Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/F2c_uapmp4EWBvth9YsoExmggYE.roa
File: F2c_uapmp4EWBvth9YsoExmggYE.roa (raw, json)
Hash identifier: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=
Subject key identifier: 17:67:3F:B9:AA:66:A7:81:16:06:FB:61:F5:8B:28:13:19:A0:81:81
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019424B2BA9C2F250F837F90C069149C7485
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/F2c_uapmp4EWBvth9YsoExmggYE.roa
Signing time: Thu 02 Jan 2025 01:48:00 +0000
ROA not before: Thu 02 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15962
IP address blocks: 5.178.48.0/20 maxlen: 20
78.141.64.0/18 maxlen: 18
85.237.224.0/19 maxlen: 19
92.52.0.0/18 maxlen: 18
95.105.128.0/17 maxlen: 17
95.105.128.0/18 maxlen: 18
95.105.192.0/18 maxlen: 18
109.230.0.0/18 maxlen: 18
178.143.0.0/16 maxlen: 16
178.143.0.0/17 maxlen: 17
178.143.128.0/17 maxlen: 17
185.50.212.0/22 maxlen: 22
213.151.192.0/18 maxlen: 18
213.151.246.0/24 maxlen: 24
213.151.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ba:9c:2f:25:0f:83:7f:90:c0:69:14:9c:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jan 2 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17673fb9aa66a7811606fb61f58b281319a08181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:34:db:99:fa:f7:01:f2:81:d9:3b:2e:5d:
d4:26:5d:03:da:00:ee:67:8d:cd:14:5a:d3:f5:e2:
7e:49:b4:ed:68:3f:1a:07:09:3d:e5:d7:15:fd:09:
80:a3:92:80:32:f8:3f:3f:f4:77:ec:74:e1:76:79:
a5:12:a6:83:ee:a1:43:5a:4f:27:cc:d2:00:12:6c:
40:4c:f2:ac:3e:35:f2:77:8c:72:59:d7:a5:7b:5f:
46:51:eb:e8:52:dd:31:c6:b2:81:4a:5b:6e:a7:ee:
bc:71:bd:db:83:d6:3e:fe:af:c6:41:ce:1b:44:1f:
57:32:cf:8f:1c:8a:36:e9:4c:b2:fb:25:dd:39:cf:
8c:28:a5:a8:2d:40:99:bd:d0:14:17:59:c4:3a:3d:
b4:91:a2:f8:b3:6d:cd:e6:1f:73:ba:a2:7c:72:96:
f8:a3:90:9a:ad:43:90:7a:f4:2b:c4:d1:82:2a:f2:
e1:47:89:60:42:82:ab:31:7f:f7:7d:27:f1:af:10:
22:61:4e:69:bd:c9:df:a5:cb:f6:61:26:f7:ed:2c:
a6:d3:02:26:61:63:48:87:b9:c2:f4:18:6c:d3:25:
57:31:77:a4:5d:0c:05:3c:93:e0:7f:31:6b:fa:1a:
ed:70:8a:79:47:54:5a:a1:fd:87:f4:c6:90:49:fa:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:3F:B9:AA:66:A7:81:16:06:FB:61:F5:8B:28:13:19:A0:81:81
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/F2c_uapmp4EWBvth9YsoExmggYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.48.0/20
78.141.64.0/18
85.237.224.0/19
92.52.0.0/18
95.105.128.0/17
109.230.0.0/18
178.143.0.0/16
185.50.212.0/22
213.151.192.0/18
Signature Algorithm: sha256WithRSAEncryption
60:40:f3:59:7d:de:be:b1:8b:5b:26:ab:85:31:d9:f9:5e:d4:
42:5a:89:52:c3:ce:39:a5:87:ce:57:76:13:da:84:30:1a:db:
b6:40:56:50:eb:a1:47:93:56:b1:37:58:da:4a:f2:a8:18:fe:
c3:67:49:9e:d6:08:32:ac:0b:f1:b5:23:26:d3:2f:82:0a:fb:
f3:9d:e0:82:bf:2f:32:71:8c:b8:b6:71:f5:ed:b7:89:c1:85:
37:6c:a2:f7:81:4f:74:fe:9e:4a:bc:78:fd:34:3e:ca:0a:32:
95:c6:55:07:3f:eb:b3:77:9f:a1:cf:1f:72:f3:57:9b:aa:65:
f0:91:60:22:d8:27:96:e4:06:2d:f4:ec:31:93:ab:06:98:fd:
f4:55:02:a6:61:e0:80:d6:75:3a:16:87:9e:30:f6:bc:2a:55:
8a:e0:00:8c:fb:f7:23:39:58:0b:c7:53:a4:97:bd:ea:95:5b:
cf:9c:d0:b4:14:79:d3:26:05:78:cb:b1:6d:98:be:aa:22:67:
25:f6:45:9f:e3:40:96:66:6c:e7:9f:6e:8b:cc:e4:ca:85:81:
7d:4b:f9:9e:0d:bb:4e:e7:fe:81:9e:a2:ac:b2:76:0c:c6:4e:
44:94:a1:fe:da:94:46:db:56:0f:04:17:65:4a:25:ac:3b:56:
40:a2:fc:88
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZQksrqcLyUPg3+QwGkUnHSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjUwMTAyMDE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzY3M2ZiOWFhNjZhNzgxMTYwNmZiNjFmNThiMjgxMzE5YTA4MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S4025n69wHygdk7Ll3UJl0D2gDu
Z43NFFrT9eJ+SbTtaD8aBwk95dcV/QmAo5KAMvg/P/R37HThdnmlEqaD7qFDWk8n
zNIAEmxATPKsPjXyd4xyWdele19GUevoUt0xxrKBSltup+68cb3bg9Y+/q/GQc4b
RB9XMs+PHIo26Uyy+yXdOc+MKKWoLUCZvdAUF1nEOj20kaL4s23N5h9zuqJ8cpb4
o5CarUOQevQrxNGCKvLhR4lgQoKrMX/3fSfxrxAiYU5pvcnfpcv2YSb37Sym0wIm
YWNIh7nC9Bhs0yVXMXekXQwFPJPgfzFr+hrtcIp5R1Raof2H9MaQSfqENwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFBdnP7mqZqeBFgb7YfWLKBMZoIGBMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvRjJjX3VhcG1wNEVXQnZ0aDlZc29FeG1nZ1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQEBbIwAwQG
To1AAwQFVe3gAwQGXDQAAwQHX2mAAwQGbeYAAwMAso8DBAK5MtQDBAbVl8AwDQYJ
KoZIhvcNAQELBQADggEBAGBA81l93r6xi1smq4Ux2fle1EJaiVLDzjmlh85XdhPa
hDAa27ZAVlDroUeTVrE3WNpK8qgY/sNnSZ7WCDKsC/G1IybTL4IK+/Od4IK/LzJx
jLi2cfXtt4nBhTdsoveBT3T+nkq8eP00PsoKMpXGVQc/67N3n6HPH3LzV5uqZfCR
YCLYJ5bkBi307DGTqwaY/fRVAqZh4IDWdToWh54w9rwqVYrgAIz79yM5WAvHU6SX
veqVW8+c0LQUedMmBXjLsW2YvqoiZyX2RZ/jQJZmbOefbovM5MqFgX1L+Z4Nu07n
/oGeoqyydgzGTkSUof7alEbbVg8EF2VKJaw7VkCi/Ig=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:38 2025 by rpki-client