Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/d5fKf4HMjFTPvFv1g-extK9TjY0.roa
File: d5fKf4HMjFTPvFv1g-extK9TjY0.roa (raw, json)
Hash identifier: jvG0QqsqMCFOCxZ5OCB/lB/g5oXzEXu+iNot1r/2b24=
Subject key identifier: 77:97:CA:7F:81:CC:8C:54:CF:BC:5B:F5:83:E7:B1:B4:AF:53:8D:8D
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 0194258F60B1BD569E8AB3086BA0DC3A152A
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/d5fKf4HMjFTPvFv1g-extK9TjY0.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215655
IP address blocks: 45.86.4.0/24 maxlen: 24
45.86.5.0/24 maxlen: 24
95.130.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:60:b1:bd:56:9e:8a:b3:08:6b:a0:dc:3a:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7797ca7f81cc8c54cfbc5bf583e7b1b4af538d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:89:3f:2b:6b:2b:02:17:34:2d:62:c5:dd:
47:94:41:c3:1e:5d:7a:45:c5:62:69:05:33:f6:a0:
3f:7e:50:9d:b6:5d:84:74:01:df:bc:24:a2:fd:10:
b3:84:37:2f:79:9c:78:57:82:2c:e5:8b:fc:32:0f:
24:6c:42:60:bb:3e:3f:8b:ce:8d:87:5b:3d:02:2a:
fa:0d:bd:9e:02:96:2a:62:cd:9e:5f:10:eb:58:ba:
6a:49:bb:7f:55:51:d8:3c:5c:5c:40:cb:b2:29:9b:
e3:60:af:f6:2b:f3:ca:b7:68:ac:f2:7f:25:58:14:
b2:5c:96:44:2b:46:07:1d:68:a3:c8:80:c6:4a:d6:
0c:1e:f3:35:4d:7a:5c:38:15:7e:f0:30:2f:de:15:
1f:2e:5a:1f:bc:b8:31:68:b4:ac:fc:f6:79:e2:72:
63:de:f4:95:d5:1c:4a:19:fb:11:fe:f7:92:c4:c9:
c9:5f:d7:5a:1a:5f:20:56:2d:6d:23:ae:bb:89:ca:
7f:ba:44:4e:48:95:3d:d5:c4:14:2f:be:d8:8d:62:
cb:92:0f:6c:2b:12:4a:75:ee:99:c3:89:4e:25:15:
26:24:b4:c3:2a:bf:09:51:64:16:8d:7f:07:af:26:
2b:85:1d:73:eb:29:43:40:d5:6d:05:33:6a:db:97:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:CA:7F:81:CC:8C:54:CF:BC:5B:F5:83:E7:B1:B4:AF:53:8D:8D
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/d5fKf4HMjFTPvFv1g-extK9TjY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.4.0/23
95.130.225.0/24
Signature Algorithm: sha256WithRSAEncryption
25:53:ab:77:6e:16:57:24:77:4b:22:57:86:2a:6a:cb:8a:9b:
1f:ee:8c:c8:ed:64:f5:de:82:73:d0:b0:ab:86:f7:51:51:66:
66:6f:e8:2c:83:82:ad:90:46:2e:1d:95:d8:42:ad:c1:f8:92:
8b:d3:8a:2f:2c:ba:4d:0c:90:23:84:6d:a3:d8:14:dd:14:4b:
8a:98:ff:d0:ea:ef:fe:d6:88:a7:e2:c0:76:92:06:5b:51:7b:
51:ed:7f:63:73:10:9f:a4:10:34:eb:bc:72:76:76:8b:83:c5:
8f:5b:cc:cf:dd:18:3d:fe:96:4c:bf:d3:27:d2:49:44:05:1c:
54:e8:04:cd:90:fd:a6:40:ef:a4:be:7f:c5:e5:25:0f:fd:54:
6e:38:25:eb:1e:e8:cd:c2:30:34:bf:d9:70:24:b2:fc:83:0f:
ca:ef:07:08:8b:24:8b:1f:b4:4c:ba:ca:57:5a:7e:77:f7:fa:
9e:c4:dc:ff:a6:7c:b4:d0:21:53:f7:f2:b8:3b:97:d9:b7:aa:
04:29:4c:44:ca:e8:d3:34:12:10:ae:27:8a:43:ee:62:4c:4f:
40:ad:b3:57:e7:67:8c:88:2a:2b:18:78:f8:0c:32:88:7f:57:
3d:46:1f:38:01:0d:fb:4a:cc:a7:24:be:ed:6a:7a:c6:f0:b9:
d1:ce:58:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj2CxvVaeirMIa6DcOhUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWJmMjlmZGVmODU3MDUwMmY0YjUxYmU1ZmZjMDVjNGQ5
YjM0NjUwHhcNMjUwMTAyMDU0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzk3Y2E3ZjgxY2M4YzU0Y2ZiYzViZjU4M2U3YjFiNGFmNTM4ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5qJPytrKwIXNC1ixd1HlEHDHl16
RcViaQUz9qA/flCdtl2EdAHfvCSi/RCzhDcveZx4V4Is5Yv8Mg8kbEJguz4/i86N
h1s9Air6Db2eApYqYs2eXxDrWLpqSbt/VVHYPFxcQMuyKZvjYK/2K/PKt2is8n8l
WBSyXJZEK0YHHWijyIDGStYMHvM1TXpcOBV+8DAv3hUfLlofvLgxaLSs/PZ54nJj
3vSV1RxKGfsR/veSxMnJX9daGl8gVi1tI667icp/ukROSJU91cQUL77YjWLLkg9s
KxJKde6Zw4lOJRUmJLTDKr8JUWQWjX8HryYrhR1z6ylDQNVtBTNq25cqaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHeXyn+BzIxUz7xb9YPnsbSvU42NMB8GA1UdIwQY
MBaAFEir8p/e+FcFAvS1G+X/wFxNmzRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQt
YWJhMTEzZjNlM2FlLzEvZDVmS2Y0SE1qRlRQdkZ2MWctZXh0SzlUalkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZjQxY2ItZmY5MS00NTljLTlhNjQtYWJhMTEzZjNlM2Fl
LzEvU0t2eW45NzRWd1VDOUxVYjVmX0FYRTJiTkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVYEAwQA
X4LhMA0GCSqGSIb3DQEBCwUAA4IBAQAlU6t3bhZXJHdLIleGKmrLipsf7ozI7WT1
3oJz0LCrhvdRUWZmb+gsg4KtkEYuHZXYQq3B+JKL04ovLLpNDJAjhG2j2BTdFEuK
mP/Q6u/+1oin4sB2kgZbUXtR7X9jcxCfpBA067xydnaLg8WPW8zP3Rg9/pZMv9Mn
0klEBRxU6ATNkP2mQO+kvn/F5SUP/VRuOCXrHujNwjA0v9lwJLL8gw/K7wcIiySL
H7RMuspXWn539/qexNz/pny00CFT9/K4O5fZt6oEKUxEyujTNBIQrieKQ+5iTE9A
rbNX52eMiCorGHj4DDKIf1c9Rh84AQ37SsynJL7tanrG8LnRzlhO
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:10:02 2025 by rpki-client