Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/S_YYho5G5VrTs-GmqIODs67-Kw0.roa
File: S_YYho5G5VrTs-GmqIODs67-Kw0.roa (raw, json)
Hash identifier: hcLtZn4i4WuW3UxaDgam+wJpz0R1AhQ6KVAzjj/OqJY=
Subject key identifier: 4B:F6:18:86:8E:46:E5:5A:D3:B3:E1:A6:A8:83:83:B3:AE:FE:2B:0D
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 01856D53D47F4A36E695471F0858DED0BC48
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/S_YYho5G5VrTs-GmqIODs67-Kw0.roa
Signing time: Sun 01 Jan 2023 12:34:48 +0000
ROA not before: Sun 01 Jan 2023 12:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50391
IP address blocks: 213.5.132.0/24 maxlen: 24
2a11:29c0::/44 maxlen: 48
2a11:29c0:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d4:7f:4a:36:e6:95:47:1f:08:58:de:d0:bc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jan 1 12:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf618868e46e55ad3b3e1a6a88383b3aefe2b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:28:96:6f:d8:1e:83:75:d7:12:cc:db:9e:
07:c4:3f:f5:0c:51:06:06:fa:05:ce:32:b2:3f:90:
4c:10:ca:9a:ed:f1:24:3a:5d:ad:94:27:ca:31:1b:
e7:71:b7:2c:0d:cc:9c:45:e1:77:27:57:f2:51:15:
ff:c1:20:67:0c:af:9a:f8:96:02:f5:38:3e:38:f3:
03:ac:28:2d:a4:ab:b1:01:0a:58:32:5f:81:c1:2f:
f7:b6:46:e3:3c:d8:f4:00:08:53:b4:cb:01:4a:61:
12:57:8c:cd:9b:eb:b2:de:d0:fc:b4:38:68:b4:1c:
5a:0f:63:66:02:42:40:af:b5:05:8a:ee:18:a5:6d:
3c:0f:b7:a1:e2:35:a0:94:9c:ca:9e:a5:5b:4e:e9:
48:d8:22:55:51:9e:b6:29:f7:1c:e6:8a:ee:38:b2:
f1:98:8e:0f:b6:e0:a9:b2:b7:be:90:b3:24:35:3e:
a0:12:b1:48:0a:cb:e2:86:03:d8:6f:3d:15:b8:17:
1e:72:2b:1f:bf:96:a1:6f:8a:35:08:8c:54:bc:37:
1d:bf:bb:21:ca:5b:90:ff:46:07:2b:09:04:16:4a:
88:6b:72:55:dd:14:af:61:e7:b2:40:2a:12:b2:a6:
e1:89:fc:f8:3b:01:d1:62:c0:6b:97:a7:22:6a:96:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F6:18:86:8E:46:E5:5A:D3:B3:E1:A6:A8:83:83:B3:AE:FE:2B:0D
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/S_YYho5G5VrTs-GmqIODs67-Kw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.132.0/24
IPv6:
2a11:29c0::/44
2a11:29c0:11::/48
Signature Algorithm: sha256WithRSAEncryption
8b:95:f1:ba:61:05:a7:21:dd:2e:13:6f:5b:dd:28:43:14:eb:
22:8b:ac:5e:b6:48:41:8f:a1:45:f5:70:ae:50:2d:87:41:0b:
10:c7:78:c2:f1:be:88:a7:28:02:1b:3e:a6:0d:f3:9b:12:ec:
be:ab:23:a2:16:64:58:cc:1f:e9:76:80:1b:28:27:de:2c:d0:
d9:4f:c9:b2:d3:79:f5:46:ec:67:41:86:85:78:47:94:d5:62:
0a:e4:6d:ff:0f:78:87:94:03:5f:04:e9:e8:33:83:b6:96:2f:
fe:de:69:e3:40:8d:11:8b:e1:cd:3b:44:4a:5f:95:ad:1a:0b:
7e:85:bf:5c:55:9d:f6:3d:e5:b6:35:3c:62:67:a8:09:8e:8c:
dd:74:e7:d5:dd:e1:79:75:33:12:ff:22:55:f0:9f:94:d1:90:
fa:86:10:ea:0f:9f:b7:4d:55:10:da:fe:72:41:1e:43:54:2f:
d0:c5:3e:79:2d:e6:12:e2:0f:58:e2:2b:fa:d9:6d:a3:59:a8:
71:92:ca:ac:49:46:67:ae:45:ab:34:96:a1:7e:55:18:01:d6:
e0:0f:e1:a2:37:0c:4c:17:aa:fe:04:3d:b0:57:37:10:84:be:
b5:5f:19:e9:22:8e:ba:1f:eb:9d:c0:c0:8f:f4:dc:29:0d:bc:
eb:b0:7d:80
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVtU9R/SjbmlUcfCFje0LxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY4NDEzNjEyNGE1Y2FjYmU3YmY3ZDlmNjlmYTQyMWVj
Y2ZkMzcwHhcNMjMwMTAxMTIzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY2MTg4NjhlNDZlNTVhZDNiM2UxYTZhODgzODNiM2FlZmUyYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Yolm/YHoN11xLM254HxD/1DFEG
BvoFzjKyP5BMEMqa7fEkOl2tlCfKMRvncbcsDcycReF3J1fyURX/wSBnDK+a+JYC
9Tg+OPMDrCgtpKuxAQpYMl+BwS/3tkbjPNj0AAhTtMsBSmESV4zNm+uy3tD8tDho
tBxaD2NmAkJAr7UFiu4YpW08D7eh4jWglJzKnqVbTulI2CJVUZ62Kfcc5oruOLLx
mI4PtuCpsre+kLMkNT6gErFICsvihgPYbz0VuBcecisfv5ahb4o1CIxUvDcdv7sh
yluQ/0YHKwkEFkqIa3JV3RSvYeeyQCoSsqbhifz4OwHRYsBrl6ciapa3uwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFEv2GIaORuVa07PhpqiDg7Ou/isNMB8GA1UdIwQY
MBaAFHgWhBNhJKXKy+e/fZ9p+kIezP03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAt
NDJjMGI3NTYxZDI5LzEvU19ZWWhvNUc1VnJUcy1HbXFJT0RzNjctS3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAtNDJjMGI3NTYxZDI5
LzEvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA1QWEMBgE
AgACMBIDBwQqESnAAAADBwAqESnAABEwDQYJKoZIhvcNAQELBQADggEBAIuV8bph
Bach3S4Tb1vdKEMU6yKLrF62SEGPoUX1cK5QLYdBCxDHeMLxvoinKAIbPqYN85sS
7L6rI6IWZFjMH+l2gBsoJ94s0NlPybLTefVG7GdBhoV4R5TVYgrkbf8PeIeUA18E
6egzg7aWL/7eaeNAjRGL4c07REpfla0aC36Fv1xVnfY95bY1PGJnqAmOjN1059Xd
4Xl1MxL/IlXwn5TRkPqGEOoPn7dNVRDa/nJBHkNUL9DFPnkt5hLiD1jiK/rZbaNZ
qHGSyqxJRmeuRas0lqF+VRgB1uAP4aI3DEwXqv4EPbBXNxCEvrVfGekijrof653A
wI/03CkNvOuwfYA=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:50:45 2025 by rpki-client