Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/fLQjwPFcSiNzGnABv3wcIsBu4Zc.roa
File: fLQjwPFcSiNzGnABv3wcIsBu4Zc.roa (raw, json)
Hash identifier: fne6Mo/RPgJpx4rqAp26rw7ey3jXHPvd71VT3Sh+OPE=
Subject key identifier: 7C:B4:23:C0:F1:5C:4A:23:73:1A:70:01:BF:7C:1C:22:C0:6E:E1:97
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0195FFA7ED30B57D6608C24B338603ADBA8C
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/fLQjwPFcSiNzGnABv3wcIsBu4Zc.roa
Signing time: Fri 04 Apr 2025 07:15:49 +0000
ROA not before: Fri 04 Apr 2025 07:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.87.200.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:a7:ed:30:b5:7d:66:08:c2:4b:33:86:03:ad:ba:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Apr 4 07:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb423c0f15c4a23731a7001bf7c1c22c06ee197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:1b:01:e3:40:77:01:a0:ad:08:49:90:9f:
a5:1e:8b:72:cb:eb:77:c3:ff:4d:a2:36:21:48:c4:
de:e3:02:e2:72:ac:b2:ca:33:55:40:67:af:5b:d7:
9b:b1:d4:fd:3f:b5:26:13:46:62:a6:46:91:1d:70:
53:7b:8f:18:1c:2f:71:13:87:cb:24:b6:79:7b:d5:
23:6c:c8:5d:f7:b7:97:1b:f5:c1:9a:9e:94:94:2f:
90:8d:bf:d8:c2:7f:79:1b:de:4f:5b:94:7a:f0:ac:
1f:6b:61:6f:38:bd:af:60:7f:b2:6c:a5:73:4d:45:
4e:b7:2e:0c:c6:83:68:f6:07:58:a1:77:b3:1c:ea:
e7:2c:e9:ac:26:d5:21:3a:0c:ec:80:2b:0f:b2:62:
ba:fe:30:66:2e:9e:c3:d8:9e:e8:8c:16:a9:74:ce:
ab:06:a8:39:23:96:35:42:7d:d6:3e:4e:4b:46:89:
06:74:24:22:a7:91:99:db:1e:ec:11:a0:50:e7:d7:
46:a0:5a:38:dc:52:f9:93:df:93:39:f4:ad:02:d3:
46:14:4e:48:9a:9a:0b:b8:a8:43:eb:ca:d1:69:f7:
cf:d0:d0:6f:81:68:99:45:74:03:d7:89:68:93:b9:
b0:ac:9d:29:8a:1e:08:58:0a:cb:72:db:bd:0c:59:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:23:C0:F1:5C:4A:23:73:1A:70:01:BF:7C:1C:22:C0:6E:E1:97
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/fLQjwPFcSiNzGnABv3wcIsBu4Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.200.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:65:f8:41:6a:55:06:cc:b7:d8:61:90:0c:4b:7c:73:83:f5:
9e:dc:38:99:15:7a:e3:91:5d:c6:23:87:13:2a:2a:da:6d:33:
52:2c:99:a5:22:fa:a5:87:80:e3:5c:18:f1:99:e7:ee:00:ae:
6e:64:e2:6d:37:bf:b5:99:09:9c:da:75:2a:f2:ac:09:bc:95:
d3:df:9a:12:ea:75:88:d9:54:d8:ec:f5:54:73:fa:f4:e8:19:
4f:0b:5d:a5:f9:6f:5a:49:11:fa:96:6f:eb:bd:58:25:dc:aa:
83:ae:e2:95:4d:ae:e3:69:2a:06:b6:af:38:01:da:8f:fd:05:
25:2e:a2:f5:c2:1f:2f:c6:9e:a3:eb:98:e5:7e:b2:5f:f2:23:
a0:cb:b4:ad:cf:c4:0b:07:d5:ad:23:d3:e2:05:cc:1f:98:0d:
a8:50:57:df:92:8b:2d:db:87:54:8a:bd:67:72:46:10:18:27:
7b:cb:19:28:0f:05:2c:90:fb:1e:02:d3:55:2d:6c:7e:80:9e:
68:8a:ed:a1:34:34:b6:80:36:08:4c:5d:51:ce:a5:3d:aa:6e:
0d:e5:1b:a6:c4:1d:31:da:94:7e:49:98:54:83:3d:04:8f:40:
00:07:3e:16:7d:f6:db:46:31:65:5d:95:73:e2:69:18:d6:9b:
fc:d3:6c:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX/p+0wtX1mCMJLM4YDrbqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjUwNDA0MDcxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2I0MjNjMGYxNWM0YTIzNzMxYTcwMDFiZjdjMWMyMmMwNmVlMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxIbAeNAdwGgrQhJkJ+lHotyy+t3
w/9NojYhSMTe4wLicqyyyjNVQGevW9ebsdT9P7UmE0ZipkaRHXBTe48YHC9xE4fL
JLZ5e9UjbMhd97eXG/XBmp6UlC+Qjb/Ywn95G95PW5R68Kwfa2FvOL2vYH+ybKVz
TUVOty4MxoNo9gdYoXezHOrnLOmsJtUhOgzsgCsPsmK6/jBmLp7D2J7ojBapdM6r
Bqg5I5Y1Qn3WPk5LRokGdCQip5GZ2x7sEaBQ59dGoFo43FL5k9+TOfStAtNGFE5I
mpoLuKhD68rRaffP0NBvgWiZRXQD14lok7mwrJ0pih4IWArLctu9DFkh5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHy0I8DxXEojcxpwAb98HCLAbuGXMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvZkxRandQRmNTaU56R25BQnYzd2NJc0J1NFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FfIMA0G
CSqGSIb3DQEBCwUAA4IBAQBvZfhBalUGzLfYYZAMS3xzg/We3DiZFXrjkV3GI4cT
KirabTNSLJmlIvqlh4DjXBjxmefuAK5uZOJtN7+1mQmc2nUq8qwJvJXT35oS6nWI
2VTY7PVUc/r06BlPC12l+W9aSRH6lm/rvVgl3KqDruKVTa7jaSoGtq84AdqP/QUl
LqL1wh8vxp6j65jlfrJf8iOgy7Stz8QLB9WtI9PiBcwfmA2oUFffkost24dUir1n
ckYQGCd7yxkoDwUskPseAtNVLWx+gJ5oiu2hNDS2gDYITF1RzqU9qm4N5RumxB0x
2pR+SZhUgz0Ej0AABz4WffbbRjFlXZVz4mkY1pv802yK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net