Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PnWnjR3stQDtahI2Yi4WOeh6K3c.roa
File: PnWnjR3stQDtahI2Yi4WOeh6K3c.roa (raw, json)
Hash identifier: eLQkYDiFbFvNLm9jQFxqud5eW4P7AsjLYYi/b79IhUg=
Subject key identifier: 3E:75:A7:8D:1D:EC:B5:00:ED:6A:12:36:62:2E:16:39:E8:7A:2B:77
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A96826F69CC8D34A67FCBA8DC4B3BBAB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PnWnjR3stQDtahI2Yi4WOeh6K3c.roa
Signing time: Tue 18 Mar 2025 13:18:50 +0000
ROA not before: Tue 18 Mar 2025 13:18:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:68:26:f6:9c:c8:d3:4a:67:fc:ba:8d:c4:b3:bb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 13:18:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e75a78d1decb500ed6a1236622e1639e87a2b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:8d:1d:19:72:32:a4:ff:2f:59:04:3f:59:
c4:59:25:95:da:1b:ee:30:f2:98:2a:c6:7b:9c:45:
86:df:00:bd:78:28:65:6b:8a:04:59:55:28:be:da:
a9:40:1b:2e:16:dc:e0:fa:f2:ad:a2:50:ca:f6:22:
cf:54:54:9c:74:0b:05:87:bc:18:a6:ea:03:e5:8f:
d0:8c:7f:5b:85:a9:d0:f4:a5:16:d5:8b:53:84:08:
99:72:9c:cb:ef:14:d9:5b:c4:c8:15:92:25:0b:e3:
a3:eb:f5:99:32:98:ff:7d:8e:92:43:6d:3f:67:72:
13:6c:41:90:da:aa:ab:1a:9c:61:51:fa:6c:50:5e:
11:5a:de:1e:ff:d0:58:49:ec:fb:7d:22:7c:ad:8f:
f0:10:94:17:2e:e6:e4:8d:64:d1:92:d9:f0:72:7c:
49:af:1c:17:01:db:46:ef:81:dd:7b:86:c1:e6:7e:
4e:bb:00:ae:d4:c7:fc:f5:2c:6b:51:24:88:c9:39:
56:b1:64:58:1b:34:84:15:01:f2:f6:4a:2b:6d:73:
5a:73:31:13:dc:73:bc:b7:ed:03:a0:f3:92:3c:10:
7b:27:c0:5a:58:87:de:79:26:90:79:ab:ab:86:f6:
0f:fd:2e:e4:dc:37:8d:5f:6b:eb:66:34:44:26:e2:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:A7:8D:1D:EC:B5:00:ED:6A:12:36:62:2E:16:39:E8:7A:2B:77
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PnWnjR3stQDtahI2Yi4WOeh6K3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/23
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:9f:a7:75:f7:8d:ec:7f:a6:d5:0b:89:9e:5a:55:bb:5b:94:
55:13:fc:af:64:00:c5:35:5b:a7:09:98:88:30:6d:f4:f2:9c:
73:1e:88:52:f7:2e:a9:ef:7f:43:a1:c3:fc:6c:11:ec:71:c4:
ff:26:b0:92:49:10:21:c3:b8:30:1f:df:a4:2f:06:2e:92:2b:
8e:6f:a3:96:aa:bb:58:85:3f:8c:e9:d6:84:c1:f7:c6:74:46:
24:4f:fa:78:53:b1:d9:47:03:95:4a:21:48:c4:5c:f5:e0:b5:
cb:ec:33:00:b0:27:4c:16:ab:21:45:9d:f0:d1:07:ae:c4:4f:
29:a1:c1:2d:e2:ed:d4:ad:10:ad:3c:43:5d:8f:b6:d1:9f:74:
aa:56:b3:90:89:b4:b4:63:c9:8b:64:b3:f0:da:99:09:4e:66:
ed:43:2a:07:17:a9:5d:49:0a:50:89:d3:75:e7:e8:2e:1a:a0:
69:e3:1e:57:80:56:90:af:9f:53:ca:07:87:a6:5e:0f:7d:b9:
aa:59:0c:ac:44:69:de:12:d8:7e:75:26:86:1c:0c:1b:84:e2:
e7:5c:aa:f7:7a:c8:5b:aa:b8:50:47:a7:4e:86:62:c3:45:e4:
7f:66:d3:d4:67:99:30:23:e7:93:cd:5d:2e:20:26:17:91:db:
8e:c1:2e:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWpaCb2nMjTSmf8uo3Es7urMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzE4MTMxODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTc1YTc4ZDFkZWNiNTAwZWQ2YTEyMzY2MjJlMTYzOWU4N2EyYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYKNHRlyMqT/L1kEP1nEWSWV2hvu
MPKYKsZ7nEWG3wC9eChla4oEWVUovtqpQBsuFtzg+vKtolDK9iLPVFScdAsFh7wY
puoD5Y/QjH9bhanQ9KUW1YtThAiZcpzL7xTZW8TIFZIlC+Oj6/WZMpj/fY6SQ20/
Z3ITbEGQ2qqrGpxhUfpsUF4RWt4e/9BYSez7fSJ8rY/wEJQXLubkjWTRktnwcnxJ
rxwXAdtG74Hde4bB5n5OuwCu1Mf89SxrUSSIyTlWsWRYGzSEFQHy9korbXNaczET
3HO8t+0DoPOSPBB7J8BaWIfeeSaQeaurhvYP/S7k3DeNX2vrZjREJuLHfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD51p40d7LUA7WoSNmIuFjnoeit3MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUG5XbmpSM3N0UUR0YWhJMllpNFdPZWg2SzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBf04AwQA
wTp7MA0GCSqGSIb3DQEBCwUAA4IBAQCon6d1943sf6bVC4meWlW7W5RVE/yvZADF
NVunCZiIMG308pxzHohS9y6p739DocP8bBHsccT/JrCSSRAhw7gwH9+kLwYukiuO
b6OWqrtYhT+M6daEwffGdEYkT/p4U7HZRwOVSiFIxFz14LXL7DMAsCdMFqshRZ3w
0QeuxE8pocEt4u3UrRCtPENdj7bRn3SqVrOQibS0Y8mLZLPw2pkJTmbtQyoHF6ld
SQpQidN15+guGqBp4x5XgFaQr59TygeHpl4PfbmqWQysRGneEth+dSaGHAwbhOLn
XKr3eshbqrhQR6dOhmLDReR/ZtPUZ5kwI+eTzV0uICYXkduOwS7A
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:49 2025 by rpki-client