Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/pkK4t5AuGZerSOdjqBIoxGTKCfY.roa
File: pkK4t5AuGZerSOdjqBIoxGTKCfY.roa (raw, json)
Hash identifier: yQAeeToWbHaW6hapVPW76dSK2RblbCKUqGVB/4q2GiE=
Subject key identifier: A6:42:B8:B7:90:2E:19:97:AB:48:E7:63:A8:12:28:C4:64:CA:09:F6
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 018756B2A9FE6DBE95CB3697C7CA90B28517
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/pkK4t5AuGZerSOdjqBIoxGTKCfY.roa
Signing time: Thu 06 Apr 2023 13:12:42 +0000
ROA not before: Thu 06 Apr 2023 13:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50391
IP address blocks: 213.5.132.0/24 maxlen: 24
2a11:29c0::/44 maxlen: 48
2a11:29c0:3e0::/44 maxlen: 48
2a11:29c0:10::/48 maxlen: 48
2a11:29c0:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:b2:a9:fe:6d:be:95:cb:36:97:c7:ca:90:b2:85:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Apr 6 13:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a642b8b7902e1997ab48e763a81228c464ca09f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:95:1f:ac:18:48:ea:bd:78:f4:a6:a5:aa:
be:3b:4c:16:34:a4:58:5a:04:36:b7:c5:bf:64:25:
f6:c1:45:cb:53:66:2e:03:52:9c:c1:18:99:e1:d5:
69:be:68:d7:24:fd:21:ed:72:22:4a:bf:19:db:86:
af:ed:97:17:1b:9a:d2:ff:fa:f4:3a:67:c2:8b:3a:
66:64:f5:7c:ab:ea:f9:af:14:d4:39:ad:13:3a:42:
3d:68:34:e3:78:6d:27:54:34:9f:47:a3:ca:01:42:
2b:2d:bc:92:2f:39:03:b7:46:75:20:f4:72:1c:63:
68:a9:27:c9:e7:0d:1c:82:88:9f:1f:97:0d:b2:18:
e6:6d:b1:f9:75:89:8f:5c:79:f2:3e:49:9e:4b:c5:
ff:8d:a5:b6:e2:58:ce:f5:1c:2f:ad:ca:bd:90:98:
49:e6:3d:16:2e:3f:72:fb:ed:41:14:16:bb:ea:a3:
7a:71:13:14:89:8b:a0:11:cc:a0:f2:af:44:af:9e:
d1:ec:5f:5d:63:40:e9:7d:03:2c:e2:5a:be:db:a3:
da:02:80:f8:3e:fb:f6:7b:14:5e:4c:a8:31:e7:02:
57:0b:28:f7:87:51:32:e7:d2:1a:0b:54:9b:73:6a:
4d:e8:37:ab:4b:e5:5f:da:64:00:ab:52:8c:01:bd:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:B8:B7:90:2E:19:97:AB:48:E7:63:A8:12:28:C4:64:CA:09:F6
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/pkK4t5AuGZerSOdjqBIoxGTKCfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.132.0/24
IPv6:
2a11:29c0::-2a11:29c0:11:ffff:ffff:ffff:ffff:ffff
2a11:29c0:3e0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:f0:6e:c6:95:0e:62:26:ac:cc:70:cb:15:33:fa:5a:98:ec:
78:a4:c4:16:01:7e:15:ab:cf:86:ca:fe:c7:cb:ae:26:77:c2:
f2:5e:f1:2a:ce:59:93:65:84:3b:59:47:33:06:c4:d5:cf:e6:
32:00:56:27:fa:12:cc:a2:a5:fa:da:00:17:cf:02:e7:12:13:
8a:a6:51:1f:33:0c:f8:44:01:d5:0f:e0:03:c2:ff:95:94:24:
00:06:89:dc:ab:f6:69:48:42:85:e2:bd:3e:65:1b:bc:58:1e:
08:58:ae:d6:a1:f8:e7:4d:72:e9:f7:39:27:e0:bb:c9:6a:f0:
b4:6b:cb:f5:10:b0:67:8d:8b:05:de:79:cc:f6:b5:e0:48:83:
77:84:62:c2:94:24:33:20:c2:89:c6:d3:97:3e:14:97:f7:5e:
1a:8e:36:38:d7:40:56:7f:09:cc:f5:dc:0a:b6:cf:52:a1:58:
e7:e6:5e:7e:76:c5:06:b5:70:a5:6c:a4:50:5b:3b:d9:1f:bc:
e6:f1:e6:88:e8:d0:33:ae:e7:61:1a:e4:21:e0:44:51:55:de:
49:45:ae:1a:d6:f9:d4:2d:f1:b7:d1:f3:94:6f:7e:48:ee:08:
11:2e:4c:f3:4b:7d:79:fd:8a:78:02:c9:15:85:c9:27:9f:bf:
8f:ae:8c:f8
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYdWsqn+bb6VyzaXx8qQsoUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY4NDEzNjEyNGE1Y2FjYmU3YmY3ZDlmNjlmYTQyMWVj
Y2ZkMzcwHhcNMjMwNDA2MTMxMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQyYjhiNzkwMmUxOTk3YWI0OGU3NjNhODEyMjhjNDY0Y2EwOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuiVH6wYSOq9ePSmpaq+O0wWNKRY
WgQ2t8W/ZCX2wUXLU2YuA1KcwRiZ4dVpvmjXJP0h7XIiSr8Z24av7ZcXG5rS//r0
OmfCizpmZPV8q+r5rxTUOa0TOkI9aDTjeG0nVDSfR6PKAUIrLbySLzkDt0Z1IPRy
HGNoqSfJ5w0cgoifH5cNshjmbbH5dYmPXHnyPkmeS8X/jaW24ljO9Rwvrcq9kJhJ
5j0WLj9y++1BFBa76qN6cRMUiYugEcyg8q9Er57R7F9dY0DpfQMs4lq+26PaAoD4
Pvv2exReTKgx5wJXCyj3h1Ey59IaC1Sbc2pN6DerS+Vf2mQAq1KMAb0euQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFKZCuLeQLhmXq0jnY6gSKMRkygn2MB8GA1UdIwQY
MBaAFHgWhBNhJKXKy+e/fZ9p+kIezP03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAt
NDJjMGI3NTYxZDI5LzEvcGtLNHQ1QXVHWmVyU09kanFCSW94R1RLQ2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAtNDJjMGI3NTYxZDI5
LzEvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQA1QWEMCEE
AgACMBswEAMFBioRKcADBwEqESnAABADBwQqESnAA+AwDQYJKoZIhvcNAQELBQAD
ggEBAF3wbsaVDmImrMxwyxUz+lqY7HikxBYBfhWrz4bK/sfLriZ3wvJe8SrOWZNl
hDtZRzMGxNXP5jIAVif6EsyipfraABfPAucSE4qmUR8zDPhEAdUP4APC/5WUJAAG
idyr9mlIQoXivT5lG7xYHghYrtah+OdNcun3OSfgu8lq8LRry/UQsGeNiwXeecz2
teBIg3eEYsKUJDMgwonG05c+FJf3XhqONjjXQFZ/Ccz13Aq2z1KhWOfmXn52xQa1
cKVspFBbO9kfvObx5ojo0DOu52Ea5CHgRFFV3klFrhrW+dQt8bfR85RvfkjuCBEu
TPNLfXn9ingCyRWFySefv4+ujPg=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:53 2025 by rpki-client