Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/5pnBu3tf1gh9PcNOyoNyWCndFPU.roa
File: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (raw, json)
Hash identifier: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=
Subject key identifier: E6:99:C1:BB:7B:5F:D6:08:7D:3D:C3:4E:CA:83:72:58:29:DD:14:F5
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 0194228E15F84A2BC3D9C1F0F9B2F2BA9B53
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/5pnBu3tf1gh9PcNOyoNyWCndFPU.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15742
IP address blocks: 87.238.152.0/24 maxlen: 24
87.238.153.0/24 maxlen: 24
87.238.154.0/24 maxlen: 24
87.238.155.0/24 maxlen: 24
87.238.156.0/24 maxlen: 24
87.238.157.0/24 maxlen: 24
87.238.158.0/24 maxlen: 24
87.238.159.0/24 maxlen: 24
217.117.64.0/24 maxlen: 24
217.117.65.0/24 maxlen: 24
217.117.66.0/24 maxlen: 24
217.117.67.0/24 maxlen: 24
217.117.68.0/24 maxlen: 24
217.117.69.0/24 maxlen: 24
217.117.70.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
217.117.72.0/24 maxlen: 24
217.117.73.0/24 maxlen: 24
217.117.74.0/24 maxlen: 24
217.117.75.0/24 maxlen: 24
217.117.76.0/24 maxlen: 24
217.117.77.0/24 maxlen: 24
217.117.78.0/24 maxlen: 24
217.117.79.0/24 maxlen: 24
2a03:9220::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:15:f8:4a:2b:c3:d9:c1:f0:f9:b2:f2:ba:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e699c1bb7b5fd6087d3dc34eca83725829dd14f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:dc:d3:63:5b:d2:1f:64:23:7b:34:6e:86:
fc:c0:33:99:cf:20:fa:2f:b8:11:c9:fb:99:41:be:
b0:49:52:d8:90:93:5a:dc:d2:29:68:f3:bc:0f:15:
67:4d:74:79:1a:54:ce:b4:96:c1:fb:ce:39:29:06:
da:d7:5e:42:30:23:69:09:e2:0b:db:e8:b6:08:92:
9f:77:19:26:c8:3c:a4:05:c5:4b:5f:07:1c:e7:5e:
b7:d0:ed:4e:bd:2f:54:47:1b:7d:dc:30:ac:64:9f:
b5:dd:2d:fc:ab:b0:11:42:02:26:63:44:a9:63:24:
3e:99:dd:dc:81:63:16:e2:15:63:d6:dc:77:b0:5c:
aa:45:18:e4:b4:e5:83:62:e2:6e:2b:71:b9:6f:66:
cc:28:0e:2c:5c:e1:0b:bd:a6:e8:2c:46:e9:b2:8d:
25:5b:8a:68:fa:e2:ca:37:38:e4:73:40:63:75:d2:
35:55:52:f6:28:df:28:36:34:b5:06:74:22:2c:46:
45:5b:cc:8f:f8:8c:c4:e9:2d:6a:f0:64:4a:63:fa:
d8:53:12:20:58:c6:50:fd:f3:7f:56:a7:e8:31:65:
f0:5e:a9:15:2f:51:46:a7:fd:fc:66:86:93:33:3e:
a2:76:8c:77:99:a3:70:a2:27:dd:04:dd:24:97:70:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:C1:BB:7B:5F:D6:08:7D:3D:C3:4E:CA:83:72:58:29:DD:14:F5
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/5pnBu3tf1gh9PcNOyoNyWCndFPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.152.0/21
217.117.64.0/20
IPv6:
2a03:9220::/32
Signature Algorithm: sha256WithRSAEncryption
b0:28:a5:bd:af:4b:59:72:0a:5c:6e:23:4c:4b:28:f9:be:89:
47:98:2c:b6:84:63:cf:5d:37:8e:80:85:85:ab:60:c5:3e:7d:
05:c0:dd:a5:69:9f:d5:9e:0a:df:7d:be:af:ac:71:f8:43:09:
f6:a7:46:ab:b7:70:dc:5c:72:59:ac:28:d8:dd:e4:d2:c3:62:
12:84:fa:7e:bd:a3:6e:e6:25:71:fb:2f:b4:e5:f0:4e:24:23:
21:6d:9a:b9:81:3f:29:7f:03:25:79:aa:79:1f:ad:a3:1e:15:
4a:39:c9:28:28:db:d0:8e:a6:f1:a4:6b:8a:45:55:ea:26:4f:
e5:d1:58:c7:d8:35:c2:14:92:28:af:b7:f9:80:5e:8d:40:1e:
be:fa:8a:18:a8:76:6f:37:82:6b:55:1d:9d:3b:d8:44:75:5e:
85:03:57:c4:d4:8e:73:bd:4f:d4:0c:56:d6:31:04:ef:23:a0:
17:2d:18:95:2e:0d:eb:b9:35:f2:7c:53:00:83:85:07:f9:21:
83:64:9b:88:21:bb:01:ed:a7:34:74:2f:ef:8e:73:a1:ce:2c:
d2:d4:47:bd:9e:82:83:f5:86:2b:35:5c:23:06:64:ad:76:27:
93:bd:7c:99:c6:58:fd:4a:ae:22:01:0e:3f:2f:5e:ab:38:bf:
b4:3a:49:42
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQijhX4SivD2cHw+bLyuptTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjUwMTAxMTU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjk5YzFiYjdiNWZkNjA4N2QzZGMzNGVjYTgzNzI1ODI5ZGQxNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5/c02Nb0h9kI3s0bob8wDOZzyD6
L7gRyfuZQb6wSVLYkJNa3NIpaPO8DxVnTXR5GlTOtJbB+845KQba115CMCNpCeIL
2+i2CJKfdxkmyDykBcVLXwcc51630O1OvS9URxt93DCsZJ+13S38q7ARQgImY0Sp
YyQ+md3cgWMW4hVj1tx3sFyqRRjktOWDYuJuK3G5b2bMKA4sXOELvaboLEbpso0l
W4po+uLKNzjkc0BjddI1VVL2KN8oNjS1BnQiLEZFW8yP+IzE6S1q8GRKY/rYUxIg
WMZQ/fN/VqfoMWXwXqkVL1FGp/38ZoaTMz6idox3maNwoifdBN0kl3DEkQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOaZwbt7X9YIfT3DTsqDclgp3RT1MB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvNXBuQnUzdGYxZ2g5UGNOT3lvTnlXQ25kRlBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDV+6YAwQE
2XVAMA0EAgACMAcDBQAqA5IgMA0GCSqGSIb3DQEBCwUAA4IBAQCwKKW9r0tZcgpc
biNMSyj5volHmCy2hGPPXTeOgIWFq2DFPn0FwN2laZ/Vngrffb6vrHH4Qwn2p0ar
t3DcXHJZrCjY3eTSw2IShPp+vaNu5iVx+y+05fBOJCMhbZq5gT8pfwMleap5H62j
HhVKOckoKNvQjqbxpGuKRVXqJk/l0VjH2DXCFJIor7f5gF6NQB6++ooYqHZvN4Jr
VR2dO9hEdV6FA1fE1I5zvU/UDFbWMQTvI6AXLRiVLg3ruTXyfFMAg4UH+SGDZJuI
IbsB7ac0dC/vjnOhzizS1Ee9noKD9YYrNVwjBmStdieTvXyZxlj9Sq4iAQ4/L16r
OL+0OklC
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:39 2025 by rpki-client