Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/s5aE0ETv791mXV0M3kfz-k5-Ntg.roa
File: s5aE0ETv791mXV0M3kfz-k5-Ntg.roa (raw, json)
Hash identifier: j6zZBBizBdeEMB89WCWUmdd9ivg6aenHvv6I1G1E+oc=
Subject key identifier: B3:96:84:D0:44:EF:EF:DD:66:5D:5D:0C:DE:47:F3:FA:4E:7E:36:D8
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0101ED9C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/s5aE0ETv791mXV0M3kfz-k5-Ntg.roa
Signing time: Sat 01 Jan 2022 00:59:27 +0000
ROA not before: Sat 01 Jan 2022 00:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43927
IP address blocks: 2a0c:b642:1a06::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16903580 (0x101ed9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b39684d044efefdd665d5d0cde47f3fa4e7e36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:1f:fd:c5:b6:00:33:4d:7c:37:29:c2:a7:
7b:ed:66:32:77:c5:eb:f2:49:20:50:2e:69:ff:3c:
91:a2:8a:ff:54:14:b2:d0:76:32:09:33:85:33:34:
46:6a:32:ad:f5:53:1f:a1:46:ac:1a:d7:f5:bb:a8:
be:07:d2:f3:fd:d5:fb:bf:c1:a9:1e:c0:36:ce:e7:
9a:76:c3:e4:03:af:77:e6:73:b1:99:10:92:86:4d:
9a:a4:14:eb:c2:44:72:66:d5:97:62:cc:80:24:ea:
38:c2:73:db:ec:5b:ad:cd:69:2c:d9:9b:2d:2c:ab:
6c:ad:4b:7c:33:dc:7f:e9:be:91:9a:a1:e1:61:94:
b1:0a:99:c0:88:b3:6b:6b:b6:c8:ea:f8:17:1c:83:
cf:4c:d4:89:94:06:27:b8:04:0a:c4:de:37:c0:f3:
bc:e8:cd:51:17:93:b3:27:96:40:80:97:c6:ff:d0:
78:fa:c9:b4:1f:5c:eb:95:ba:fa:7e:a3:9c:7a:73:
37:f7:97:d6:f1:b6:9d:dd:54:5e:1e:78:44:3c:46:
d6:45:4d:c4:a0:6b:0e:75:a9:29:39:39:af:6a:55:
f9:c2:9e:11:f9:48:66:e1:fc:aa:00:c1:f3:78:c7:
22:db:f9:8e:71:9a:2b:d9:76:86:53:23:65:7c:99:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:84:D0:44:EF:EF:DD:66:5D:5D:0C:DE:47:F3:FA:4E:7E:36:D8
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/s5aE0ETv791mXV0M3kfz-k5-Ntg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a06::/48
Signature Algorithm: sha256WithRSAEncryption
87:fb:70:81:c5:6c:5a:f8:44:ac:1a:b8:64:80:a5:9a:5d:88:
7c:79:3c:ea:26:8d:3a:d2:49:5e:fd:29:45:2a:b3:62:00:55:
14:ee:a1:2d:0a:12:7f:f0:1c:3a:21:ca:67:71:d8:e0:75:d7:
a4:ef:3a:1c:8a:e3:39:40:6a:7a:1b:27:cd:dd:2e:53:69:7c:
9e:a4:1a:42:36:99:d9:76:aa:3c:ba:0c:b9:c1:de:a3:a8:96:
42:19:8c:9a:4f:4a:0a:2c:9b:f5:5b:11:42:f5:7d:c6:48:ec:
fa:cb:e2:d6:be:26:75:20:bb:3a:64:d4:6b:30:77:c3:ec:6a:
5c:9d:c7:fe:61:55:fb:6d:de:31:4f:5d:0e:a0:0f:2e:73:d1:
d8:e5:81:9e:b8:8b:76:18:25:91:5d:32:65:fe:3c:53:f1:8f:
38:65:f5:70:87:de:b5:47:2e:ef:45:48:d2:93:04:f8:13:ea:
18:e9:48:58:6b:50:eb:f8:11:75:b0:10:d3:9e:90:30:19:65:
17:0a:9b:61:ed:a1:f8:2f:f9:43:ba:98:7e:ac:ba:89:7a:02:
c1:6a:54:84:13:e0:8a:ed:03:be:ed:8e:ff:ef:b5:37:90:15:
da:ed:5d:e5:5f:e7:70:47:2e:84:c6:d1:c7:9f:35:64:1a:5a:
02:4d:5f:58
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAQHtnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDEw
MTAwNTkyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjM5Njg0ZDA0NGVm
ZWZkZDY2NWQ1ZDBjZGU0N2YzZmE0ZTdlMzZkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK04H/3FtgAzTXw3KcKne+1mMnfF6/JJIFAuaf88kaKK/1QU
stB2MgkzhTM0RmoyrfVTH6FGrBrX9buovgfS8/3V+7/BqR7ANs7nmnbD5AOvd+Zz
sZkQkoZNmqQU68JEcmbVl2LMgCTqOMJz2+xbrc1pLNmbLSyrbK1LfDPcf+m+kZqh
4WGUsQqZwIiza2u2yOr4FxyDz0zUiZQGJ7gECsTeN8DzvOjNUReTsyeWQICXxv/Q
ePrJtB9c65W6+n6jnHpzN/eX1vG2nd1UXh54RDxG1kVNxKBrDnWpKTk5r2pV+cKe
EflIZuH8qgDB83jHItv5jnGaK9l2hlMjZXyZF2kCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSzloTQRO/v3WZdXQzeR/P6Tn422DAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
L3M1YUUwRVR2NzkxbVhWME0za2Z6LWs1LU50Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMtkIaBjANBgkqhkiG9w0BAQsF
AAOCAQEAh/twgcVsWvhErBq4ZIClml2IfHk86iaNOtJJXv0pRSqzYgBVFO6hLQoS
f/AcOiHKZ3HY4HXXpO86HIrjOUBqehsnzd0uU2l8nqQaQjaZ2XaqPLoMucHeo6iW
QhmMmk9KCiyb9VsRQvV9xkjs+svi1r4mdSC7OmTUazB3w+xqXJ3H/mFV+23eMU9d
DqAPLnPR2OWBnriLdhglkV0yZf48U/GPOGX1cIfetUcu70VI0pME+BPqGOlIWGtQ
6/gRdbAQ056QMBllFwqbYe2h+C/5Q7qYfqy6iXoCwWpUhBPgiu0Dvu2O/++1N5AV
2u1d5V/ncEcuhMbRx581ZBpaAk1fWA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:56:26 2025 by rpki-client