Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/8_r7mVCzzc8i5_iqagGhH6oA6lo.roa
File: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (raw, json)
Hash identifier: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=
Subject key identifier: F3:FA:FB:99:50:B3:CD:CF:22:E7:F8:AA:6A:01:A1:1F:AA:00:EA:5A
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 0194266B24C1278E374793B9C5D8D9688747
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/8_r7mVCzzc8i5_iqagGhH6oA6lo.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39320
IP address blocks: 195.250.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:24:c1:27:8e:37:47:93:b9:c5:d8:d9:68:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3fafb9950b3cdcf22e7f8aa6a01a11faa00ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:72:6c:c1:77:63:92:32:4e:9b:22:dd:21:
13:93:60:fd:17:b5:ae:a3:9a:db:44:aa:57:25:89:
d0:af:c9:a9:ac:71:d6:96:90:a2:58:ae:e0:84:8b:
c2:69:44:e0:21:7a:ba:57:75:71:86:4a:15:38:86:
02:28:25:2f:69:56:dd:e3:26:29:bd:a5:99:e1:c2:
ae:21:e2:9d:cd:5d:c3:e8:63:7a:dc:d6:41:9f:4e:
18:21:c7:af:7c:bd:c8:2a:65:d1:3f:ec:54:02:d4:
be:54:83:9e:4a:e2:36:d9:e9:0b:e8:9d:96:04:82:
e6:52:b2:a7:ce:96:4e:98:58:f9:f0:fe:22:f6:d5:
a5:80:fc:7f:74:be:3c:f7:2f:ed:d1:12:59:a5:13:
54:c1:fd:9b:58:7f:6a:21:3c:3c:57:f6:6a:50:4a:
6d:97:d4:db:c9:1d:cc:34:a3:82:56:1e:37:16:16:
96:a8:52:75:56:e4:ec:ae:d9:97:a8:9c:56:ea:9e:
82:f0:a4:e8:32:09:e5:29:35:d1:91:9d:ee:4d:5d:
23:c5:ac:cf:9f:4e:19:2c:e9:d9:ef:0b:4b:7c:61:
0d:47:cb:42:ef:a3:ef:b5:a0:21:e0:ad:70:0e:3b:
3c:92:86:56:8b:2f:ac:20:aa:e2:d6:24:01:44:fe:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:FB:99:50:B3:CD:CF:22:E7:F8:AA:6A:01:A1:1F:AA:00:EA:5A
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/8_r7mVCzzc8i5_iqagGhH6oA6lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d5:fd:0e:27:51:3a:3e:7b:ef:f8:a6:10:3b:a0:38:a4:55:
eb:b3:ab:b4:f8:63:fd:31:4e:63:50:76:e6:6c:45:23:ee:d8:
c9:bc:a0:59:2e:d0:84:07:7c:c6:1e:14:a6:57:a9:c6:9d:37:
f7:96:8e:e7:e6:8c:93:cd:6d:a5:3f:4a:80:84:fd:58:50:e7:
6d:d2:a6:a2:e5:0f:58:fd:e3:0b:2d:34:5b:e5:ae:ab:6a:58:
32:a4:88:73:62:b2:d7:fe:67:bf:67:87:04:6e:91:cc:5c:49:
6d:b1:ab:21:c8:29:69:76:6b:2c:32:5a:76:ab:0d:94:02:61:
3d:48:c2:11:66:26:a5:a5:ce:a7:cd:f3:9d:db:43:c4:6e:35:
5d:32:98:b5:8b:26:e6:88:e9:2e:1d:ac:1f:11:56:b5:18:d2:
64:62:51:5e:3b:34:6a:64:b3:9e:49:15:ae:4e:26:69:6c:d3:
60:6a:7d:7c:19:5f:b8:33:ac:11:8d:86:b8:8e:1f:d7:13:c9:
3a:6f:42:4b:a6:42:04:1b:3c:4c:69:25:bd:96:6e:85:bd:fc:
bc:62:3c:52:26:70:c5:06:5d:e6:27:d9:5c:f3:60:58:a4:bd:
6a:88:84:b8:00:87:6e:83:cf:44:f3:ec:29:93:5e:bc:dd:00:
eb:49:62:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmayTBJ443R5O5xdjZaIdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw
MjQ3YzkwHhcNMjUwMTAyMDk0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2ZhZmI5OTUwYjNjZGNmMjJlN2Y4YWE2YTAxYTExZmFhMDBlYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8pybMF3Y5IyTpsi3SETk2D9F7Wu
o5rbRKpXJYnQr8mprHHWlpCiWK7ghIvCaUTgIXq6V3VxhkoVOIYCKCUvaVbd4yYp
vaWZ4cKuIeKdzV3D6GN63NZBn04YIcevfL3IKmXRP+xUAtS+VIOeSuI22ekL6J2W
BILmUrKnzpZOmFj58P4i9tWlgPx/dL489y/t0RJZpRNUwf2bWH9qITw8V/ZqUEpt
l9TbyR3MNKOCVh43FhaWqFJ1VuTsrtmXqJxW6p6C8KToMgnlKTXRkZ3uTV0jxazP
n04ZLOnZ7wtLfGENR8tC76PvtaAh4K1wDjs8koZWiy+sIKri1iQBRP5FNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPP6+5lQs83PIuf4qmoBoR+qAOpaMB8GA1UdIwQY
MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt
OTM3NGYyMWU2NDg4LzEvOF9yN21WQ3p6YzhpNV9pcWFnR2hINm9BNmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4
LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/o6MA0G
CSqGSIb3DQEBCwUAA4IBAQAr1f0OJ1E6Pnvv+KYQO6A4pFXrs6u0+GP9MU5jUHbm
bEUj7tjJvKBZLtCEB3zGHhSmV6nGnTf3lo7n5oyTzW2lP0qAhP1YUOdt0qai5Q9Y
/eMLLTRb5a6ralgypIhzYrLX/me/Z4cEbpHMXEltsashyClpdmssMlp2qw2UAmE9
SMIRZialpc6nzfOd20PEbjVdMpi1iybmiOkuHawfEVa1GNJkYlFeOzRqZLOeSRWu
TiZpbNNgan18GV+4M6wRjYa4jh/XE8k6b0JLpkIEGzxMaSW9lm6Fvfy8YjxSJnDF
Bl3mJ9lc82BYpL1qiIS4AIdug89E8+wpk1683QDrSWJX
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:25 2025 by rpki-client