Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa
File: FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa (raw, json)
Hash identifier: 7JYQFVBAJu7wUnu+Gsv5BhX/IXxKlL87JHFuhVHrKK0=
Subject key identifier: 14:AC:40:7F:D9:0F:C0:7C:D8:25:2D:85:A5:D8:D4:C8:DE:91:6E:44
Certificate issuer: /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial: 019427B5AB6E9A28D06C36495FC2C7F2B205
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200652
IP address blocks: 185.100.60.0/22 maxlen: 22
2a06:1740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ab:6e:9a:28:d0:6c:36:49:5f:c2:c7:f2:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14ac407fd90fc07cd8252d85a5d8d4c8de916e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:64:9a:26:cf:44:fa:d0:3b:3b:47:af:89:
94:6b:8e:46:dd:1e:65:bc:fa:82:cc:db:36:79:67:
d8:1d:fc:09:cf:1c:42:01:be:7c:e4:d7:11:a6:cd:
4c:e6:89:86:02:40:aa:da:58:c5:63:e3:eb:14:63:
d9:ce:fa:74:cf:5e:b4:e2:f9:d5:99:7c:6d:08:ea:
29:5d:88:95:ce:60:f0:97:d9:d9:55:71:a6:6d:fb:
10:48:c0:f5:ec:b7:d6:f9:e7:b3:38:ee:b7:da:e8:
e0:71:b6:2a:d7:09:4d:3a:bd:5e:d0:41:e0:0b:9f:
6d:b0:20:04:d6:6e:5e:b3:90:cc:c8:45:e2:df:3c:
64:ad:97:26:10:18:01:e0:26:1d:16:ee:48:bd:c0:
07:f3:f9:2b:9b:b7:40:42:95:e8:bc:92:51:8c:23:
3b:f4:61:56:e2:2e:ec:57:23:78:59:f6:e2:7d:4a:
40:3f:59:65:8d:fc:f1:ee:4a:93:77:1a:31:cd:b9:
2f:6f:12:8c:b2:c6:34:3a:59:8b:ff:46:81:be:ac:
68:48:8d:f5:0c:44:2c:12:b9:29:73:ac:0f:f7:f3:
77:86:0d:e0:07:b2:6d:23:e2:32:52:ce:a1:c7:69:
73:5f:06:67:2f:60:c9:6a:e4:dd:23:9c:d7:39:49:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AC:40:7F:D9:0F:C0:7C:D8:25:2D:85:A5:D8:D4:C8:DE:91:6E:44
X509v3 Authority Key Identifier:
keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/FKxAf9kPwHzYJS2FpdjUyN6RbkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.60.0/22
IPv6:
2a06:1740::/29
Signature Algorithm: sha256WithRSAEncryption
5d:42:cd:24:00:03:d9:c5:17:0c:43:81:e7:ed:58:9a:4d:0b:
a9:5a:c1:c8:2d:0b:ed:20:0b:92:29:69:90:cc:75:3a:39:8a:
0c:1f:e9:30:92:54:ec:23:b0:15:49:3d:8a:d7:e5:a4:8a:9e:
72:77:ec:84:5b:de:46:86:c6:ce:f9:1a:d5:21:b9:f0:1e:49:
01:54:d7:10:34:35:2a:de:68:97:af:c4:ae:0a:9c:c8:e8:da:
1a:2c:ce:1f:90:b6:50:1d:07:8f:8f:f6:21:39:2f:65:17:4f:
90:04:3d:3e:7a:c7:7a:ab:90:aa:7d:ac:1a:e6:4b:0a:83:1d:
43:8d:68:1c:89:b8:7a:cf:91:b2:bd:c8:d7:aa:6b:13:15:25:
bb:5e:da:ec:62:ea:b0:a2:15:29:95:99:a2:f0:16:8d:aa:06:
08:06:c5:bb:6c:b7:f7:8c:b5:72:73:62:f2:9a:07:6f:95:9a:
19:48:33:2d:5d:ac:4f:a6:9c:17:2c:0e:94:6e:4f:ed:f5:f0:
4b:96:ba:a9:4d:f0:4e:e1:b8:91:3d:eb:1f:59:a5:b4:f1:81:
24:c6:08:ee:df:78:23:b1:31:bb:11:75:6a:a9:ab:89:d6:17:
af:28:8d:7d:77:ff:78:ff:a0:08:60:60:51:10:1e:ce:00:5c:
0e:33:2b:b2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntatumijQbDZJX8LH8rIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODM1ZTliNGQzNzZlZTZhYjZjYWQyNzVlMjQzY2Y0MDRj
MTJhZjQwHhcNMjUwMTAyMTU1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGFjNDA3ZmQ5MGZjMDdjZDgyNTJkODVhNWQ4ZDRjOGRlOTE2ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5kmibPRPrQOztHr4mUa45G3R5l
vPqCzNs2eWfYHfwJzxxCAb585NcRps1M5omGAkCq2ljFY+PrFGPZzvp0z1604vnV
mXxtCOopXYiVzmDwl9nZVXGmbfsQSMD17LfW+eezOO632ujgcbYq1wlNOr1e0EHg
C59tsCAE1m5es5DMyEXi3zxkrZcmEBgB4CYdFu5IvcAH8/krm7dAQpXovJJRjCM7
9GFW4i7sVyN4WfbifUpAP1lljfzx7kqTdxoxzbkvbxKMssY0OlmL/0aBvqxoSI31
DEQsErkpc6wP9/N3hg3gB7JtI+IyUs6hx2lzXwZnL2DJauTdI5zXOUmgmwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBSsQH/ZD8B82CUthaXY1MjekW5EMB8GA1UdIwQY
MBaAFJuDXptNN27mq2ytJ14kPPQEwSr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wYTM4MjctYjZjNS00YzNhLTk2ZTYt
ZThkYjAxOGIzNmRkLzEvRkt4QWY5a1B3SHpZSlMyRnBkalV5TjZSYmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wYTM4MjctYjZjNS00YzNhLTk2ZTYtZThkYjAxOGIzNmRk
LzEvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWQ8MA0E
AgACMAcDBQMqBhdAMA0GCSqGSIb3DQEBCwUAA4IBAQBdQs0kAAPZxRcMQ4Hn7Via
TQupWsHILQvtIAuSKWmQzHU6OYoMH+kwklTsI7AVST2K1+Wkip5yd+yEW95GhsbO
+RrVIbnwHkkBVNcQNDUq3miXr8SuCpzI6NoaLM4fkLZQHQePj/YhOS9lF0+QBD0+
esd6q5Cqfawa5ksKgx1DjWgcibh6z5GyvcjXqmsTFSW7XtrsYuqwohUplZmi8BaN
qgYIBsW7bLf3jLVyc2LymgdvlZoZSDMtXaxPppwXLA6Ubk/t9fBLlrqpTfBO4biR
PesfWaW08YEkxgju33gjsTG7EXVqqauJ1hevKI19d/94/6AIYGBREB7OAFwOMyuy
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:40:57 2025 by rpki-client