Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/fKRgm3J38CdqPYWraPnwaBHZfSw.roa
File: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (raw, json)
Hash identifier: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=
Subject key identifier: 7C:A4:60:9B:72:77:F0:27:6A:3D:85:AB:68:F9:F0:68:11:D9:7D:2C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 019422FC07D031AF750394E144D4189ED472
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/fKRgm3J38CdqPYWraPnwaBHZfSw.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207151
IP address blocks: 185.234.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:07:d0:31:af:75:03:94:e1:44:d4:18:9e:d4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca4609b7277f0276a3d85ab68f9f06811d97d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:83:63:bd:fe:9c:c3:15:42:f4:09:51:77:
f0:75:1a:7c:43:ce:0e:7f:05:f2:c2:bc:f5:1a:bf:
dc:ec:23:db:b2:2e:93:68:b4:79:90:5a:27:06:b5:
0c:84:d4:46:8f:f4:0c:be:2f:9d:7f:aa:7e:bd:e2:
fa:f1:45:68:0f:fd:ee:73:54:5f:41:f1:a6:c1:86:
fa:45:30:58:5c:42:f0:d0:8a:c1:5a:62:04:f5:6c:
48:0a:e7:79:11:19:aa:67:3c:97:b2:31:d7:ad:39:
44:f5:52:1e:f8:aa:9c:03:a8:c2:9a:d8:e7:6d:11:
b5:cf:d8:44:74:e2:c5:59:93:50:61:42:39:d5:3f:
99:7e:e7:e3:02:9d:09:06:98:bc:fb:8f:a0:2e:4c:
da:df:bd:57:31:73:33:6f:a8:9f:c5:03:53:45:91:
d6:8f:62:6b:3b:47:6a:c5:25:89:12:3b:d1:26:c7:
f7:6b:1d:ff:01:ca:76:a9:30:d9:b8:26:4e:39:00:
42:07:83:9d:3f:0b:f5:98:ec:a2:2a:c4:71:d8:a3:
d9:50:04:3d:49:10:32:52:92:48:45:7f:0b:7c:6f:
4f:84:b5:8f:fe:2b:e6:a4:26:80:69:18:bc:97:3b:
18:4a:18:f2:f1:c0:4c:b4:c0:85:74:f7:80:a2:4d:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A4:60:9B:72:77:F0:27:6A:3D:85:AB:68:F9:F0:68:11:D9:7D:2C
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/fKRgm3J38CdqPYWraPnwaBHZfSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.104.0/22
Signature Algorithm: sha256WithRSAEncryption
06:6a:32:44:e6:c3:f3:dd:0d:f0:63:db:c6:13:d3:8a:c6:71:
96:10:da:5e:46:5c:bb:fa:e1:d1:fb:6a:a0:cc:68:6a:46:3a:
09:4a:7c:92:5c:31:58:af:2a:fb:fd:0b:ba:38:d1:a5:68:73:
a2:73:0a:53:aa:78:d8:a1:6d:08:95:af:d2:73:44:65:ae:e3:
20:c8:15:ea:ff:5e:2a:fa:ae:44:a7:1d:08:15:f4:f6:b9:06:
4e:90:ac:c9:8f:9b:c2:ec:f2:ef:bf:56:e5:4b:ec:c1:26:5f:
a2:9a:7c:5c:7d:d3:fc:02:18:76:67:51:ea:88:ca:c3:7e:ae:
9c:82:70:ca:2c:82:82:9b:69:eb:70:16:e3:0d:39:cf:78:19:
dd:d7:f2:6c:eb:75:5d:78:cc:f3:fb:11:79:ae:a4:74:69:65:
b2:5c:3a:ab:ee:b6:87:3a:8c:42:d0:1e:3e:93:cd:f3:66:f2:
db:d1:67:83:65:93:bd:ba:2d:a3:59:fb:55:b5:ce:15:e9:67:
a4:67:fe:8f:8c:60:28:be:ed:26:aa:fa:77:91:62:3c:c7:a7:
9c:ae:92:7b:a7:65:d6:4a:7a:bd:3c:68:d3:3b:7e:96:61:51:
00:e7:2b:af:66:ec:5f:6b:c8:40:2a:f1:2b:b0:d2:fe:e3:e3:
f7:0c:a8:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/AfQMa91A5ThRNQYntRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzY5MmYyYTFkMWJjNzZmZjdmOWQyOTA5MWJlZGEwOGI3
YmM5NmMwHhcNMjUwMTAxMTc0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2E0NjA5YjcyNzdmMDI3NmEzZDg1YWI2OGY5ZjA2ODExZDk3ZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHmDY73+nMMVQvQJUXfwdRp8Q84O
fwXywrz1Gr/c7CPbsi6TaLR5kFonBrUMhNRGj/QMvi+df6p+veL68UVoD/3uc1Rf
QfGmwYb6RTBYXELw0IrBWmIE9WxICud5ERmqZzyXsjHXrTlE9VIe+KqcA6jCmtjn
bRG1z9hEdOLFWZNQYUI51T+ZfufjAp0JBpi8+4+gLkza371XMXMzb6ifxQNTRZHW
j2JrO0dqxSWJEjvRJsf3ax3/Acp2qTDZuCZOOQBCB4OdPwv1mOyiKsRx2KPZUAQ9
SRAyUpJIRX8LfG9PhLWP/ivmpCaAaRi8lzsYShjy8cBMtMCFdPeAok2loQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHykYJtyd/Anaj2Fq2j58GgR2X0sMB8GA1UdIwQY
MBaAFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUt
MjU1ZjBjNTFiYmUwLzEvZktSZ20zSjM4Q2RxUFlXcmFQbndhQkhaZlN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUtMjU1ZjBjNTFiYmUw
LzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuepoMA0G
CSqGSIb3DQEBCwUAA4IBAQAGajJE5sPz3Q3wY9vGE9OKxnGWENpeRly7+uHR+2qg
zGhqRjoJSnySXDFYryr7/Qu6ONGlaHOicwpTqnjYoW0Ila/Sc0RlruMgyBXq/14q
+q5Epx0IFfT2uQZOkKzJj5vC7PLvv1blS+zBJl+imnxcfdP8Ahh2Z1HqiMrDfq6c
gnDKLIKCm2nrcBbjDTnPeBnd1/Js63VdeMzz+xF5rqR0aWWyXDqr7raHOoxC0B4+
k83zZvLb0WeDZZO9ui2jWftVtc4V6WekZ/6PjGAovu0mqvp3kWI8x6ecrpJ7p2XW
Snq9PGjTO36WYVEA5yuvZuxfa8hAKvErsNL+4+P3DKhg
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:35 2025 by rpki-client