Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5kx0YfEytmE7YQiSauc5Q9BFeV0.roa
File: 5kx0YfEytmE7YQiSauc5Q9BFeV0.roa (raw, json)
Hash identifier: B5/wQasP0UANo+xCNguuOTxyZ3oNdBhNgLHU9+zuExo=
Subject key identifier: E6:4C:74:61:F1:32:B6:61:3B:61:08:92:6A:E7:39:43:D0:45:79:5D
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 093908E4
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5kx0YfEytmE7YQiSauc5Q9BFeV0.roa
Signing time: Sat 01 Jan 2022 12:58:52 +0000
ROA not before: Sat 01 Jan 2022 12:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43478
IP address blocks: 2a02:2698:5000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154732772 (0x93908e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e64c7461f132b6613b6108926ae73943d045795d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:f3:bc:14:87:36:3e:9f:39:bd:80:7f:9d:
89:30:82:56:4e:e8:ec:98:67:a1:1e:2c:3d:e9:e3:
f2:af:92:16:5d:0a:b8:1c:b7:cb:90:2f:b9:b0:08:
00:75:47:34:b5:22:7e:cb:9c:29:32:df:25:dc:31:
db:63:0c:79:81:15:e4:43:e6:5f:04:41:06:bc:4e:
ae:9d:69:b2:a8:e8:d1:b3:62:b5:93:98:b9:48:d3:
bd:3e:2e:8f:98:1e:93:b0:8e:7e:c0:9c:32:55:67:
2b:2c:36:87:72:11:31:b6:76:8d:60:c5:19:f0:2d:
7d:af:2b:fe:c7:08:74:33:6b:ac:dc:86:a5:20:fb:
44:22:f0:1b:02:40:ef:4b:f7:0b:6b:b5:2c:7e:3d:
40:c2:06:a6:56:8f:c8:3b:5a:01:9f:3f:9a:0d:5e:
b7:ac:94:47:84:52:a9:ab:89:43:63:d8:81:bc:29:
45:2d:15:30:63:90:33:16:30:c1:7a:42:29:39:15:
7e:22:3f:b6:af:ab:8c:f8:23:5a:21:ac:31:14:da:
39:9e:44:60:5b:44:c2:a3:87:e3:1a:d2:96:ec:86:
7d:1f:19:79:83:5a:f3:da:8f:0a:fe:ff:24:e4:56:
c2:c2:f5:d5:3b:65:ad:1a:22:0c:c3:ae:d4:7d:50:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4C:74:61:F1:32:B6:61:3B:61:08:92:6A:E7:39:43:D0:45:79:5D
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/5kx0YfEytmE7YQiSauc5Q9BFeV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:5000::/38
Signature Algorithm: sha256WithRSAEncryption
2b:75:bd:d3:b7:65:17:54:b1:36:c1:de:9d:d6:6b:27:fd:35:
46:16:b7:38:67:82:72:e6:09:60:1e:44:fc:79:e8:1d:3d:3a:
4a:fa:17:64:76:22:45:0c:a0:83:11:0f:94:ad:f1:76:0f:fd:
3a:ac:85:f6:f4:97:c0:11:d1:33:dc:8d:45:77:a7:cc:a8:cd:
e7:a3:26:94:4c:eb:db:57:db:3e:b9:5b:ac:d3:64:bb:cc:45:
5e:a1:9f:25:49:96:fe:ac:1b:e6:56:d8:77:c3:88:13:ed:61:
50:6c:99:77:67:98:c6:ab:d9:36:e4:da:ab:5f:4b:2a:5a:e2:
c1:b3:d7:47:ff:ac:fe:75:8e:c2:37:95:85:dc:fc:07:41:1e:
08:1f:28:c2:71:1d:65:47:2c:ca:93:be:dd:08:84:c4:76:5e:
ac:e2:03:dd:fe:d5:fd:eb:89:75:53:9b:a5:c1:0e:f5:fb:c9:
b2:8c:e5:2e:81:b9:03:f2:68:b9:3f:ca:8c:74:57:90:6b:dc:
17:4c:2c:44:68:fe:d2:0a:0d:25:b5:52:0e:d1:4f:08:dc:31:
65:c6:73:fc:01:01:42:53:e5:32:54:32:e3:9f:f8:b1:36:90:
2f:f6:26:04:b5:38:d6:02:87:3d:d2:1e:2a:91:cd:9a:31:86:
71:46:4a:b0
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECTkI5DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ODAyYjk1Y2U2MjM5ZDUyNmMzNWFlN2E4ZTJjZWI0OGFlYjgyYjVmMB4XDTIyMDEw
MTEyNTg1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTY0Yzc0NjFmMTMy
YjY2MTNiNjEwODkyNmFlNzM5NDNkMDQ1Nzk1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTu87wUhzY+nzm9gH+diTCCVk7o7JhnoR4sPenj8q+SFl0K
uBy3y5AvubAIAHVHNLUifsucKTLfJdwx22MMeYEV5EPmXwRBBrxOrp1psqjo0bNi
tZOYuUjTvT4uj5gek7COfsCcMlVnKyw2h3IRMbZ2jWDFGfAtfa8r/scIdDNrrNyG
pSD7RCLwGwJA70v3C2u1LH49QMIGplaPyDtaAZ8/mg1et6yUR4RSqauJQ2PYgbwp
RS0VMGOQMxYwwXpCKTkVfiI/tq+rjPgjWiGsMRTaOZ5EYFtEwqOH4xrSluyGfR8Z
eYNa89qPCv7/JORWwsL11TtlrRoiDMOu1H1QcI0CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTmTHRh8TK2YTthCJJq5zlD0EV5XTAfBgNVHSMEGDAWgBQIArlc5iOdUmw1
rnqOLOtIrrgrXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NBSzVYT1lqblZKc05hNTZqaXpyU0s2NEsxOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvMTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8x
LzVreDBZZkV5dG1FN1lRaVNhdWM1UTlCRmVWMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
MTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8xL0NBSzVYT1lqblZK
c05hNTZqaXpyU0s2NEsxOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioCJphQMA0GCSqGSIb3DQEBCwUA
A4IBAQArdb3Tt2UXVLE2wd6d1msn/TVGFrc4Z4Jy5glgHkT8eegdPTpK+hdkdiJF
DKCDEQ+UrfF2D/06rIX29JfAEdEz3I1Fd6fMqM3noyaUTOvbV9s+uVus02S7zEVe
oZ8lSZb+rBvmVth3w4gT7WFQbJl3Z5jGq9k25NqrX0sqWuLBs9dH/6z+dY7CN5WF
3PwHQR4IHyjCcR1lRyzKk77dCITEdl6s4gPd/tX964l1U5ulwQ71+8myjOUugbkD
8mi5P8qMdFeQa9wXTCxEaP7SCg0ltVIO0U8I3DFlxnP8AQFCU+UyVDLjn/ixNpAv
9iYEtTjWAoc90h4qkc2aMYZxRkqw
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:21 2025 by rpki-client