Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa
File: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (raw, json)
Hash identifier: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=
Subject key identifier: F9:FC:FB:D3:E9:C7:3D:74:9F:BD:DE:A3:EC:4B:CD:A9:C9:FA:61:32
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 0194228DC4F63BC56B88B77B9A688205F618
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42837
IP address blocks: 193.34.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c4:f6:3b:c5:6b:88:b7:7b:9a:68:82:05:f6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9fcfbd3e9c73d749fbddea3ec4bcda9c9fa6132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:2f:ad:89:9e:72:31:09:dc:7d:5e:79:e2:
ff:1e:8a:80:6f:de:e3:6d:06:c0:74:14:20:aa:1b:
05:74:fb:b4:2f:be:51:2e:76:80:ac:87:ba:8f:5e:
42:6a:50:53:81:49:8e:b1:a3:7d:98:a1:90:0f:e4:
38:ad:1e:11:71:87:37:41:6d:07:f2:e8:c0:61:a8:
e6:e4:7d:c1:0f:91:66:ed:4e:b6:8e:40:a4:22:a2:
9f:c0:fa:0c:a9:70:03:c9:b8:b4:39:c0:22:4d:bb:
11:20:15:7b:3b:92:1a:bf:58:44:66:00:6a:dd:67:
09:54:af:7e:5c:26:92:c4:32:72:66:98:59:fa:53:
ed:3b:8a:42:03:77:83:e7:aa:56:5a:fc:24:8a:f6:
07:10:fc:e8:c1:9b:1e:e9:39:67:07:3d:36:cd:94:
80:d4:6b:d8:99:3a:c7:93:44:ff:23:3f:70:3e:fa:
6a:3d:23:2d:cf:b7:1d:43:01:24:aa:c3:5a:d0:c7:
0f:68:5a:d4:59:67:15:52:6c:60:36:9c:97:2e:d8:
10:b6:92:94:98:dc:6c:15:21:08:d5:00:c2:f9:b4:
25:ac:e1:e9:0e:61:e4:b9:6b:46:06:d7:4f:a5:ba:
6c:62:a0:9a:c7:6d:7b:d9:4b:a9:63:6c:ee:57:e2:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:FB:D3:E9:C7:3D:74:9F:BD:DE:A3:EC:4B:CD:A9:C9:FA:61:32
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:20:55:3f:2f:29:03:2c:f4:1b:a9:3f:3c:c4:ad:93:b6:33:
46:bd:da:87:01:b5:15:28:e7:23:1f:07:26:e1:e2:4c:4c:ae:
be:ed:61:ca:04:69:0b:a1:b7:2f:5e:9f:23:19:16:de:df:53:
fb:9f:ed:58:d2:04:5d:77:11:02:2c:9f:8d:21:11:54:f3:5b:
f1:89:14:01:59:ac:cf:f0:5e:07:f3:7a:18:e8:00:e5:f0:83:
d2:8f:fb:28:00:9e:58:6d:d7:01:df:69:45:80:cb:c4:a0:bb:
3c:77:1c:59:0e:e5:a4:8e:1e:2c:de:1d:0a:52:cb:7d:ad:52:
55:03:cc:b3:2b:7d:be:42:1d:3c:cb:e9:ee:fa:58:61:7e:f4:
97:c1:75:80:95:5b:5a:17:6e:4d:b5:6e:95:12:16:67:b2:3b:
0d:6f:c8:06:50:26:09:da:5d:cf:a6:0f:86:bb:8a:aa:a5:5c:
00:0e:19:5a:34:fa:43:e9:51:0c:28:1e:23:69:44:4f:76:e2:
66:ec:0d:e7:70:27:81:7c:3c:7d:1d:1e:66:ea:a2:95:84:f1:
ac:e2:85:33:17:c0:5a:1e:c3:0a:1e:3c:25:48:c6:fb:99:47:
85:72:94:37:63:51:03:c9:13:58:21:04:14:c4:50:76:a2:b3:
56:e8:49:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijcT2O8VriLd7mmiCBfYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl
MWI4MjUwHhcNMjUwMTAxMTU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWZjZmJkM2U5YzczZDc0OWZiZGRlYTNlYzRiY2RhOWM5ZmE2MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaAvrYmecjEJ3H1eeeL/HoqAb97j
bQbAdBQgqhsFdPu0L75RLnaArIe6j15CalBTgUmOsaN9mKGQD+Q4rR4RcYc3QW0H
8ujAYajm5H3BD5Fm7U62jkCkIqKfwPoMqXADybi0OcAiTbsRIBV7O5Iav1hEZgBq
3WcJVK9+XCaSxDJyZphZ+lPtO4pCA3eD56pWWvwkivYHEPzowZse6TlnBz02zZSA
1GvYmTrHk0T/Iz9wPvpqPSMtz7cdQwEkqsNa0McPaFrUWWcVUmxgNpyXLtgQtpKU
mNxsFSEI1QDC+bQlrOHpDmHkuWtGBtdPpbpsYqCax2172UupY2zuV+KZQQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPn8+9Ppxz10n73eo+xLzanJ+mEyMB8GA1UdIwQY
MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt
MGU1OWYyZWNiMTc1LzEvMS1mejcwLW5IUFhTZnZkNmo3RXZOcWNuNllUSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvMzc1YzAyLWQ3N2ItNGMyYi1iYWVhLTBlNTlmMmVjYjE3
NS8xL2JKQThHaTZRYnRqTkxqWXN6R2ZmQUszaHVDVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEi4TAN
BgkqhkiG9w0BAQsFAAOCAQEAbSBVPy8pAyz0G6k/PMStk7YzRr3ahwG1FSjnIx8H
JuHiTEyuvu1hygRpC6G3L16fIxkW3t9T+5/tWNIEXXcRAiyfjSERVPNb8YkUAVms
z/BeB/N6GOgA5fCD0o/7KACeWG3XAd9pRYDLxKC7PHccWQ7lpI4eLN4dClLLfa1S
VQPMsyt9vkIdPMvp7vpYYX70l8F1gJVbWhduTbVulRIWZ7I7DW/IBlAmCdpdz6YP
hruKqqVcAA4ZWjT6Q+lRDCgeI2lET3biZuwN53AngXw8fR0eZuqilYTxrOKFMxfA
Wh7DCh48JUjG+5lHhXKUN2NRA8kTWCEEFMRQdqKzVuhJig==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:45 2025 by rpki-client