Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/5Pw36qCf2EixesfOAtEStjMBxhI.roa
File: 5Pw36qCf2EixesfOAtEStjMBxhI.roa (raw, json)
Hash identifier: my5dw8ks/VdG7HVuyO90YtxItDQsEeQctITLzNq64fc=
Subject key identifier: E4:FC:37:EA:A0:9F:D8:48:B1:7A:C7:CE:02:D1:12:B6:33:01:C6:12
Certificate issuer: /CN=0b862688087112727edd0ddbbeac36783a3b7d2a
Certificate serial: 018571152825C8B938BF8DFDECAFD524B5DE
Authority key identifier: 0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/5Pw36qCf2EixesfOAtEStjMBxhI.roa
Signing time: Mon 02 Jan 2023 06:04:49 +0000
ROA not before: Mon 02 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206291
IP address blocks: 185.188.44.0/22 maxlen: 22
2a0b:b780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:28:25:c8:b9:38:bf:8d:fd:ec:af:d5:24:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b862688087112727edd0ddbbeac36783a3b7d2a
Validity
Not Before: Jan 2 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4fc37eaa09fd848b17ac7ce02d112b63301c612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:e5:2e:ce:ab:3d:ce:e3:fb:2a:78:5e:01:
55:79:99:9a:60:4e:fa:5f:20:42:7c:56:ad:67:7c:
08:40:d3:fb:b2:d9:b4:a8:f0:c7:2c:9c:70:f1:e5:
18:8a:bb:d0:38:63:c5:c8:41:39:4f:f9:ce:bb:06:
7f:99:64:e7:66:ad:61:28:e2:dc:60:46:b1:09:4b:
65:93:1a:63:ac:30:17:65:9d:a8:d4:d6:0f:43:f8:
69:a2:30:9b:01:c7:ea:60:e5:d2:53:a9:34:56:1d:
55:f9:98:22:d3:4e:13:f5:d8:5d:17:b8:a8:fd:bc:
15:1a:3b:cc:5c:72:80:c2:1a:ce:27:c2:23:27:16:
e6:15:b7:ec:3f:00:d2:49:2e:4b:59:e3:fb:87:f1:
9a:89:c8:6b:3c:17:64:62:fc:65:0d:d9:93:98:dd:
81:93:82:65:64:49:71:71:a5:a9:1a:48:72:e2:64:
dd:90:12:22:51:a5:db:c8:1d:ee:8b:6f:df:c5:f7:
f6:34:59:76:2e:19:42:4b:c8:66:9e:97:73:2e:b1:
ba:2a:9c:58:5f:ab:37:14:70:71:08:72:e7:06:65:
33:cd:e7:f5:fd:8e:0e:9b:68:7e:9e:9a:ae:93:33:
91:35:14:50:27:88:a4:fb:d8:92:b8:03:60:24:c9:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FC:37:EA:A0:9F:D8:48:B1:7A:C7:CE:02:D1:12:B6:33:01:C6:12
X509v3 Authority Key Identifier:
keyid:0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/5Pw36qCf2EixesfOAtEStjMBxhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.44.0/22
IPv6:
2a0b:b780::/29
Signature Algorithm: sha256WithRSAEncryption
52:88:92:d1:1d:b2:78:04:03:e2:85:1e:69:0f:f7:52:5a:09:
20:44:d6:dd:83:8f:da:b6:a3:a9:8b:0e:b3:60:a5:ff:ee:b5:
d0:0b:b6:3f:70:b3:40:99:a3:48:d2:f9:60:dc:6f:33:36:f8:
ec:24:13:06:79:93:9e:af:a9:76:0d:2b:3f:9c:e1:01:97:f7:
b2:e7:77:8e:f5:ce:b5:02:86:0d:aa:7e:d3:63:42:95:80:62:
e8:09:f1:30:99:e5:a9:f1:8b:2b:34:99:0b:8c:11:7d:98:69:
72:e9:74:a7:27:64:6e:92:40:33:a4:59:e4:df:22:e4:e5:8f:
58:ec:9e:e7:5f:6b:91:f9:9f:1b:b4:a5:25:cc:7d:21:fd:a0:
14:4f:95:fa:98:20:d2:d9:0b:51:5a:26:e2:83:4d:69:d6:ab:
32:41:5f:89:f7:7f:c0:2a:b7:75:c3:ac:27:10:75:8a:38:bb:
ea:29:17:37:0e:fe:f1:c8:51:a0:88:94:a1:6e:dd:69:0e:21:
be:12:89:5a:06:09:0a:2c:84:cb:28:06:bf:fb:4e:bb:92:38:
a4:d3:a0:52:96:f2:1d:d9:c9:83:d6:ab:f6:9e:da:b9:9b:1c:
78:e7:fe:2d:94:76:35:04:3c:44:f7:d2:a8:0a:f4:95:fc:aa:
20:94:ca:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxFSglyLk4v4397K/VJLXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODYyNjg4MDg3MTEyNzI3ZWRkMGRkYmJlYWMzNjc4M2Ez
YjdkMmEwHhcNMjMwMTAyMDYwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGZjMzdlYWEwOWZkODQ4YjE3YWM3Y2UwMmQxMTJiNjMzMDFjNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxrlLs6rPc7j+yp4XgFVeZmaYE76
XyBCfFatZ3wIQNP7stm0qPDHLJxw8eUYirvQOGPFyEE5T/nOuwZ/mWTnZq1hKOLc
YEaxCUtlkxpjrDAXZZ2o1NYPQ/hpojCbAcfqYOXSU6k0Vh1V+Zgi004T9dhdF7io
/bwVGjvMXHKAwhrOJ8IjJxbmFbfsPwDSSS5LWeP7h/GaichrPBdkYvxlDdmTmN2B
k4JlZElxcaWpGkhy4mTdkBIiUaXbyB3ui2/fxff2NFl2LhlCS8hmnpdzLrG6KpxY
X6s3FHBxCHLnBmUzzef1/Y4Om2h+npqukzORNRRQJ4ik+9iSuANgJMnIfwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOT8N+qgn9hIsXrHzgLRErYzAcYSMB8GA1UdIwQY
MBaAFAuGJogIcRJyft0N276sNng6O30qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRZbWlBaHhFbkotM1EzYnZxdzJlRG83ZlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80ZmZiODItYjRlNi00ZTdkLTlhN2Ut
ZTA3NjBiYTA4OWEyLzEvNVB3MzZxQ2YyRWl4ZXNmT0F0RVN0ak1CeGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80ZmZiODItYjRlNi00ZTdkLTlhN2UtZTA3NjBiYTA4OWEy
LzEvQzRZbWlBaHhFbkotM1EzYnZxdzJlRG83ZlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubwsMA0E
AgACMAcDBQMqC7eAMA0GCSqGSIb3DQEBCwUAA4IBAQBSiJLRHbJ4BAPihR5pD/dS
WgkgRNbdg4/atqOpiw6zYKX/7rXQC7Y/cLNAmaNI0vlg3G8zNvjsJBMGeZOer6l2
DSs/nOEBl/ey53eO9c61AoYNqn7TY0KVgGLoCfEwmeWp8YsrNJkLjBF9mGly6XSn
J2RukkAzpFnk3yLk5Y9Y7J7nX2uR+Z8btKUlzH0h/aAUT5X6mCDS2QtRWibig01p
1qsyQV+J93/AKrd1w6wnEHWKOLvqKRc3Dv7xyFGgiJShbt1pDiG+EolaBgkKLITL
KAa/+067kjik06BSlvId2cmD1qv2ntq5mxx45/4tlHY1BDxE99KoCvSV/KoglMoJ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:29 2025 by rpki-client