Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/71oPwBbRQDjELcw2WA5i8Jy-8gw.roa
File: 71oPwBbRQDjELcw2WA5i8Jy-8gw.roa (raw, json)
Hash identifier: V8CKKoN3fzrtXfAFLZAGPbxaqegXHaPEJdv3Y+bWIB4=
Subject key identifier: EF:5A:0F:C0:16:D1:40:38:C4:2D:CC:36:58:0E:62:F0:9C:BE:F2:0C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019469720140BB5CD36AD94E12962A6A9C31
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/71oPwBbRQDjELcw2WA5i8Jy-8gw.roa
Signing time: Wed 15 Jan 2025 10:11:06 +0000
ROA not before: Wed 15 Jan 2025 10:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:72:01:40:bb:5c:d3:6a:d9:4e:12:96:2a:6a:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 15 10:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef5a0fc016d14038c42dcc36580e62f09cbef20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:49:d3:6d:40:84:a2:93:41:7f:4a:47:d2:
5b:fa:f5:1f:75:0d:94:01:de:55:f8:1a:59:7f:12:
07:63:e4:5b:18:74:8a:f9:d2:35:29:37:fc:23:30:
51:a0:1d:72:be:eb:84:e8:c5:9f:69:20:84:b9:f1:
8c:16:6c:e4:47:57:fb:fa:2f:12:1b:e9:f8:d4:b5:
64:91:5d:74:94:5f:f4:33:44:d5:06:9b:c0:1f:5b:
0e:dd:51:62:45:f1:d6:e9:c4:d5:b9:20:01:52:98:
2b:60:37:4c:7e:72:3e:b7:ab:4f:2e:c9:64:c4:9b:
fb:d9:b8:1a:08:db:3f:b1:e3:9e:32:42:58:41:4c:
1f:27:58:88:79:01:78:53:ef:5f:10:f9:bb:75:82:
0b:5e:fd:05:f6:23:f6:bd:5d:89:2f:b0:27:8a:d1:
dc:8a:b1:77:6c:b5:f7:93:7b:3c:21:cd:38:f0:d4:
ac:b4:40:29:f9:ac:06:c5:2b:cc:07:9c:50:22:22:
04:57:fc:4f:21:06:74:2e:a6:d7:5f:55:13:23:dc:
66:de:b7:ce:5c:a4:83:08:e9:44:4d:18:dc:99:38:
3a:00:db:54:fc:d0:ac:10:51:ca:64:0d:fe:9d:22:
be:5a:c0:21:9e:ed:05:e2:79:8b:d2:7a:3e:41:51:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:0F:C0:16:D1:40:38:C4:2D:CC:36:58:0E:62:F0:9C:BE:F2:0C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/71oPwBbRQDjELcw2WA5i8Jy-8gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
05:de:9f:83:bf:64:95:45:0a:2f:70:b3:8e:37:7d:f9:25:52:
ad:c8:d8:3a:10:52:5a:19:e4:69:96:21:ac:06:4a:93:eb:62:
00:ab:a9:29:9e:23:54:a1:13:54:0b:93:bc:e7:1e:52:12:5d:
8e:7f:9b:c8:38:9f:c5:d6:09:0d:85:d9:ec:2c:44:e5:2c:73:
64:41:83:eb:f3:70:c9:ad:21:e1:67:e4:0d:79:19:75:21:ec:
03:a9:d3:fc:8e:3f:ff:e9:cb:3a:0d:20:5c:3b:e4:c7:14:8d:
95:57:1d:de:58:7c:db:01:07:6f:90:37:ab:5c:f4:24:77:d8:
cb:fd:5f:fd:a5:d7:1e:88:63:a9:32:00:c2:71:93:dc:cc:fb:
65:5e:79:53:f3:a4:a0:e5:f8:c0:5d:0a:12:e3:44:9b:de:be:
f4:44:63:ec:a3:c8:d2:c6:dc:8d:da:af:f8:45:7a:c7:87:29:
18:95:4c:1c:c9:cb:67:31:26:4e:4a:df:e0:4a:de:96:5e:c4:
83:e1:5a:09:41:68:a8:d8:70:91:8e:83:92:fc:e6:35:0a:20:
55:aa:86:93:67:c4:f8:70:8f:bf:e8:81:e3:a5:0c:2d:7e:a7:
2e:c6:bf:bd:36:57:45:7e:ac:24:1a:f4:13:13:53:54:28:6d:
51:11:d1:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRpcgFAu1zTatlOEpYqapwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjUwMTE1MTAxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjVhMGZjMDE2ZDE0MDM4YzQyZGNjMzY1ODBlNjJmMDljYmVmMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWJJ021AhKKTQX9KR9Jb+vUfdQ2U
Ad5V+BpZfxIHY+RbGHSK+dI1KTf8IzBRoB1yvuuE6MWfaSCEufGMFmzkR1f7+i8S
G+n41LVkkV10lF/0M0TVBpvAH1sO3VFiRfHW6cTVuSABUpgrYDdMfnI+t6tPLslk
xJv72bgaCNs/seOeMkJYQUwfJ1iIeQF4U+9fEPm7dYILXv0F9iP2vV2JL7AnitHc
irF3bLX3k3s8Ic048NSstEAp+awGxSvMB5xQIiIEV/xPIQZ0LqbXX1UTI9xm3rfO
XKSDCOlETRjcmTg6ANtU/NCsEFHKZA3+nSK+WsAhnu0F4nmL0no+QVG8nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9aD8AW0UA4xC3MNlgOYvCcvvIMMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvNzFvUHdCYlJRRGpFTGN3MldBNWk4SnktOGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDYAMA0G
CSqGSIb3DQEBCwUAA4IBAQAF3p+Dv2SVRQovcLOON335JVKtyNg6EFJaGeRpliGs
BkqT62IAq6kpniNUoRNUC5O85x5SEl2Of5vIOJ/F1gkNhdnsLETlLHNkQYPr83DJ
rSHhZ+QNeRl1IewDqdP8jj//6cs6DSBcO+THFI2VVx3eWHzbAQdvkDerXPQkd9jL
/V/9pdceiGOpMgDCcZPczPtlXnlT86Sg5fjAXQoS40Sb3r70RGPso8jSxtyN2q/4
RXrHhykYlUwcyctnMSZOSt/gSt6WXsSD4VoJQWio2HCRjoOS/OY1CiBVqoaTZ8T4
cI+/6IHjpQwtfqcuxr+9NldFfqwkGvQTE1NUKG1REdFw
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:22 2025 by rpki-client