Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/7rpPdh-_hMra7pJ7Pq8IOA3T1fU.roa
File: 7rpPdh-_hMra7pJ7Pq8IOA3T1fU.roa (raw, json)
Hash identifier: PvQFjPCLvGuhrhKD5EYuh48ZSrpl/bPSR2/Z1n0qNVA=
Subject key identifier: EE:BA:4F:76:1F:BF:84:CA:DA:EE:92:7B:3E:AF:08:38:0D:D3:D5:F5
Certificate issuer: /CN=4fe639ca6dfb592edd3bd160aac68f3a568a80d1
Certificate serial: 018CC5DC247162A12F6146DE6353D195B308
Authority key identifier: 4F:E6:39:CA:6D:FB:59:2E:DD:3B:D1:60:AA:C6:8F:3A:56:8A:80:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-Y5ym37WS7dO9FgqsaPOlaKgNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/7rpPdh-_hMra7pJ7Pq8IOA3T1fU.roa
Signing time: Mon 01 Jan 2024 16:29:47 +0000
ROA not before: Mon 01 Jan 2024 16:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50612
IP address blocks: 5.42.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:24:71:62:a1:2f:61:46:de:63:53:d1:95:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe639ca6dfb592edd3bd160aac68f3a568a80d1
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeba4f761fbf84cadaee927b3eaf08380dd3d5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:6f:1d:ea:60:8e:96:9f:56:cc:cf:01:a1:
80:74:82:b5:14:b7:68:b6:2b:ba:c3:bf:d1:da:4c:
c2:ab:d3:3d:59:97:e1:f1:32:48:53:2e:cd:07:b5:
ac:18:a3:0b:47:f2:88:95:84:0e:c6:f1:6e:8a:26:
5c:fd:0c:11:40:69:45:82:dd:20:44:52:00:7f:7c:
64:7d:7c:68:12:3f:cf:c7:e1:7f:f6:7f:a9:5a:43:
45:cc:03:13:c6:76:1f:be:10:d5:65:ca:df:cd:13:
f4:41:5c:d2:f3:ff:53:ab:62:f8:d2:00:a9:7c:07:
ce:67:a8:ad:d6:c8:51:0d:17:6c:e4:86:41:c6:7d:
32:4d:2d:e3:c6:e7:26:d2:f6:93:34:5f:15:78:41:
84:9f:64:23:8b:b6:23:dc:2b:76:94:12:2d:ba:53:
19:90:86:38:c6:76:bc:70:00:3e:b3:20:70:24:c3:
f9:96:91:78:2c:ed:97:d6:59:49:75:ec:f2:69:ac:
7c:0e:1c:f5:39:73:5a:e6:a1:7a:36:30:51:7c:7f:
40:ce:4c:34:de:46:d0:a2:b6:54:c7:cf:e0:15:15:
3c:3d:38:11:7d:11:ad:32:40:ab:c4:91:20:4b:80:
77:6a:10:61:4f:1f:a3:ed:af:20:da:e3:03:14:5a:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:4F:76:1F:BF:84:CA:DA:EE:92:7B:3E:AF:08:38:0D:D3:D5:F5
X509v3 Authority Key Identifier:
keyid:4F:E6:39:CA:6D:FB:59:2E:DD:3B:D1:60:AA:C6:8F:3A:56:8A:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-Y5ym37WS7dO9FgqsaPOlaKgNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/7rpPdh-_hMra7pJ7Pq8IOA3T1fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4bcfa0-335f-423f-a04b-e1ecd9055595/1/T-Y5ym37WS7dO9FgqsaPOlaKgNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.215.0/24
Signature Algorithm: sha256WithRSAEncryption
62:81:90:7a:48:fa:7d:55:c3:12:e2:9a:59:59:4d:d9:ad:6e:
8c:27:af:10:64:3f:e4:b8:ad:41:9f:3c:f2:48:97:de:73:3a:
66:f6:62:93:b4:e8:80:00:03:e8:35:bd:e4:59:66:07:2b:c1:
f0:d2:b9:67:0d:95:4b:90:6a:e8:5a:34:17:8b:fc:6e:c7:23:
37:d0:0d:2d:b8:2e:22:1c:82:d6:7a:23:df:46:66:85:bc:5c:
6c:1e:91:0a:fa:45:4b:05:d4:4a:49:24:1c:af:f3:35:05:46:
34:d4:e8:52:5c:ce:30:c5:79:73:c2:af:3b:a9:01:ed:60:df:
d3:97:a6:88:fe:a0:d7:8b:33:38:5f:b8:99:2c:da:11:1e:5a:
be:57:2d:d8:c0:49:10:5f:bd:54:45:83:08:63:e4:59:99:4f:
47:f0:90:3e:4c:80:33:49:12:4e:8c:4f:36:6b:d4:d1:55:df:
68:fb:26:f2:dc:01:51:72:42:83:84:fc:5b:ad:e9:46:75:69:
0d:f5:13:2a:08:26:02:e2:9d:d9:dd:10:69:91:75:1c:46:49:
bf:9b:f6:d9:4e:af:7e:d0:c2:36:a8:b3:4e:ab:8e:e1:23:a1:
82:33:1a:d8:4f:28:6e:38:e8:94:32:01:50:c3:da:34:8a:e7:
fe:cd:83:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3CRxYqEvYUbeY1PRlbMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZTYzOWNhNmRmYjU5MmVkZDNiZDE2MGFhYzY4ZjNhNTY4
YTgwZDEwHhcNMjQwMTAxMTYyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWJhNGY3NjFmYmY4NGNhZGFlZTkyN2IzZWFmMDgzODBkZDNkNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUhvHepgjpafVszPAaGAdIK1FLdo
tiu6w7/R2kzCq9M9WZfh8TJIUy7NB7WsGKMLR/KIlYQOxvFuiiZc/QwRQGlFgt0g
RFIAf3xkfXxoEj/Px+F/9n+pWkNFzAMTxnYfvhDVZcrfzRP0QVzS8/9Tq2L40gCp
fAfOZ6it1shRDRds5IZBxn0yTS3jxucm0vaTNF8VeEGEn2Qji7Yj3Ct2lBItulMZ
kIY4xna8cAA+syBwJMP5lpF4LO2X1llJdezyaax8Dhz1OXNa5qF6NjBRfH9Azkw0
3kbQorZUx8/gFRU8PTgRfRGtMkCrxJEgS4B3ahBhTx+j7a8g2uMDFFoGJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO66T3Yfv4TK2u6Sez6vCDgN09X1MB8GA1UdIwQY
MBaAFE/mOcpt+1ku3TvRYKrGjzpWioDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC1ZNXltMzdXUzdkTzlGZ3FzYVBPbGFLZ05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80YmNmYTAtMzM1Zi00MjNmLWEwNGIt
ZTFlY2Q5MDU1NTk1LzEvN3JwUGRoLV9oTXJhN3BKN1BxOElPQTNUMWZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80YmNmYTAtMzM1Zi00MjNmLWEwNGItZTFlY2Q5MDU1NTk1
LzEvVC1ZNXltMzdXUzdkTzlGZ3FzYVBPbGFLZ05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrXMA0G
CSqGSIb3DQEBCwUAA4IBAQBigZB6SPp9VcMS4ppZWU3ZrW6MJ68QZD/kuK1Bnzzy
SJfeczpm9mKTtOiAAAPoNb3kWWYHK8Hw0rlnDZVLkGroWjQXi/xuxyM30A0tuC4i
HILWeiPfRmaFvFxsHpEK+kVLBdRKSSQcr/M1BUY01OhSXM4wxXlzwq87qQHtYN/T
l6aI/qDXizM4X7iZLNoRHlq+Vy3YwEkQX71URYMIY+RZmU9H8JA+TIAzSRJOjE82
a9TRVd9o+yby3AFRckKDhPxbrelGdWkN9RMqCCYC4p3Z3RBpkXUcRkm/m/bZTq9+
0MI2qLNOq47hI6GCMxrYTyhuOOiUMgFQw9o0iuf+zYNT
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:06 2025 by rpki-client