Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/QtkpYFVkfpGCc6muBgcymFsYmcw.roa
File: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (raw, json)
Hash identifier: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=
Subject key identifier: 42:D9:29:60:55:64:7E:91:82:73:A9:AE:06:07:32:98:5B:18:99:CC
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2C63885E310B9EF7CE6D5C63D83E
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/QtkpYFVkfpGCc6muBgcymFsYmcw.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 5.178.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2c:63:88:5e:31:0b:9e:f7:ce:6d:5c:63:d8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d9296055647e918273a9ae060732985b1899cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:a0:55:5d:b8:ce:fa:9e:ca:0c:c0:77:2b:
9d:12:cc:c7:84:58:f0:cf:5e:26:0d:2b:49:d2:97:
d7:c8:41:46:27:fe:f6:c1:96:65:b0:a8:13:e9:a5:
87:ec:0b:58:5a:ac:67:bf:f9:a9:ab:0f:83:47:4b:
f7:83:8d:39:41:09:0c:d3:f4:75:8a:fe:72:28:38:
55:6d:40:1f:94:c7:bd:5d:ca:bd:ad:62:86:c3:76:
c0:92:83:70:eb:c3:17:0f:05:1a:a6:71:03:c3:9e:
00:41:2a:14:0f:e0:36:e8:6c:c3:f8:90:98:29:6c:
20:4e:78:8d:8f:d3:42:43:c5:47:e0:80:2d:14:ab:
5e:e8:43:a3:fc:0e:70:dd:33:cb:ad:d1:5f:f2:cc:
6b:18:9a:d9:98:be:b0:fe:25:78:e3:85:06:a2:08:
9e:b7:12:52:bf:11:c8:db:cb:e5:5f:06:48:ee:7d:
6e:b3:96:ad:6b:a9:27:d4:cd:f8:48:5a:e8:64:b1:
49:63:9d:77:30:84:70:96:ba:47:1d:c6:41:ef:d1:
90:a4:88:43:10:aa:21:5b:64:91:02:86:20:6c:af:
0d:eb:f2:16:92:15:0a:ae:a8:2e:cb:d3:8b:7d:06:
1e:46:4c:41:50:30:e3:71:ca:49:bb:c0:96:36:65:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:29:60:55:64:7E:91:82:73:A9:AE:06:07:32:98:5B:18:99:CC
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/QtkpYFVkfpGCc6muBgcymFsYmcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e4:18:92:0f:11:2e:5d:72:2b:d1:b9:36:d5:a9:4e:33:6a:
35:02:bd:cd:5e:ee:f0:8a:a3:2f:a2:3c:fd:47:7d:5e:02:d6:
bf:bc:cd:76:b4:a6:cb:0e:4f:cb:6f:d2:f9:a8:45:88:d7:40:
dc:8c:fe:a2:d9:7c:dc:9e:94:c3:62:15:cf:ea:80:79:f4:6f:
d5:6b:bd:c7:de:a5:40:d9:06:41:df:05:aa:89:31:7b:46:6c:
60:03:ec:a2:a2:22:77:b5:70:0b:f8:bc:24:e3:6e:22:d4:9c:
dc:55:18:72:ca:f4:ea:d4:6d:a4:75:b4:78:17:94:f4:9f:1d:
dc:63:c9:cb:bf:24:e5:f2:b6:e2:c6:b9:c4:54:a3:38:1b:6b:
1f:be:67:d6:7b:59:e8:26:98:57:4d:0a:68:bb:61:9e:ba:68:
6f:d8:fa:ba:0a:9d:93:e9:a4:25:51:e3:38:88:32:ff:7c:cf:
b1:d2:c4:fa:16:2b:f4:d1:cb:58:de:ee:9b:0f:34:a3:37:22:
b4:38:f1:aa:fe:bb:77:b3:03:cd:fc:05:2f:e5:6c:96:0c:a0:
e1:c1:f6:a1:8f:3a:96:b3:c9:ee:7e:d6:c5:eb:08:fe:b6:10:
33:95:e5:aa:c3:d4:ce:01:39:fb:b1:ef:d2:bb:e1:b3:d2:44:
99:15:67:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbCxjiF4xC573zm1cY9g+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjUwMTAyMDk1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmQ5Mjk2MDU1NjQ3ZTkxODI3M2E5YWUwNjA3MzI5ODViMTg5OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaKgVV24zvqeygzAdyudEszHhFjw
z14mDStJ0pfXyEFGJ/72wZZlsKgT6aWH7AtYWqxnv/mpqw+DR0v3g405QQkM0/R1
iv5yKDhVbUAflMe9Xcq9rWKGw3bAkoNw68MXDwUapnEDw54AQSoUD+A26GzD+JCY
KWwgTniNj9NCQ8VH4IAtFKte6EOj/A5w3TPLrdFf8sxrGJrZmL6w/iV444UGogie
txJSvxHI28vlXwZI7n1us5ata6kn1M34SFroZLFJY513MIRwlrpHHcZB79GQpIhD
EKohW2SRAoYgbK8N6/IWkhUKrqguy9OLfQYeRkxBUDDjccpJu8CWNmX7MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELZKWBVZH6RgnOprgYHMphbGJnMMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvUXRrcFlGVmtmcEdDYzZtdUJnY3ltRnNZbWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJkMA0G
CSqGSIb3DQEBCwUAA4IBAQAb5BiSDxEuXXIr0bk21alOM2o1Ar3NXu7wiqMvojz9
R31eAta/vM12tKbLDk/Lb9L5qEWI10DcjP6i2XzcnpTDYhXP6oB59G/Va73H3qVA
2QZB3wWqiTF7RmxgA+yioiJ3tXAL+Lwk424i1JzcVRhyyvTq1G2kdbR4F5T0nx3c
Y8nLvyTl8rbixrnEVKM4G2sfvmfWe1noJphXTQpou2Geumhv2Pq6Cp2T6aQlUeM4
iDL/fM+x0sT6Fiv00ctY3u6bDzSjNyK0OPGq/rt3swPN/AUv5WyWDKDhwfahjzqW
s8nuftbF6wj+thAzleWqw9TOATn7se/Su+Gz0kSZFWeO
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:38:15 2025 by rpki-client