Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/xxFhvD1_C6pipJEBTKl033yHEF0.roa
File: xxFhvD1_C6pipJEBTKl033yHEF0.roa (raw, json)
Hash identifier: wMvUINT+XWfdQDveaENdYgbkPPqi3fpmXNh+RaQEiM0=
Subject key identifier: C7:11:61:BC:3D:7F:0B:AA:62:A4:91:01:4C:A9:74:DF:7C:87:10:5D
Certificate issuer: /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial: 0194258FB29C93CCB82956A4940FEF45D8F1
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/xxFhvD1_C6pipJEBTKl033yHEF0.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6867
IP address blocks: 147.52.0.0/16 maxlen: 16
192.103.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b2:9c:93:cc:b8:29:56:a4:94:0f:ef:45:d8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71161bc3d7f0baa62a491014ca974df7c87105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:6e:57:52:5d:96:c8:fc:7f:67:37:cc:cb:
da:50:04:16:81:f3:b7:ce:a8:16:05:d5:c1:54:55:
5b:7b:87:61:a3:1d:87:b0:dd:3e:38:b0:eb:e6:5a:
cb:7e:62:9b:47:36:71:8a:c3:33:f7:37:b5:18:27:
37:9f:58:46:f1:5c:bb:ab:45:4e:bd:bc:d7:e7:e3:
6f:cb:9c:1b:b0:70:f9:d2:ac:10:11:83:77:e1:69:
ed:85:79:c2:95:af:68:42:e8:f1:d8:e2:6a:43:e0:
a7:66:64:75:e3:29:90:3c:4d:32:6f:d8:71:d0:60:
3e:bd:fe:29:7f:d9:34:c7:1f:83:75:c5:3c:1e:3f:
e7:8b:03:57:2a:7e:22:9c:ff:0d:84:ea:05:49:9b:
c5:6e:76:20:d6:12:64:e7:2d:56:5f:3c:ec:a5:ab:
76:af:2d:cd:25:1f:42:bc:f7:4a:2e:f9:ba:96:76:
7e:c3:b7:b8:84:09:19:c4:3d:94:70:2b:cf:86:26:
7c:0b:50:60:f4:3d:3c:bd:19:20:7d:42:a7:0f:36:
81:31:b2:e7:0f:d6:9d:49:5f:1d:02:c6:29:88:69:
8b:b1:b8:3f:a5:69:d8:9b:7d:8d:af:6a:03:6d:e9:
14:50:f1:3e:9e:5c:90:5c:94:b8:c2:06:e3:63:6b:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:61:BC:3D:7F:0B:AA:62:A4:91:01:4C:A9:74:DF:7C:87:10:5D
X509v3 Authority Key Identifier:
keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/xxFhvD1_C6pipJEBTKl033yHEF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.52.0.0/16
192.103.20.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2d:1d:45:53:ff:30:e2:e5:6c:b3:a0:6e:f1:e0:43:60:dc:
ec:c7:8e:05:bf:e6:82:12:ea:f2:2a:e7:32:a1:b6:9a:25:ea:
e8:82:aa:fa:ab:f7:c1:6f:54:4b:d1:e0:2c:be:90:27:c4:7c:
24:0a:d2:3c:9e:99:c1:20:2b:70:8c:1c:39:e7:36:46:f1:c2:
c9:8d:39:cc:eb:dd:21:f2:84:98:0f:ff:5f:34:a2:d5:d5:8e:
1a:6d:e6:47:cd:2f:71:90:b6:a7:b8:99:d9:e1:1d:b0:b0:1a:
b0:67:b0:08:7f:97:9a:15:3e:06:a2:dc:52:48:5b:ad:dd:9c:
4f:84:ee:bc:20:40:7e:3e:a9:b9:33:f5:88:09:cd:7c:86:3f:
2b:8b:37:4a:15:9d:7d:77:f2:42:26:4d:49:44:d6:dc:7a:c5:
57:ad:58:7d:58:42:f1:30:42:23:a9:44:f6:fe:57:fd:90:5b:
55:ac:4b:19:e2:aa:9f:b1:4d:37:dd:92:a4:0d:8b:1d:de:6d:
26:ac:c5:13:69:c1:b5:d1:ea:29:ea:3a:2f:1c:9c:19:ca:7b:
86:44:27:eb:ec:1a:87:93:7a:53:15:8f:4d:df:74:89:4d:79:
76:15:c0:1d:87:a1:86:3b:b0:c4:95:d8:28:7c:01:a4:1f:cf:
91:82:0b:b2
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQlj7Kck8y4KVaklA/vRdjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODFhOGU4Yzc1YjU4ZjdkMWVmZDRjM2U2NTIyZDI3ODYz
ZjljY2YwHhcNMjUwMTAyMDU0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzExNjFiYzNkN2YwYmFhNjJhNDkxMDE0Y2E5NzRkZjdjODcxMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr5uV1Jdlsj8f2c3zMvaUAQWgfO3
zqgWBdXBVFVbe4dhox2HsN0+OLDr5lrLfmKbRzZxisMz9ze1GCc3n1hG8Vy7q0VO
vbzX5+Nvy5wbsHD50qwQEYN34WnthXnCla9oQujx2OJqQ+CnZmR14ymQPE0yb9hx
0GA+vf4pf9k0xx+DdcU8Hj/niwNXKn4inP8NhOoFSZvFbnYg1hJk5y1WXzzspat2
ry3NJR9CvPdKLvm6lnZ+w7e4hAkZxD2UcCvPhiZ8C1Bg9D08vRkgfUKnDzaBMbLn
D9adSV8dAsYpiGmLsbg/pWnYm32Nr2oDbekUUPE+nlyQXJS4wgbjY2uxIwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFMcRYbw9fwuqYqSRAUypdN98hxBdMB8GA1UdIwQY
MBaAFD+BqOjHW1j30e/Uw+ZSLSeGP5zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMt
YjcwOGM0MGE2NjdmLzEveHhGaHZEMV9DNnBpcEpFQlRLbDAzM3lIRUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMtYjcwOGM0MGE2Njdm
LzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAkzQDBADA
ZxQwDQYJKoZIhvcNAQELBQADggEBADAtHUVT/zDi5WyzoG7x4ENg3OzHjgW/5oIS
6vIq5zKhtpol6uiCqvqr98FvVEvR4Cy+kCfEfCQK0jyemcEgK3CMHDnnNkbxwsmN
Oczr3SHyhJgP/180otXVjhpt5kfNL3GQtqe4mdnhHbCwGrBnsAh/l5oVPgai3FJI
W63dnE+E7rwgQH4+qbkz9YgJzXyGPyuLN0oVnX138kImTUlE1tx6xVetWH1YQvEw
QiOpRPb+V/2QW1WsSxniqp+xTTfdkqQNix3ebSasxRNpwbXR6inqOi8cnBnKe4ZE
J+vsGoeTelMVj03fdIlNeXYVwB2HoYY7sMSV2Ch8AaQfz5GCC7I=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net