Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa
File: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (raw, json)
Hash identifier: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=
Subject key identifier: 7C:1F:FC:2A:3F:05:57:00:3F:A5:18:AB:C6:05:24:F1:5D:12:76:5B
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 0194236A34D7F093F635CFA01B530F0B9F3B
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc0::/32 maxlen: 48
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:34:d7:f0:93:f6:35:cf:a0:1b:53:0f:0b:9f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1ffc2a3f0557003fa518abc60524f15d12765b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:1a:8f:39:cb:d2:6b:52:d4:5d:f9:95:4f:
80:2d:35:04:87:f0:4f:18:70:56:ad:78:85:c2:c4:
2b:a3:0a:f2:7b:c5:e1:7f:f7:ed:27:60:8d:14:7b:
f2:e3:ca:3f:d7:f5:30:33:d9:1d:f2:61:05:85:7a:
d7:ce:26:30:3d:a9:a4:ba:1f:9f:b7:66:db:62:84:
76:1e:e5:07:dc:c5:e3:6a:53:4d:3f:36:c7:9b:a5:
e3:90:1e:67:0b:b8:69:25:45:66:a7:6d:ff:d6:e3:
35:1f:09:3b:8f:1c:e4:57:65:ee:89:8d:29:31:b4:
ca:73:a2:5d:ed:f0:98:77:85:ef:cc:84:76:ab:2a:
93:ef:f8:ce:28:5e:06:30:30:8e:bc:1b:86:e3:c4:
da:17:16:75:da:a2:b3:c8:98:3a:b9:69:3a:35:a6:
65:4b:1e:02:17:5c:c0:69:a3:4b:93:24:2e:07:1c:
5a:88:8a:1a:79:73:ca:17:1e:97:cf:13:83:b3:da:
f8:d5:c7:6f:22:b0:0b:a9:7a:f3:f2:d1:e3:89:14:
00:5b:f3:a9:d7:4a:1a:20:50:6f:78:44:07:f6:41:
f5:22:1b:e0:40:68:52:f8:57:30:96:25:19:cc:a9:
2d:a8:13:b4:66:c5:15:50:7b:5e:1a:ec:46:3a:21:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:FC:2A:3F:05:57:00:3F:A5:18:AB:C6:05:24:F1:5D:12:76:5B
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
2a12:5bc3::/48
Signature Algorithm: sha256WithRSAEncryption
9e:43:ef:b2:9a:6c:14:fd:77:85:27:5c:03:83:0f:2d:8f:1c:
35:08:d0:82:b6:3c:21:2f:36:06:33:a7:f1:e0:a7:25:ae:1c:
e4:fc:6e:d5:90:dc:b5:db:81:d5:e7:22:78:f5:99:08:58:df:
1c:ec:86:6d:e2:58:0b:ac:8d:37:50:27:2a:fd:7f:f1:1a:f3:
e8:a0:4b:9c:4d:a6:21:48:13:1c:fb:fa:91:ff:ac:2a:ae:fb:
85:f1:6e:a2:0c:e4:83:b1:32:f3:37:6f:f3:a7:b2:2b:23:43:
25:41:e3:42:73:d6:cd:16:95:63:81:91:75:ad:f2:f4:8f:c1:
48:02:75:10:dd:6c:1b:12:27:76:4d:72:84:aa:4d:d0:f4:55:
56:44:60:2c:5e:2c:87:da:d0:5c:68:e0:d0:b9:e3:8b:5d:42:
02:52:3c:1f:14:af:82:19:51:bc:75:2b:8b:bf:22:84:95:28:
7c:2d:d7:44:90:bf:3e:87:d3:6f:3b:99:90:29:38:93:73:77:
96:c6:26:27:eb:c8:c3:8c:68:82:28:a2:fd:7f:99:ae:99:ee:
79:79:c2:7b:16:40:cf:31:c8:15:b4:7d:b8:56:ea:d0:83:64:
18:42:f4:d2:ea:54:4f:ab:16:7c:f4:d2:af:eb:a1:e1:34:e8:
28:77:e3:b9
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQjajTX8JP2Nc+gG1MPC587MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2
ZDlmZGQwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzFmZmMyYTNmMDU1NzAwM2ZhNTE4YWJjNjA1MjRmMTVkMTI3NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOwajznL0mtS1F35lU+ALTUEh/BP
GHBWrXiFwsQrowrye8Xhf/ftJ2CNFHvy48o/1/UwM9kd8mEFhXrXziYwPamkuh+f
t2bbYoR2HuUH3MXjalNNPzbHm6XjkB5nC7hpJUVmp23/1uM1Hwk7jxzkV2XuiY0p
MbTKc6Jd7fCYd4XvzIR2qyqT7/jOKF4GMDCOvBuG48TaFxZ12qKzyJg6uWk6NaZl
Sx4CF1zAaaNLkyQuBxxaiIoaeXPKFx6XzxODs9r41cdvIrALqXrz8tHjiRQAW/Op
10oaIFBveEQH9kH1IhvgQGhS+FcwliUZzKktqBO0ZsUVUHteGuxGOiHpFQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFHwf/Co/BVcAP6UYq8YFJPFdEnZbMB8GA1UdIwQY
MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt
MjQwZDFmZmQwOWI4LzEvZkJfOEtqOEZWd0FfcFJpcnhnVWs4VjBTZGxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4
LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAXo77MCoE
AgACMCQwEAMFBioSW8ADBwAqElvBAAADBwAqElvCAAADBwAqElvDAAAwDQYJKoZI
hvcNAQELBQADggEBAJ5D77KabBT9d4UnXAODDy2PHDUI0IK2PCEvNgYzp/HgpyWu
HOT8btWQ3LXbgdXnInj1mQhY3xzshm3iWAusjTdQJyr9f/Ea8+igS5xNpiFIExz7
+pH/rCqu+4XxbqIM5IOxMvM3b/OnsisjQyVB40Jz1s0WlWOBkXWt8vSPwUgCdRDd
bBsSJ3ZNcoSqTdD0VVZEYCxeLIfa0Fxo4NC544tdQgJSPB8Ur4IZUbx1K4u/IoSV
KHwt10SQvz6H0287mZApOJNzd5bGJifryMOMaIIoov1/ma6Z7nl5wnsWQM8xyBW0
fbhW6tCDZBhC9NLqVE+rFnz00q/roeE06Ch347k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:30 2025 by rpki-client