Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/_FEDHOA1DaPuw5szVg_jX1NChtc.roa
File: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (raw, json)
Hash identifier: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=
Subject key identifier: FC:51:03:1C:E0:35:0D:A3:EE:C3:9B:33:56:0F:E3:5F:53:42:86:D7
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019421444D5780C49A5E8EBE332ECD3C3AD2
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/_FEDHOA1DaPuw5szVg_jX1NChtc.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50857
IP address blocks: 80.91.144.0/20 maxlen: 24
217.64.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4d:57:80:c4:9a:5e:8e:be:33:2e:cd:3c:3a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc51031ce0350da3eec39b33560fe35f534286d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:d4:2b:0a:b7:6b:1d:1e:f6:ad:64:e3:d0:
b7:54:76:ba:7d:2f:a7:17:cd:6d:f2:4a:4c:f0:cd:
eb:78:33:f4:3c:0f:04:cc:8b:fe:14:48:a5:99:23:
20:cb:51:2a:af:2e:a1:83:32:cc:0d:ad:92:cb:f5:
3e:6d:a1:e4:ba:2a:1c:3e:83:27:3d:22:86:96:84:
9d:3d:2c:a9:a1:c3:8e:75:0c:01:f9:64:2f:fc:3d:
53:e1:82:98:82:41:18:24:f3:4e:4e:a9:2e:e8:80:
00:ba:27:49:cf:1d:18:21:a9:06:7a:29:bc:1c:c4:
76:3d:02:b9:0e:ae:b4:27:83:35:4d:d3:3f:f1:e9:
4d:e4:df:7d:7d:f6:8e:fe:1d:85:4c:73:82:e0:10:
67:15:62:69:8f:db:38:57:02:d6:fe:55:c3:ef:f4:
e8:84:71:ac:7e:f6:88:79:30:8c:cc:f1:53:31:a7:
f9:31:82:4c:d7:a5:69:90:36:c5:20:99:00:92:61:
6e:f4:a0:dd:f4:cb:7a:b1:b6:07:4b:f6:46:94:3d:
e5:52:0f:56:04:4f:e7:f6:87:b0:fc:39:57:36:f4:
7b:7d:56:fa:a0:3a:17:43:90:52:60:7b:2b:0c:72:
2a:03:84:86:5a:2e:09:b1:53:1e:39:e7:cc:57:0d:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:03:1C:E0:35:0D:A3:EE:C3:9B:33:56:0F:E3:5F:53:42:86:D7
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/_FEDHOA1DaPuw5szVg_jX1NChtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.144.0/20
217.64.240.0/20
Signature Algorithm: sha256WithRSAEncryption
04:54:8f:53:7d:b3:51:4e:40:97:36:af:84:93:05:e5:49:35:
19:30:62:cc:b0:b1:fd:12:1b:64:99:37:00:2e:75:75:61:98:
f0:0f:54:45:93:89:47:59:b2:5a:e6:c4:2c:a3:9e:04:4b:59:
f1:68:14:cc:53:06:59:2d:37:c1:46:10:7e:3e:38:ac:5c:27:
48:17:22:0e:79:27:90:8a:47:0c:13:40:e1:d3:53:d9:00:ce:
31:dc:68:14:68:7a:b7:16:8e:d8:8d:09:d6:bc:b1:08:2b:6d:
4d:e4:30:b0:67:c1:7a:f4:b4:60:db:60:11:a1:c0:5e:1c:ad:
60:13:3e:77:e8:88:77:b8:a9:67:98:03:52:fc:b8:86:a6:4b:
18:4c:a5:2b:14:f2:69:e8:8a:d9:9b:6d:01:32:ff:06:6e:cc:
9b:b0:ad:95:5c:25:08:aa:d5:27:93:90:a2:f1:44:c2:ce:78:
6e:fc:c9:f0:1c:42:ee:ed:d0:00:45:7d:59:f6:5a:34:36:5f:
4f:89:49:44:38:43:a3:dd:18:45:8a:57:a2:18:f9:a8:d7:0e:
7a:17:00:2b:b2:fb:b0:51:f0:cf:ab:f6:8d:25:bd:d1:21:63:
e6:fb:a5:d0:64:c3:db:14:9f:39:87:25:32:53:97:26:25:0b:
2e:e5:20:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRE1XgMSaXo6+My7NPDrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm
OWNhNTAwHhcNMjUwMTAxMDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzUxMDMxY2UwMzUwZGEzZWVjMzliMzM1NjBmZTM1ZjUzNDI4NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQXUKwq3ax0e9q1k49C3VHa6fS+n
F81t8kpM8M3reDP0PA8EzIv+FEilmSMgy1Eqry6hgzLMDa2Sy/U+baHkuiocPoMn
PSKGloSdPSypocOOdQwB+WQv/D1T4YKYgkEYJPNOTqku6IAAuidJzx0YIakGeim8
HMR2PQK5Dq60J4M1TdM/8elN5N99ffaO/h2FTHOC4BBnFWJpj9s4VwLW/lXD7/To
hHGsfvaIeTCMzPFTMaf5MYJM16VpkDbFIJkAkmFu9KDd9Mt6sbYHS/ZGlD3lUg9W
BE/n9oew/DlXNvR7fVb6oDoXQ5BSYHsrDHIqA4SGWi4JsVMeOefMVw0f6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPxRAxzgNQ2j7sObM1YP419TQobXMB8GA1UdIwQY
MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt
Njk0ZDc4YjMyZDIwLzEvX0ZFREhPQTFEYVB1dzVzelZnX2pYMU5DaHRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw
LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUFuQAwQE
2UDwMA0GCSqGSIb3DQEBCwUAA4IBAQAEVI9TfbNRTkCXNq+EkwXlSTUZMGLMsLH9
EhtkmTcALnV1YZjwD1RFk4lHWbJa5sQso54ES1nxaBTMUwZZLTfBRhB+PjisXCdI
FyIOeSeQikcME0Dh01PZAM4x3GgUaHq3Fo7YjQnWvLEIK21N5DCwZ8F69LRg22AR
ocBeHK1gEz536Ih3uKlnmANS/LiGpksYTKUrFPJp6IrZm20BMv8GbsybsK2VXCUI
qtUnk5Ci8UTCznhu/MnwHELu7dAARX1Z9lo0Nl9PiUlEOEOj3RhFileiGPmo1w56
FwArsvuwUfDPq/aNJb3RIWPm+6XQZMPbFJ85hyUyU5cmJQsu5SCb
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:52 2025 by rpki-client