Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/Z7tQiCmevXD05xhhWf2mTkgkUN0.roa
File: Z7tQiCmevXD05xhhWf2mTkgkUN0.roa (raw, json)
Hash identifier: e4eRc/9etXdLQc98J86F+SCZdwTiYGCjapydGCTFyeU=
Subject key identifier: 67:BB:50:88:29:9E:BD:70:F4:E7:18:61:59:FD:A6:4E:48:24:50:DD
Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Certificate serial: 019423D790B2AECAA999588AC056E5BD3EB8
Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/Z7tQiCmevXD05xhhWf2mTkgkUN0.roa
Signing time: Wed 01 Jan 2025 21:48:37 +0000
ROA not before: Wed 01 Jan 2025 21:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202468
IP address blocks: 5.34.192.0/20 maxlen: 24
128.0.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:90:b2:ae:ca:a9:99:58:8a:c0:56:e5:bd:3e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993
Validity
Not Before: Jan 1 21:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67bb5088299ebd70f4e7186159fda64e482450dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:3a:ee:c1:fb:b3:ea:d8:ff:fc:fc:8d:bb:
be:a5:12:62:e5:d4:41:d4:16:1e:20:a2:03:ac:a0:
22:34:50:33:ec:d7:eb:ba:1f:8a:8d:35:cd:8a:19:
1a:d6:3b:7b:c3:5e:07:5a:2a:11:4a:0f:05:75:20:
97:6e:5b:62:9a:d1:75:5e:54:e0:c1:ee:9d:e4:0f:
d1:7e:e1:33:4f:19:69:2b:ad:ab:be:08:7b:12:e1:
f2:53:f2:72:fd:33:ba:e1:d9:c7:d5:f1:65:6c:46:
21:71:05:37:42:f9:d6:91:17:7f:70:ff:82:b9:6f:
3c:51:b7:db:93:01:97:91:cb:b1:a2:fd:00:f7:09:
e5:e5:d5:2a:12:d6:0b:4b:a9:17:ef:0c:b2:66:53:
b2:bd:b9:79:c8:b2:94:81:7a:5b:a1:d1:64:09:af:
89:34:64:3c:1c:4f:9e:74:6d:e8:db:87:f1:d1:d1:
6f:a1:5b:81:18:5b:af:6b:20:ec:25:e8:99:13:38:
a5:3d:bc:e4:14:ab:a0:b0:fa:2e:39:58:24:1e:86:
80:be:24:f5:e9:da:57:79:ab:29:79:ce:6a:d3:3d:
82:ef:f7:ed:f0:0c:be:bf:24:50:dc:56:38:9b:18:
34:a7:83:b3:06:17:b9:e5:d3:88:dc:6e:5a:e5:d3:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:50:88:29:9E:BD:70:F4:E7:18:61:59:FD:A6:4E:48:24:50:DD
X509v3 Authority Key Identifier:
keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/Z7tQiCmevXD05xhhWf2mTkgkUN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.192.0/20
128.0.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:9d:84:02:f7:e4:71:fc:08:3f:7d:50:ba:af:f1:db:d1:
21:f4:14:64:e9:62:23:a3:f8:1e:cb:3d:92:2e:f5:b8:aa:42:
ac:18:6c:e4:fa:4d:9a:e1:f5:c3:d3:c3:87:37:e4:26:49:f2:
80:11:38:53:87:09:d3:99:c3:3e:fa:d5:ec:a8:bf:18:52:20:
17:b3:a3:9d:86:86:ea:a4:cd:e9:dd:15:e0:22:82:38:32:ea:
9f:1d:99:20:31:73:d8:74:f5:8f:25:17:24:23:4e:16:96:62:
62:d5:11:7a:c8:b8:9a:47:7c:f6:20:4c:3e:46:f8:70:e6:ff:
e5:d0:57:9f:af:34:92:26:86:9d:54:f9:c9:6e:8c:a5:86:7d:
31:1f:11:79:88:18:f8:89:fd:91:17:d6:3f:61:91:d7:d7:67:
0c:4a:c8:78:a3:08:83:1e:48:af:b9:fd:91:39:7c:80:ce:98:
44:1e:ab:fa:65:e0:3b:23:39:df:2a:ab:01:a2:0e:c7:17:96:
78:a8:81:81:54:0d:b2:cd:8a:fc:09:46:4d:72:aa:69:3a:98:
ba:13:64:de:2e:a6:34:3e:60:80:a5:17:c1:57:75:ee:0a:cb:
83:89:1c:ca:35:7a:cb:d5:ee:a1:40:31:1d:e9:41:1b:28:99:
47:64:d4:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj15CyrsqpmViKwFblvT64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx
ZWI5OTMwHhcNMjUwMTAxMjE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2JiNTA4ODI5OWViZDcwZjRlNzE4NjE1OWZkYTY0ZTQ4MjQ1MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLU67sH7s+rY//z8jbu+pRJi5dRB
1BYeIKIDrKAiNFAz7Nfruh+KjTXNihka1jt7w14HWioRSg8FdSCXbltimtF1XlTg
we6d5A/RfuEzTxlpK62rvgh7EuHyU/Jy/TO64dnH1fFlbEYhcQU3QvnWkRd/cP+C
uW88UbfbkwGXkcuxov0A9wnl5dUqEtYLS6kX7wyyZlOyvbl5yLKUgXpbodFkCa+J
NGQ8HE+edG3o24fx0dFvoVuBGFuvayDsJeiZEzilPbzkFKugsPouOVgkHoaAviT1
6dpXeaspec5q0z2C7/ft8Ay+vyRQ3FY4mxg0p4OzBhe55dOI3G5a5dO3zwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGe7UIgpnr1w9OcYYVn9pk5IJFDdMB8GA1UdIwQY
MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt
YzVhZDE2YTU1YzVmLzEvWjd0UWlDbWV2WEQwNXhoaFdmMm1Ua2drVU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm
LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEBSLAAwQA
gABpMA0GCSqGSIb3DQEBCwUAA4IBAQBf652EAvfkcfwIP31Quq/x29Eh9BRk6WIj
o/geyz2SLvW4qkKsGGzk+k2a4fXD08OHN+QmSfKAEThThwnTmcM++tXsqL8YUiAX
s6OdhobqpM3p3RXgIoI4MuqfHZkgMXPYdPWPJRckI04WlmJi1RF6yLiaR3z2IEw+
Rvhw5v/l0FefrzSSJoadVPnJboylhn0xHxF5iBj4if2RF9Y/YZHX12cMSsh4owiD
Hkivuf2ROXyAzphEHqv6ZeA7IznfKqsBog7HF5Z4qIGBVA2yzYr8CUZNcqppOpi6
E2TeLqY0PmCApRfBV3XuCsuDiRzKNXrL1e6hQDEd6UEbKJlHZNS2
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:22 2025 by rpki-client