Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa
File: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (raw, json)
Hash identifier: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=
Subject key identifier: 7E:D4:A8:E0:48:3A:70:93:86:1D:A7:EC:99:D2:BB:1B:93:E5:9C:08
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 019426D9DB010DF077ABCDD895EB04BBACE1
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208359
IP address blocks: 188.119.108.0/24 maxlen: 24
188.119.109.0/24 maxlen: 24
188.119.110.0/24 maxlen: 24
188.119.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:01:0d:f0:77:ab:cd:d8:95:eb:04:bb:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ed4a8e0483a7093861da7ec99d2bb1b93e59c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:f9:33:c0:69:7e:b6:42:f4:ed:52:9b:e8:
95:dd:d8:1f:8b:2a:c6:4a:9b:2e:4d:ac:40:8a:0b:
3b:5d:32:1a:a3:51:d0:28:0a:c5:c5:9e:ab:d8:7a:
b8:0d:ac:ec:1d:7e:dc:8f:59:05:cb:eb:2c:af:bc:
e0:f8:88:d9:d8:f3:9f:fa:55:d1:ee:c2:f8:75:0c:
16:6a:a0:45:bc:02:cd:10:3d:56:62:d4:df:4a:a7:
34:8c:32:74:46:05:e2:78:f1:63:9e:f3:8e:b7:a3:
1b:ca:98:4d:44:57:c2:75:cd:a2:89:14:00:78:34:
e3:a7:b0:4b:bb:0d:94:82:00:41:16:e9:ed:56:2e:
7d:4a:22:34:c0:32:e6:e8:a3:bb:af:88:44:6f:34:
ee:42:81:05:9f:3c:35:2e:cb:8b:aa:9b:b2:72:c1:
db:dc:5a:a8:d6:ca:f4:a3:49:08:1a:3e:6e:09:0f:
d3:f3:36:cc:38:55:11:ff:96:94:aa:54:eb:a9:30:
98:d8:01:04:b2:c8:8b:6b:47:68:5e:c1:8c:05:8e:
de:b7:df:8c:32:6a:20:0e:5a:38:9f:4e:81:ec:9c:
3e:6b:6b:7b:f2:dd:8a:00:73:0f:0b:4a:2f:38:f9:
06:f0:aa:89:94:c3:dd:5c:25:3b:08:89:f3:0f:7f:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D4:A8:E0:48:3A:70:93:86:1D:A7:EC:99:D2:BB:1B:93:E5:9C:08
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:5c:a4:b0:8d:73:e7:2a:51:f8:04:c7:54:7a:36:13:2a:9b:
a1:d5:67:44:9b:0d:3c:d3:05:c7:05:60:1b:e9:7f:1b:c6:2d:
4b:da:1f:45:be:b5:40:b3:46:96:a7:94:bb:23:9e:11:fe:5f:
fe:5e:0d:dc:9a:6f:24:ce:95:0d:d6:34:59:9d:2f:98:f6:c7:
e3:0b:42:eb:81:c3:84:f1:a7:1a:3d:0e:96:b5:68:0f:71:bd:
6b:97:06:85:bf:85:0f:ba:2a:ed:40:67:d9:18:2d:d2:3c:17:
22:ad:3f:94:ad:2b:84:ed:24:16:06:ab:f0:79:44:c7:6e:16:
fe:dd:68:b9:60:62:58:52:5b:60:5c:ba:6d:41:42:98:de:c8:
ae:6d:df:d2:4f:4f:7a:5f:b9:10:11:7f:6d:bc:1f:82:06:97:
13:24:21:b9:f8:b4:e7:bf:b2:02:fc:9c:6a:43:fe:93:c3:23:
5f:ba:12:0d:b3:ec:28:0a:38:b5:6a:1a:8f:e2:33:d3:3e:15:
63:eb:e5:d0:05:67:b5:87:03:09:09:a6:eb:81:20:7e:13:b6:
1a:46:24:3e:b8:57:d6:7a:13:60:9d:22:29:75:13:3f:aa:fc:
d0:13:50:6c:98:71:da:db:2a:a1:d9:de:39:f1:36:48:ea:6c:
7f:12:cf:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2dsBDfB3q83YlesEu6zhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjI4OWYzZDllMTNiZTY3YTI0NGI3MmJkMjQ5NDViMmMz
MjBhNjMwHhcNMjUwMTAyMTE0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWQ0YThlMDQ4M2E3MDkzODYxZGE3ZWM5OWQyYmIxYjkzZTU5YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qL5M8BpfrZC9O1Sm+iV3dgfiyrG
SpsuTaxAigs7XTIao1HQKArFxZ6r2Hq4DazsHX7cj1kFy+ssr7zg+IjZ2POf+lXR
7sL4dQwWaqBFvALNED1WYtTfSqc0jDJ0RgXiePFjnvOOt6MbyphNRFfCdc2iiRQA
eDTjp7BLuw2UggBBFuntVi59SiI0wDLm6KO7r4hEbzTuQoEFnzw1LsuLqpuycsHb
3Fqo1sr0o0kIGj5uCQ/T8zbMOFUR/5aUqlTrqTCY2AEEssiLa0doXsGMBY7et9+M
MmogDlo4n06B7Jw+a2t78t2KAHMPC0ovOPkG8KqJlMPdXCU7CInzD387NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7UqOBIOnCThh2n7JnSuxuT5ZwIMB8GA1UdIwQY
MBaAFJ6yifPZ4TvmeiRLcr0klFssMgpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUt
ZDhlMTgzNTY5M2NkLzEvZnRTbzRFZzZjSk9HSGFmc21kSzdHNVBsbkFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUtZDhlMTgzNTY5M2Nk
LzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvHdsMA0G
CSqGSIb3DQEBCwUAA4IBAQB8XKSwjXPnKlH4BMdUejYTKpuh1WdEmw080wXHBWAb
6X8bxi1L2h9FvrVAs0aWp5S7I54R/l/+Xg3cmm8kzpUN1jRZnS+Y9sfjC0LrgcOE
8acaPQ6WtWgPcb1rlwaFv4UPuirtQGfZGC3SPBcirT+UrSuE7SQWBqvweUTHbhb+
3Wi5YGJYUltgXLptQUKY3siubd/ST096X7kQEX9tvB+CBpcTJCG5+LTnv7IC/Jxq
Q/6TwyNfuhINs+woCji1ahqP4jPTPhVj6+XQBWe1hwMJCabrgSB+E7YaRiQ+uFfW
ehNgnSIpdRM/qvzQE1BsmHHa2yqh2d458TZI6mx/Es9j
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:10 2025 by rpki-client