Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa
File: fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa (raw, json)
Hash identifier: Cvot8FafLsZehYZMxIgY8/gFTZVz6XlYdnhjP+IggKI=
Subject key identifier: 7E:FC:00:13:55:AD:4C:2B:41:73:A1:65:35:AD:A2:F6:F5:05:9B:A3
Certificate issuer: /CN=984133b31d96b27c1af818114b169c9a5745e094
Certificate serial: 0194221FBB262F5372AB5B55AE9E2C564A9E
Authority key identifier: 98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198991
IP address blocks: 176.122.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bb:26:2f:53:72:ab:5b:55:ae:9e:2c:56:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984133b31d96b27c1af818114b169c9a5745e094
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efc001355ad4c2b4173a16535ada2f6f5059ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:06:d7:52:1f:c8:c6:72:bf:87:5c:d3:5e:
fb:1b:a7:8b:e2:c8:92:8d:a1:bd:be:a3:b3:4e:bd:
b9:ac:94:b7:8e:8f:4b:eb:24:b0:6f:c5:2c:e2:0d:
5b:73:84:9e:c4:55:39:92:fa:e0:c9:ff:c7:f8:00:
a6:88:e8:90:b9:1e:1b:2a:d6:e2:fc:e4:dd:83:6b:
db:59:ce:de:e0:e2:a7:18:71:c7:1f:16:33:63:18:
5c:89:8d:3b:da:1d:a1:75:4a:cf:4b:07:a0:0a:dd:
0e:38:35:c4:e4:ec:34:0c:99:2a:dc:4e:6b:34:cf:
28:e9:2c:0a:c7:8b:67:ca:b6:44:78:56:e2:e1:e5:
63:38:c5:6f:f5:9f:7d:b8:d0:38:a3:2b:cb:ca:34:
c4:11:cf:8b:45:b7:0f:ba:67:41:2c:4e:22:8a:72:
59:65:30:ae:1a:57:ce:fd:08:64:af:01:99:67:94:
44:53:15:c7:dc:fb:65:d3:30:62:cc:e5:9b:14:d4:
5b:d8:18:b6:75:32:e1:d7:7c:89:10:38:e5:71:e9:
a5:7c:f4:48:15:1a:e1:0a:d0:29:7d:5a:34:8a:a3:
96:f1:12:fb:52:77:6b:47:c6:d3:8b:0d:e3:65:9c:
39:9a:87:b3:22:2b:1f:ba:06:b9:40:c1:69:d6:be:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FC:00:13:55:AD:4C:2B:41:73:A1:65:35:AD:A2:F6:F5:05:9B:A3
X509v3 Authority Key Identifier:
keyid:98:41:33:B3:1D:96:B2:7C:1A:F8:18:11:4B:16:9C:9A:57:45:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEEzsx2Wsnwa-BgRSxacmldF4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/fvwAE1WtTCtBc6FlNa2i9vUFm6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d02cd-c9b5-401d-a50a-75069ae77326/1/mEEzsx2Wsnwa-BgRSxacmldF4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.32.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:b9:a9:f7:04:9c:31:dc:07:75:9b:af:85:24:a0:50:d5:ac:
38:b4:01:1e:3d:37:6d:0e:52:c8:e6:7d:c9:7e:9d:b7:01:a1:
24:1a:34:06:5a:4e:7f:65:74:e9:7c:14:cd:a8:32:5b:66:3e:
9a:72:ec:a0:7b:f6:58:e8:84:99:61:03:b9:93:6f:ae:48:a1:
85:d2:c7:41:f5:7b:d1:bb:59:24:77:6c:03:2b:72:80:da:03:
af:52:fb:fe:cc:d4:cc:5e:34:c1:05:9c:3d:56:98:e3:99:c7:
0b:64:85:9a:c7:bf:51:eb:ce:04:b9:22:07:06:18:82:4e:37:
39:b1:7e:f6:0d:11:b7:da:2b:da:8d:fb:5f:1d:0e:bb:0b:61:
f2:95:cd:4e:39:92:2b:20:53:11:19:7b:a2:58:bd:01:36:78:
47:9f:b7:b0:62:ae:f2:ea:0f:05:00:73:16:f3:4b:58:2b:7c:
f3:8b:3f:0b:69:c8:e0:21:33:20:d6:69:39:14:6f:00:08:38:
1c:d7:19:d4:19:a9:a7:e7:c0:29:46:0d:48:87:a8:e8:87:ed:
8d:af:c5:41:05:85:6a:02:1c:82:0a:88:7d:ec:e8:56:2f:a6:
00:b7:4f:9f:b7:3f:f3:4c:57:5b:b7:91:3d:87:fa:35:24:25:
12:39:bb:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH7smL1Nyq1tVrp4sVkqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NDEzM2IzMWQ5NmIyN2MxYWY4MTgxMTRiMTY5YzlhNTc0
NWUwOTQwHhcNMjUwMTAxMTM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWZjMDAxMzU1YWQ0YzJiNDE3M2ExNjUzNWFkYTJmNmY1MDU5YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXUG11IfyMZyv4dc0177G6eL4siS
jaG9vqOzTr25rJS3jo9L6ySwb8Us4g1bc4SexFU5kvrgyf/H+ACmiOiQuR4bKtbi
/OTdg2vbWc7e4OKnGHHHHxYzYxhciY072h2hdUrPSwegCt0OODXE5Ow0DJkq3E5r
NM8o6SwKx4tnyrZEeFbi4eVjOMVv9Z99uNA4oyvLyjTEEc+LRbcPumdBLE4iinJZ
ZTCuGlfO/QhkrwGZZ5REUxXH3Ptl0zBizOWbFNRb2Bi2dTLh13yJEDjlcemlfPRI
FRrhCtApfVo0iqOW8RL7UndrR8bTiw3jZZw5moezIisfuga5QMFp1r4HOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH78ABNVrUwrQXOhZTWtovb1BZujMB8GA1UdIwQY
MBaAFJhBM7MdlrJ8GvgYEUsWnJpXReCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEt
NzUwNjlhZTc3MzI2LzEvZnZ3QUUxV3RUQ3RCYzZGbE5hMmk5dlVGbTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84ZDAyY2QtYzliNS00MDFkLWE1MGEtNzUwNjlhZTc3MzI2
LzEvbUVFenN4MldzbndhLUJnUlN4YWNtbGRGNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsHogMA0G
CSqGSIb3DQEBCwUAA4IBAQC9uan3BJwx3Ad1m6+FJKBQ1aw4tAEePTdtDlLI5n3J
fp23AaEkGjQGWk5/ZXTpfBTNqDJbZj6acuyge/ZY6ISZYQO5k2+uSKGF0sdB9XvR
u1kkd2wDK3KA2gOvUvv+zNTMXjTBBZw9VpjjmccLZIWax79R684EuSIHBhiCTjc5
sX72DRG32ivajftfHQ67C2Hylc1OOZIrIFMRGXuiWL0BNnhHn7ewYq7y6g8FAHMW
80tYK3zziz8LacjgITMg1mk5FG8ACDgc1xnUGamn58ApRg1Ih6joh+2Nr8VBBYVq
AhyCCoh97OhWL6YAt0+ftz/zTFdbt5E9h/o1JCUSObv6
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:27 2025 by rpki-client