5e:1d:02:64:f9:b7:53:d0:c6:00:b0:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:64:CC:34:E9:20:8C:D7:23:B5:11:F9:14:6A:7E:7F:32:60:AF
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.188.64.0/22
Signature Algorithm: sha256WithRSAEncryption
36:a4:eb:4e:fa:42:30:b7:4a:86:36:71:09:36:7c:80:b0:37:
cf:ef:11:61:13:4f:e5:07:9f:64:fd:7a:8c:3d:c3:17:ae:8d:
44:3c:24:5b:05:8b:af:d7:7b:07:a2:a0:3d:ab:d8:84:87:a8:
09:ac:3d:a7:10:c3:c7:ed:ab:2a:e5:d6:b2:08:e8:60:7b:7e:
5a:e5:f7:8c:98:bd:d4:2e:92:d3:56:00:de:16:1f:64:ad:9c:
66:d7:62:b7:95:3d:17:89:6d:25:ec:fb:30:33:0e:e9:b2:c5:
34:0c:24:a4:e9:a4:e2:06:a4:87:b4:a6:a5:42:1a:f5:30:71:
54:a6:08:81:ec:17:bc:8f:a5:09:68:7f:3a:56:b8:42:12:82:
73:3f:e7:91:dc:0f:19:25:bb:40:08:a5:c4:a9:7d:37:1f:f3:
d6:74:80:c8:0a:02:0e:4b:7e:c4:e1:74:39:ea:b5:26:33:27:
dc:64:b7:61:f0:68:22:96:e3:a8:35:d8:52:4d:d6:c6:9b:17:
b6:f3:a0:0c:f3:34:9d:2b:05:90:e8:ae:25:85:e2:53:20:c6:
0a:22:c9:36:90:4c:c1:c2:62:0e:05:be:09:5b:39:d4:79:44:
8a:20:f4:c8:ed:8d:e1:ae:5c:11:28:bb:f6:4f:86:62:6c:3a:
2b:64:05:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2blqoGa9W+SBwck5QgeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjUwMTAyMTE0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTE3NjRjYzM0ZTkyMDhjZDcyM2I1MTFmOTE0NmE3ZTdmMzI2MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT4fsou7+/VYomj5uhTHvotNIdzx
Rsz+qw8AopOVhlbnwoyN8x6653eYm9J7LGHf/X3169GDpBlZq+H4/C8cKvvP5V2V
bwNYbQ1Mqp3BovSNbUFCvjAZV814CbNa/zj0ySQIVHRZsOUEDd4vs+Kp11koU8MF
tKPSzfoTqCDJOOFfhU2i6QQmSjz//zviY7WJb0UGdzWJ2ABvbfnF3Ub1jYsQ51O9
vax/jvU5nEiuaZW4NMOp13jbNkXaa5oQapz5DpKpx7wmNP5el42gPPEnpeHpk30y
5awqbcnWjtB2E6XzuAJRd1GcMMCB0zSjsE5AKCZYXh0CZPm3U9DGALAVWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH4XZMw06SCM1yO1EfkUan5/MmCvMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvZmhka3pEVHBJSXpYSTdVUi1SUnFmbjh5WUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1LxAMA0G
CSqGSIb3DQEBCwUAA4IBAQA2pOtO+kIwt0qGNnEJNnyAsDfP7xFhE0/lB59k/XqM
PcMXro1EPCRbBYuv13sHoqA9q9iEh6gJrD2nEMPH7asq5dayCOhge35a5feMmL3U
LpLTVgDeFh9krZxm12K3lT0XiW0l7PswMw7pssU0DCSk6aTiBqSHtKalQhr1MHFU
pgiB7Be8j6UJaH86VrhCEoJzP+eR3A8ZJbtACKXEqX03H/PWdIDICgIOS37E4XQ5
6rUmMyfcZLdh8GgiluOoNdhSTdbGmxe286AM8zSdKwWQ6K4lheJTIMYKIsk2kEzB
wmIOBb4JWznUeUSKIPTI7Y3hrlwRKLv2T4ZibDorZAVi
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:24:07 2025 by rpki-client