Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/5XPlthwbWlv3sSNiswqIDENViyk.roa
File: 5XPlthwbWlv3sSNiswqIDENViyk.roa (raw, json)
Hash identifier: M/1qorbVUOardrEAjumK0QwLw05T0Stm41r5/Vuljlg=
Subject key identifier: E5:73:E5:B6:1C:1B:5A:5B:F7:B1:23:62:B3:0A:88:0C:43:55:8B:29
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 0184C9D48C1260BB7974CC474557230240E4
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/5XPlthwbWlv3sSNiswqIDENViyk.roa
Signing time: Wed 30 Nov 2022 18:37:40 +0000
ROA not before: Wed 30 Nov 2022 18:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201211
IP address blocks: 45.94.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:d4:8c:12:60:bb:79:74:cc:47:45:57:23:02:40:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Nov 30 18:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e573e5b61c1b5a5bf7b12362b30a880c43558b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:6e:f7:93:ae:4d:91:1e:d9:cf:31:93:30:
ed:c2:b4:63:3a:36:de:ed:15:71:8e:d0:4e:60:5e:
8e:e5:d3:ff:b3:67:ff:d9:22:53:7a:3f:a8:3a:87:
f9:ff:bb:09:d8:11:94:b8:86:6e:11:d4:62:73:56:
1d:54:be:df:ff:6a:01:b3:2a:f9:86:aa:b2:a6:98:
e2:f3:ea:20:9d:18:40:00:69:32:24:41:5a:a9:f9:
58:8f:68:96:79:93:e5:aa:ac:fa:8a:d5:99:7f:70:
32:74:7e:b9:e0:14:b2:89:90:46:c9:a2:da:76:c1:
2a:71:0a:38:8e:f0:22:06:92:13:53:3b:d7:f4:b8:
94:ad:1d:3e:8a:bb:ff:af:7c:0a:84:1b:95:41:a4:
5b:0f:4b:13:50:a4:26:de:22:97:8e:21:ea:40:a7:
59:b8:a4:ff:ea:5a:15:27:43:77:44:c3:3d:4c:b8:
64:98:17:d4:23:cf:7c:33:aa:4b:8f:33:a4:19:f8:
35:7e:29:04:00:85:8b:1d:7c:9b:3b:17:86:9e:90:
d9:a4:47:b5:66:0d:35:ad:99:d0:2c:76:59:16:df:
05:9c:88:38:f5:b6:6f:a7:4e:63:08:8b:e8:1f:fa:
e5:c5:5f:ed:d9:11:32:bb:9c:59:40:ec:01:62:f0:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:73:E5:B6:1C:1B:5A:5B:F7:B1:23:62:B3:0A:88:0C:43:55:8B:29
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/5XPlthwbWlv3sSNiswqIDENViyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.21.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8e:59:e0:83:ae:52:ec:41:05:5f:a8:99:0c:4b:cb:31:3c:
d9:ca:d4:af:e0:ab:5c:ed:8a:23:11:09:1e:68:b1:c1:83:4a:
45:de:74:dd:5c:41:e8:40:aa:5a:94:52:da:04:4f:93:13:9d:
f8:01:46:4e:82:f9:3c:7b:8e:c3:82:a7:0d:a7:ad:73:e4:fc:
4c:36:9b:1f:e5:a7:b6:f3:1d:f2:9e:ea:f6:d4:77:df:4e:e6:
65:4d:e3:d7:34:0f:cf:e5:6f:90:5a:bb:3f:80:9c:c2:55:6a:
dd:87:05:98:a2:a0:be:ef:d2:e3:d9:81:3d:d4:70:7b:10:74:
60:9f:35:b7:a7:30:b3:c7:fd:53:12:78:b4:da:ec:26:d5:11:
97:70:2b:8c:3b:93:0f:ed:4e:33:ca:75:ae:66:87:64:06:e0:
f7:9e:31:76:d5:b1:a6:41:d7:ed:21:0a:a1:a4:fd:7a:2c:4d:
9c:e3:91:b9:59:2a:a7:29:01:f1:44:04:37:17:2b:a4:e9:ba:
ae:65:88:60:30:91:bd:3a:2b:e4:01:ee:d0:07:97:93:f7:62:
52:3a:0d:88:7a:15:c1:32:ee:45:2c:50:b9:39:90:a2:b1:6c:
54:ff:1e:35:7f:c9:c3:a1:95:fe:34:60:39:c9:e8:a7:a9:af:
f7:a6:4c:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTJ1IwSYLt5dMxHRVcjAkDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyN2I0ODc2YTJkMTEwNThjMmU2YTc3OWZjZWFjNWYwNDA4
M2I0YzIwHhcNMjIxMTMwMTgzNzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTczZTViNjFjMWI1YTViZjdiMTIzNjJiMzBhODgwYzQzNTU4YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVdu95OuTZEe2c8xkzDtwrRjOjbe
7RVxjtBOYF6O5dP/s2f/2SJTej+oOof5/7sJ2BGUuIZuEdRic1YdVL7f/2oBsyr5
hqqyppji8+ognRhAAGkyJEFaqflYj2iWeZPlqqz6itWZf3AydH654BSyiZBGyaLa
dsEqcQo4jvAiBpITUzvX9LiUrR0+irv/r3wKhBuVQaRbD0sTUKQm3iKXjiHqQKdZ
uKT/6loVJ0N3RMM9TLhkmBfUI898M6pLjzOkGfg1fikEAIWLHXybOxeGnpDZpEe1
Zg01rZnQLHZZFt8FnIg49bZvp05jCIvoH/rlxV/t2REyu5xZQOwBYvCjTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVz5bYcG1pb97EjYrMKiAxDVYspMB8GA1UdIwQY
MBaAFHJ7SHai0RBYwuanefzqxfBAg7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY250SWRxTFJFRmpDNXFkNV9PckY4RUNEdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZWVhMTAtNzIwOC00ZDVjLTg1Yjkt
OWUzNTA4OWZhNzhmLzEvNVhQbHRod2JXbHYzc1NOaXN3cUlERU5WaXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZWVhMTAtNzIwOC00ZDVjLTg1YjktOWUzNTA4OWZhNzhm
LzEvY250SWRxTFJFRmpDNXFkNV9PckY4RUNEdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV4VMA0G
CSqGSIb3DQEBCwUAA4IBAQBwjlngg65S7EEFX6iZDEvLMTzZytSv4Ktc7YojEQke
aLHBg0pF3nTdXEHoQKpalFLaBE+TE534AUZOgvk8e47DgqcNp61z5PxMNpsf5ae2
8x3ynur21HffTuZlTePXNA/P5W+QWrs/gJzCVWrdhwWYoqC+79Lj2YE91HB7EHRg
nzW3pzCzx/1TEni02uwm1RGXcCuMO5MP7U4zynWuZodkBuD3njF21bGmQdftIQqh
pP16LE2c45G5WSqnKQHxRAQ3Fyuk6bquZYhgMJG9OivkAe7QB5eT92JSOg2IehXB
Mu5FLFC5OZCisWxU/x41f8nDoZX+NGA5yeinqa/3pkyY
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:52 2025 by rpki-client