Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/r5EJuSpCqXyyVDPA6wD7-j8_xO0.roa
File: r5EJuSpCqXyyVDPA6wD7-j8_xO0.roa (raw, json)
Hash identifier: E2P97D4k0k21qu5eA5Um2w1UV5L6jy5OQpmJtonQT/g=
Subject key identifier: AF:91:09:B9:2A:42:A9:7C:B2:54:33:C0:EB:00:FB:FA:3F:3F:C4:ED
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194EC4EE4092FE97F9033717DEF308BC8D8
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/r5EJuSpCqXyyVDPA6wD7-j8_xO0.roa
Signing time: Sun 09 Feb 2025 20:03:00 +0000
ROA not before: Sun 09 Feb 2025 20:03:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
188.214.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ec:4e:e4:09:2f:e9:7f:90:33:71:7d:ef:30:8b:c8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Feb 9 20:03:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af9109b92a42a97cb25433c0eb00fbfa3f3fc4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:22:b4:07:ae:de:73:ab:fe:00:63:fb:78:
21:ba:f3:74:ab:05:77:c4:cd:7c:cf:f3:ee:b0:76:
4a:fd:fb:d6:05:64:ce:2b:b8:5b:11:f7:c1:f3:c7:
29:2b:83:ce:8f:53:75:7f:8e:93:85:5b:d0:30:6c:
b5:f6:9b:5d:b1:d2:86:4e:41:50:e5:a7:0f:9d:93:
93:75:78:14:00:82:66:9d:5a:c0:28:8f:e5:d9:7d:
9a:2e:80:31:27:22:b3:ed:dc:a4:ab:86:56:3d:6f:
01:77:f7:48:45:62:af:7d:24:d0:7e:a7:41:ae:d0:
8c:00:08:77:6b:10:71:95:c6:7e:de:74:62:b7:48:
b4:95:6b:93:08:a9:aa:f1:58:9b:72:63:d8:ae:c8:
79:be:03:42:dd:d5:32:eb:dd:e8:df:1d:43:c1:4f:
79:7e:10:dd:5e:08:9b:91:9c:8d:83:6c:da:9b:7e:
76:58:76:0f:04:70:ff:95:d6:59:9f:04:dd:8a:68:
44:7e:58:a2:fd:ad:c9:12:65:03:fc:49:db:5a:18:
50:30:d5:82:7f:9b:af:ed:07:09:69:d8:72:3b:14:
a8:6f:39:5f:25:b8:cc:bc:fb:3a:64:8e:05:2c:41:
57:65:f5:39:ae:a2:e5:ad:ff:b3:9c:7c:e3:6d:07:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:09:B9:2A:42:A9:7C:B2:54:33:C0:EB:00:FB:FA:3F:3F:C4:ED
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/r5EJuSpCqXyyVDPA6wD7-j8_xO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
12:a6:23:a9:06:36:5c:8e:84:0c:81:0c:c3:1a:fd:89:03:d3:
6b:01:33:77:39:e7:cb:2b:6e:08:01:10:25:9d:a9:db:7c:9c:
55:10:a1:02:b7:b6:3b:63:8a:78:9a:d0:a9:76:bb:0e:78:97:
06:7b:2b:45:95:31:c5:26:1d:0c:41:7f:d6:d2:58:82:13:55:
39:d0:22:f0:ae:41:74:2a:40:2e:01:03:16:11:f5:09:59:37:
89:af:5c:b8:89:9d:67:a5:6a:41:43:aa:83:93:aa:c4:3b:e4:
63:6b:1c:2d:9b:e0:58:a3:1a:90:aa:3b:07:92:43:6f:69:3e:
53:d1:dd:9a:87:4e:3e:14:89:8b:50:11:ae:38:38:a1:41:b9:
82:42:53:f0:39:ab:34:54:d9:b9:ec:d7:9f:99:b2:c1:90:65:
f0:65:72:5b:f3:be:a8:77:b5:ab:c5:dd:d6:fc:56:cd:40:90:
11:bb:af:42:54:64:cc:40:0c:2b:0e:9c:79:cf:b9:eb:9b:af:
93:73:17:7c:85:97:44:c1:76:3d:48:a5:66:b6:08:fe:15:66:
3e:8c:ed:22:eb:95:46:69:18:65:be:d4:ad:26:22:7a:92:03:
f8:d0:f2:0d:db:fc:e6:80:85:4f:53:4a:24:84:67:da:87:07:
7c:36:17:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTsTuQJL+l/kDNxfe8wi8jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMjA5MjAwMzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjkxMDliOTJhNDJhOTdjYjI1NDMzYzBlYjAwZmJmYTNmM2ZjNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqcitAeu3nOr/gBj+3ghuvN0qwV3
xM18z/PusHZK/fvWBWTOK7hbEffB88cpK4POj1N1f46ThVvQMGy19ptdsdKGTkFQ
5acPnZOTdXgUAIJmnVrAKI/l2X2aLoAxJyKz7dykq4ZWPW8Bd/dIRWKvfSTQfqdB
rtCMAAh3axBxlcZ+3nRit0i0lWuTCKmq8VibcmPYrsh5vgNC3dUy693o3x1DwU95
fhDdXgibkZyNg2zam352WHYPBHD/ldZZnwTdimhEflii/a3JEmUD/EnbWhhQMNWC
f5uv7QcJadhyOxSobzlfJbjMvPs6ZI4FLEFXZfU5rqLlrf+znHzjbQeIDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK+RCbkqQql8slQzwOsA+/o/P8TtMB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvcjVFSnVTcENxWHl5VkRQQTZ3RDctajhfeE8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVFQAwQB
vNbqMA0GCSqGSIb3DQEBCwUAA4IBAQASpiOpBjZcjoQMgQzDGv2JA9NrATN3OefL
K24IARAlnanbfJxVEKECt7Y7Y4p4mtCpdrsOeJcGeytFlTHFJh0MQX/W0liCE1U5
0CLwrkF0KkAuAQMWEfUJWTeJr1y4iZ1npWpBQ6qDk6rEO+Rjaxwtm+BYoxqQqjsH
kkNvaT5T0d2ah04+FImLUBGuODihQbmCQlPwOas0VNm57NefmbLBkGXwZXJb876o
d7Wrxd3W/FbNQJARu69CVGTMQAwrDpx5z7nrm6+Tcxd8hZdEwXY9SKVmtgj+FWY+
jO0i65VGaRhlvtStJiJ6kgP40PIN2/zmgIVPU0okhGfahwd8Nhf0
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:06:43 2025 by rpki-client