Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lW5bqJA9IV5AUt-Hh2H2viJxfbg.roa
File: lW5bqJA9IV5AUt-Hh2H2viJxfbg.roa (raw, json)
Hash identifier: nJ+pKuP5fxDX0ZZI13+nAabBpXIFMpdfn6SEPNCByFg=
Subject key identifier: 95:6E:5B:A8:90:3D:21:5E:40:52:DF:87:87:61:F6:BE:22:71:7D:B8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143FD26571567AE659BE6CBDE405AAF
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lW5bqJA9IV5AUt-Hh2H2viJxfbg.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 83.171.232.0/22 maxlen: 22
194.62.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fd:26:57:15:67:ae:65:9b:e6:cb:de:40:5a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956e5ba8903d215e4052df878761f6be22717db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:05:35:58:2b:94:21:a0:af:2b:b5:8c:36:
30:e9:c7:28:e6:db:20:d8:95:a2:3d:57:fa:e6:59:
7b:14:b0:df:98:69:0f:f4:ef:d9:5e:84:45:a4:3d:
5a:90:b7:33:05:ff:29:87:0e:a9:09:93:25:31:74:
6f:03:8c:57:d8:c7:6e:1d:0f:03:e7:c6:09:09:ad:
00:b2:11:de:69:e7:d4:ef:6a:a3:3a:29:85:25:52:
79:5a:98:1d:15:33:59:13:96:ad:88:58:73:ef:c8:
73:62:18:b6:6b:ad:a3:a2:23:87:16:85:4e:45:50:
12:86:d0:74:be:37:90:f6:24:09:68:8e:d3:12:1e:
4e:e7:e9:e0:a4:f7:3a:04:64:b0:af:59:01:f7:60:
73:d7:99:66:d4:49:b0:dc:8d:f0:60:1a:78:d1:8e:
f8:eb:ce:76:9f:f8:3e:b1:68:55:40:81:7a:98:60:
43:21:65:d2:8a:72:2c:0f:36:ca:4a:10:2b:a0:ee:
6b:75:d0:e4:74:71:ac:97:b0:6c:4f:d9:b8:94:84:
ba:dc:61:37:b1:b1:a3:55:41:83:d5:b7:35:ba:41:
a6:d0:c3:bf:fc:11:89:f3:1c:e2:3d:89:99:43:6a:
54:92:45:11:ca:04:04:6a:2d:03:35:20:af:6e:9e:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:5B:A8:90:3D:21:5E:40:52:DF:87:87:61:F6:BE:22:71:7D:B8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lW5bqJA9IV5AUt-Hh2H2viJxfbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.232.0/22
194.62.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:bb:ac:88:fa:0e:b9:3a:9b:e5:c9:a4:d0:e7:e8:14:95:de:
4c:9b:23:5a:fb:df:9b:9d:b4:96:9f:fc:98:e2:2f:a7:1f:e4:
25:42:de:81:eb:e0:44:a9:be:99:45:88:15:fe:ea:aa:62:c9:
2b:cc:e0:e8:a6:c5:7a:c7:e8:47:fb:1a:5a:f4:4a:14:b2:70:
05:b0:b4:47:f0:2a:6f:f5:84:b6:9a:1b:e9:2a:f4:c2:ee:de:
b7:b9:10:ed:84:41:c2:0e:ac:8d:23:b3:26:f2:65:a4:5f:29:
a5:88:01:b6:52:b1:9b:94:fb:d0:16:15:dd:6c:f5:3e:45:c7:
e0:ca:ae:37:11:1a:37:a8:48:4e:2c:ad:75:e8:a0:f7:5c:f5:
8b:8f:41:76:e6:92:b5:ed:4b:f8:f0:83:41:20:06:8c:67:0d:
2f:c4:79:27:72:66:de:de:5e:60:4a:d9:48:e4:92:e0:a1:82:
62:fe:b5:6a:8c:8f:f3:f8:bc:a4:37:cb:ae:72:8f:16:b4:5d:
42:1a:5d:36:06:f3:9c:06:06:cb:20:34:18:75:e6:80:94:c6:
9e:07:3e:33:d2:0b:b3:63:ff:74:61:08:14:bd:05:2d:c8:24:
ed:2f:58:3f:a7:fa:89:c7:65:3b:29:87:8d:81:6a:ac:c2:5b:
16:13:76:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ/0mVxVnrmWb5sveQFqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTZlNWJhODkwM2QyMTVlNDA1MmRmODc4NzYxZjZiZTIyNzE3ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymIFNVgrlCGgryu1jDYw6cco5tsg
2JWiPVf65ll7FLDfmGkP9O/ZXoRFpD1akLczBf8phw6pCZMlMXRvA4xX2MduHQ8D
58YJCa0AshHeaefU72qjOimFJVJ5WpgdFTNZE5atiFhz78hzYhi2a62joiOHFoVO
RVAShtB0vjeQ9iQJaI7TEh5O5+ngpPc6BGSwr1kB92Bz15lm1Emw3I3wYBp40Y74
6852n/g+sWhVQIF6mGBDIWXSinIsDzbKShAroO5rddDkdHGsl7BsT9m4lIS63GE3
sbGjVUGD1bc1ukGm0MO//BGJ8xziPYmZQ2pUkkURygQEai0DNSCvbp6hBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJVuW6iQPSFeQFLfh4dh9r4icX24MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvbFc1YnFKQTlJVjVBVXQtSGgySDJ2aUp4ZmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU6voAwQC
wj6EMA0GCSqGSIb3DQEBCwUAA4IBAQBLu6yI+g65OpvlyaTQ5+gUld5MmyNa+9+b
nbSWn/yY4i+nH+QlQt6B6+BEqb6ZRYgV/uqqYskrzODopsV6x+hH+xpa9EoUsnAF
sLRH8Cpv9YS2mhvpKvTC7t63uRDthEHCDqyNI7Mm8mWkXymliAG2UrGblPvQFhXd
bPU+Rcfgyq43ERo3qEhOLK116KD3XPWLj0F25pK17Uv48INBIAaMZw0vxHkncmbe
3l5gStlI5JLgoYJi/rVqjI/z+LykN8uuco8WtF1CGl02BvOcBgbLIDQYdeaAlMae
Bz4z0guzY/90YQgUvQUtyCTtL1g/p/qJx2U7KYeNgWqswlsWE3bS
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:31:15 2025 by rpki-client