Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/fMs3VYAVqzMZhSmUeTiywET2jDM.roa
File: fMs3VYAVqzMZhSmUeTiywET2jDM.roa (raw, json)
Hash identifier: 0nqXFLEWK68vXdSMUWcmsFp6vUnE39Jw7VS5oZKGbWA=
Subject key identifier: 7C:CB:37:55:80:15:AB:33:19:85:29:94:79:38:B2:C0:44:F6:8C:33
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 01D6CD66
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/fMs3VYAVqzMZhSmUeTiywET2jDM.roa
Signing time: Fri 18 Feb 2022 21:02:05 +0000
ROA not before: Fri 18 Feb 2022 21:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 109.94.172.0/24 maxlen: 24
109.94.174.0/24 maxlen: 24
109.94.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30854502 (0x1d6cd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: Feb 18 21:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ccb37558015ab33198529947938b2c044f68c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:8c:87:7d:27:41:39:73:b9:2f:07:04:00:
95:8d:63:be:89:8e:3f:81:84:fe:5e:23:24:52:d8:
3e:91:f4:2c:71:8e:d0:30:d2:c5:1d:7c:d7:17:94:
94:cf:4c:2c:4b:23:27:28:be:6a:0d:5b:9f:39:9e:
3e:94:94:2a:b1:42:64:10:92:8e:c2:47:9e:db:f4:
4d:38:10:f0:b3:2d:dc:14:7e:81:ce:fa:88:f5:32:
b1:88:81:c7:99:f1:93:64:67:85:c4:ef:3d:40:96:
a5:02:67:9b:b8:4d:3f:ca:3e:f2:62:52:1d:47:6d:
35:1c:ca:81:3c:f9:5b:8d:f1:9a:d5:c2:a2:da:bb:
39:83:83:6c:85:49:0d:df:62:f1:d9:df:e7:8b:a8:
19:24:5a:ea:b3:21:e0:59:0f:c1:97:f0:de:4e:97:
0e:f9:cf:41:fa:50:98:02:04:4d:91:b8:7d:5f:47:
e5:78:2f:85:06:dc:31:fa:9f:33:72:32:bd:42:fc:
e8:77:f0:17:a7:16:7c:5d:12:9b:3d:d2:c8:d7:ec:
e8:e2:0c:54:52:12:ce:da:07:89:a2:97:89:8d:64:
1d:bf:cd:83:e7:ba:a6:cb:b9:e2:8b:48:00:6a:34:
11:0b:9e:66:1d:8f:6a:85:55:5a:33:f2:e3:08:b7:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:37:55:80:15:AB:33:19:85:29:94:79:38:B2:C0:44:F6:8C:33
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/fMs3VYAVqzMZhSmUeTiywET2jDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.172.0-109.94.174.255
Signature Algorithm: sha256WithRSAEncryption
6a:87:e0:a9:8f:77:76:6d:34:8c:ea:29:34:c7:41:b9:e0:b9:
3b:4d:53:c6:86:25:41:66:c3:29:84:68:cf:95:e7:ec:01:bf:
73:4f:c4:d4:21:13:c4:b2:09:98:8e:e2:44:ab:f2:5a:9f:87:
51:c7:1b:0a:24:54:3e:46:51:51:64:d2:35:0c:12:aa:d0:8c:
10:1a:cf:c7:12:1f:8d:a4:d6:d5:49:8c:1f:d0:08:76:e9:ac:
6c:3c:f8:c4:78:54:cf:d6:3d:36:8d:45:04:90:9b:07:5f:5c:
3f:02:83:59:d7:78:e8:b8:13:d2:ff:d0:f6:0a:e3:dc:ee:a1:
83:f6:93:e2:04:72:6b:87:49:5b:31:89:25:4a:36:17:7a:32:
7a:7e:59:96:04:40:49:f4:a2:d1:7f:17:f5:ac:7f:13:e4:cf:
49:79:6d:88:45:50:c3:19:a2:f9:a9:6e:7c:cc:81:fd:7e:e0:
83:cc:30:d1:43:a4:37:c2:f8:7c:3a:35:dd:a0:d7:af:b0:99:
c2:04:ea:12:c4:96:69:6c:87:af:1a:ee:75:75:90:fe:b8:45:
67:6c:a5:0e:2b:1c:2f:5e:b1:87:4e:71:b4:6b:25:c4:af:1f:
af:e6:5c:8d:41:78:98:d2:97:79:de:fb:75:f7:c0:44:7b:c0:
c1:e7:d4:70
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAdbNZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzMxYTM2MWJkYzUxZDdhYWNhZGNlMzAyZjEyNTdkNWMzZjM1YWUxMB4XDTIyMDIx
ODIxMDIwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2NjYjM3NTU4MDE1
YWIzMzE5ODUyOTk0NzkzOGIyYzA0NGY2OGMzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCYjId9J0E5c7kvBwQAlY1jvomOP4GE/l4jJFLYPpH0LHGO
0DDSxR181xeUlM9MLEsjJyi+ag1bnzmePpSUKrFCZBCSjsJHntv0TTgQ8LMt3BR+
gc76iPUysYiBx5nxk2RnhcTvPUCWpQJnm7hNP8o+8mJSHUdtNRzKgTz5W43xmtXC
otq7OYODbIVJDd9i8dnf54uoGSRa6rMh4FkPwZfw3k6XDvnPQfpQmAIETZG4fV9H
5XgvhQbcMfqfM3IyvUL86HfwF6cWfF0Smz3SyNfs6OIMVFISztoHiaKXiY1kHb/N
g+e6psu54otIAGo0EQueZh2PaoVVWjPy4wi3xHECAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBR8yzdVgBWrMxmFKZR5OLLARPaMMzAfBgNVHSMEGDAWgBSDMaNhvcUdeqyt
zjAvElfVw/Na4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6R2pZYjNGSFhxc3JjNHdMeEpYMWNQeld1RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvZDBiNzUxLThlMjYtNDA2Ni04ZGZlLTI0NWNjODE2MzE3NC8x
L2ZNczNWWUFWcXpNWmhTbVVlVGl5d0VUMmpETS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
ZDBiNzUxLThlMjYtNDA2Ni04ZGZlLTI0NWNjODE2MzE3NC8xL2d6R2pZYjNGSFhx
c3JjNHdMeEpYMWNQeld1RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQCbV6sAwQAbV6uMA0GCSqGSIb3
DQEBCwUAA4IBAQBqh+Cpj3d2bTSM6ik0x0G54Lk7TVPGhiVBZsMphGjPlefsAb9z
T8TUIRPEsgmYjuJEq/Jan4dRxxsKJFQ+RlFRZNI1DBKq0IwQGs/HEh+NpNbVSYwf
0Ah26axsPPjEeFTP1j02jUUEkJsHX1w/AoNZ13jouBPS/9D2CuPc7qGD9pPiBHJr
h0lbMYklSjYXejJ6flmWBEBJ9KLRfxf1rH8T5M9JeW2IRVDDGaL5qW58zIH9fuCD
zDDRQ6Q3wvh8OjXdoNevsJnCBOoSxJZpbIevGu51dZD+uEVnbKUOKxwvXrGHTnG0
ayXErx+v5lyNQXiY0pd53vt198BEe8DB59Rw
-----END CERTIFICATE-----
Generated at Thu May 1 11:11:54 2025 by rpki-client