Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa
File: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (raw, json)
Hash identifier: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=
Subject key identifier: 15:9D:0A:92:72:21:95:E8:DA:49:F8:CD:19:0F:51:C0:17:16:12:D2
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 019427487C98D20773B7D9382697277C5099
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208006
IP address blocks: 37.32.3.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
185.143.232.0/22 maxlen: 24
193.176.240.0/22 maxlen: 24
2a0c:a7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7c:98:d2:07:73:b7:d9:38:26:97:27:7c:50:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=159d0a92722195e8da49f8cd190f51c0171612d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:26:15:50:e0:3c:84:37:42:0a:71:c1:d0:
a3:82:9e:41:b2:f8:de:98:ff:51:b9:f6:01:e0:9b:
d3:88:82:ea:24:2c:f5:1f:e3:7d:54:be:c3:15:07:
b1:98:68:c8:e9:3c:b4:81:48:3b:8e:26:ff:2e:12:
b6:a5:d7:f0:b4:4f:1f:1b:7e:e9:47:82:c3:10:88:
18:ba:ee:4e:c5:00:55:94:bd:11:46:d2:ff:90:39:
62:38:78:23:bb:dd:be:dc:7a:97:ac:08:e4:d7:ae:
e4:43:63:d1:d8:e3:c7:14:f6:51:47:02:39:a5:d5:
20:ca:65:f1:59:90:92:5f:34:67:0f:99:19:6e:61:
cc:32:4b:46:d0:a2:2a:ce:71:de:b6:e0:44:f8:7d:
79:b0:d6:ed:8f:48:68:e6:17:ed:c8:2f:91:e8:f3:
25:d3:67:1a:ec:e2:01:6c:ca:0e:21:32:4a:43:59:
3d:16:d4:7d:0d:d3:9c:c8:5a:8d:93:3a:30:10:96:
07:86:b8:c8:05:e7:ae:c5:19:23:6a:65:c6:5e:4e:
0a:aa:fc:94:fd:cd:ad:f5:7f:9a:32:02:9f:c1:1a:
27:a3:44:4b:a7:98:47:61:28:17:7a:9a:97:d4:a9:
55:3e:3c:f3:ae:44:4d:15:eb:c1:12:26:c6:66:61:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9D:0A:92:72:21:95:E8:DA:49:F8:CD:19:0F:51:C0:17:16:12:D2
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.3.0/24
185.97.116.0/22
185.143.232.0/22
193.176.240.0/22
IPv6:
2a0c:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:7c:fe:b5:51:57:60:c4:ca:1b:18:62:cc:6a:b6:b1:1a:37:
06:bb:5f:ce:52:08:d0:93:84:1e:0c:59:cc:84:5b:99:2a:7c:
03:d1:6d:1a:cb:aa:b1:f8:68:c6:af:ea:17:26:ab:0a:88:0c:
22:53:40:5e:97:44:d6:2b:83:10:58:54:c0:bd:51:24:28:88:
ed:8f:ae:c3:13:7b:ee:bb:fb:e8:7a:63:c2:68:f4:34:93:6d:
58:2b:51:1d:3b:17:ae:b8:15:ea:fa:2d:b1:10:21:2a:d6:57:
7e:cf:45:09:ff:c9:eb:c5:e2:bb:6f:fc:26:f9:c2:b8:ff:77:
2b:c2:23:51:a3:63:ce:ae:16:11:6d:e9:99:ec:fc:61:64:a2:
21:f9:5b:8a:3c:0a:16:25:ec:ae:b2:e0:a1:55:45:e0:04:3b:
17:b3:3e:15:dc:51:48:26:67:c3:53:fa:13:ba:95:2b:93:14:
02:d6:f3:7f:3d:b2:ce:dd:8a:c7:65:5f:7c:98:32:5a:82:a9:
47:c2:dd:bb:ec:52:e6:d5:f5:06:1f:18:c6:8d:8a:79:c7:46:
1f:38:4a:cd:c2:5e:c4:af:84:e6:c0:96:c9:1a:2d:f7:ff:b7:
56:c5:8f:ef:0b:83:fb:c9:da:ab:a2:4a:fe:df:90:7a:ed:e1:
33:65:24:c2
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQnSHyY0gdzt9k4JpcnfFCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw
N2VjMDIwHhcNMjUwMTAyMTM1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTlkMGE5MjcyMjE5NWU4ZGE0OWY4Y2QxOTBmNTFjMDE3MTYxMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUUmFVDgPIQ3QgpxwdCjgp5Bsvje
mP9RufYB4JvTiILqJCz1H+N9VL7DFQexmGjI6Ty0gUg7jib/LhK2pdfwtE8fG37p
R4LDEIgYuu5OxQBVlL0RRtL/kDliOHgju92+3HqXrAjk167kQ2PR2OPHFPZRRwI5
pdUgymXxWZCSXzRnD5kZbmHMMktG0KIqznHetuBE+H15sNbtj0ho5hftyC+R6PMl
02ca7OIBbMoOITJKQ1k9FtR9DdOcyFqNkzowEJYHhrjIBeeuxRkjamXGXk4KqvyU
/c2t9X+aMgKfwRono0RLp5hHYSgXepqX1KlVPjzzrkRNFevBEibGZmGXvwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBWdCpJyIZXo2kn4zRkPUcAXFhLSMB8GA1UdIwQY
MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt
MWJiMTdhOGIyNmZlLzEvRlowS2tuSWhsZWphU2ZqTkdROVJ3QmNXRXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl
LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAJSADAwQC
uWF0AwQCuY/oAwQCwbDwMA0EAgACMAcDBQMqDKfAMA0GCSqGSIb3DQEBCwUAA4IB
AQCmfP61UVdgxMobGGLMaraxGjcGu1/OUgjQk4QeDFnMhFuZKnwD0W0ay6qx+GjG
r+oXJqsKiAwiU0Bel0TWK4MQWFTAvVEkKIjtj67DE3vuu/voemPCaPQ0k21YK1Ed
OxeuuBXq+i2xECEq1ld+z0UJ/8nrxeK7b/wm+cK4/3crwiNRo2POrhYRbemZ7Pxh
ZKIh+VuKPAoWJeyusuChVUXgBDsXsz4V3FFIJmfDU/oTupUrkxQC1vN/PbLO3YrH
ZV98mDJagqlHwt277FLm1fUGHxjGjYp5x0YfOErNwl7Er4TmwJbJGi33/7dWxY/v
C4P7ydqrokr+35B67eEzZSTC
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:23 2025 by rpki-client