Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/5kLGUwSDd_B7pFfhmHSkg1I6nUw.roa
File: 5kLGUwSDd_B7pFfhmHSkg1I6nUw.roa (raw, json)
Hash identifier: 5LVYBgd2kkWsDOt2TXqesN7FsK//2MRPz1T3G688yMg=
Subject key identifier: E6:42:C6:53:04:83:77:F0:7B:A4:57:E1:98:74:A4:83:52:3A:9D:4C
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0184899BDE1C12E7143F53B52657CC181F8B
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/5kLGUwSDd_B7pFfhmHSkg1I6nUw.roa
Signing time: Fri 18 Nov 2022 07:20:04 +0000
ROA not before: Fri 18 Nov 2022 07:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208836
IP address blocks: 217.192.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:89:9b:de:1c:12:e7:14:3f:53:b5:26:57:cc:18:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Nov 18 07:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e642c653048377f07ba457e19874a483523a9d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:ba:c3:29:e1:1b:13:44:14:e9:1e:52:5d:
31:08:4c:df:94:d0:db:e0:af:17:2f:b8:2b:9c:eb:
a4:fe:c2:ff:d0:44:a9:94:8f:1a:ea:49:c2:e7:16:
48:75:4e:81:f2:5f:b8:06:c8:b8:7f:ed:aa:90:b3:
db:df:5b:e9:08:a2:7c:07:c6:0e:bc:aa:23:35:37:
03:d0:63:cf:ff:4f:51:cf:33:38:58:d8:33:0f:00:
b6:3f:57:f1:3c:97:c2:0c:f5:96:8a:98:b3:38:30:
6c:48:8e:52:00:d4:6e:f3:d7:56:93:81:de:07:9a:
35:1f:ae:5f:67:3b:8d:18:55:da:8d:6a:f6:06:c3:
0b:ad:de:f2:08:b8:8b:82:81:2e:5c:4b:6e:8f:9a:
d5:22:17:3d:e2:f4:44:a3:ac:30:d3:27:10:9d:ed:
d2:bc:45:2b:92:17:dd:a4:ad:95:7a:31:71:a7:93:
71:af:12:09:c2:fe:30:95:71:63:9b:e9:3e:73:7b:
5f:a0:10:d1:e2:18:44:15:90:ad:53:fe:69:4f:78:
31:63:5a:2d:6e:79:b2:49:b7:51:36:be:c5:ab:58:
72:9c:44:0c:b7:72:9a:96:aa:55:e1:29:94:93:99:
9b:96:cc:44:86:82:3a:e9:1e:e7:ab:c5:1d:ae:b2:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:C6:53:04:83:77:F0:7B:A4:57:E1:98:74:A4:83:52:3A:9D:4C
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/5kLGUwSDd_B7pFfhmHSkg1I6nUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.192.30.0/24
Signature Algorithm: sha256WithRSAEncryption
25:71:b5:16:c8:ae:c1:8d:5e:06:97:71:98:75:e9:b6:dc:a4:
db:56:e8:0d:2e:ca:f9:68:91:78:99:af:c1:18:1d:13:1a:8e:
28:e9:56:b6:21:10:61:d3:75:45:a5:53:1b:61:b8:8a:03:f9:
51:b2:32:8f:d9:4d:9a:8b:fd:a1:14:33:bf:b8:10:fe:5e:22:
62:3c:25:ca:de:e2:26:bd:ce:54:f5:2c:29:a3:6f:27:07:22:
e0:0e:72:07:f1:28:7b:a4:64:a6:cf:a6:04:ed:45:bf:33:65:
fb:e3:da:a4:ee:ed:59:4f:16:84:97:7e:72:b7:cd:7f:76:15:
6e:33:08:f8:b1:57:e6:b6:9f:15:d6:08:53:b5:b8:cb:7c:9e:
bd:d6:ff:45:92:d0:4b:26:47:ac:f5:39:9b:9f:12:f2:b6:04:
b9:c0:2f:58:07:d5:ef:e4:35:05:73:8b:7f:3b:e1:d5:20:21:
c4:be:9e:0c:56:a7:18:25:4d:35:4a:23:b0:8c:63:a3:fd:23:
88:59:cb:7b:a8:ee:13:08:26:80:3e:7f:c4:37:c9:07:95:28:
4b:a3:87:cd:4f:b5:f2:7a:39:68:37:39:c1:e0:f8:a7:f4:4d:
01:70:ee:9b:ff:d7:33:82:5c:be:bb:c3:cc:de:63:2a:70:b4:
8d:eb:91:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSJm94cEucUP1O1JlfMGB+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjIxMTE4MDcyMDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjQyYzY1MzA0ODM3N2YwN2JhNDU3ZTE5ODc0YTQ4MzUyM2E5ZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5+6wynhGxNEFOkeUl0xCEzflNDb
4K8XL7grnOuk/sL/0ESplI8a6knC5xZIdU6B8l+4Bsi4f+2qkLPb31vpCKJ8B8YO
vKojNTcD0GPP/09RzzM4WNgzDwC2P1fxPJfCDPWWipizODBsSI5SANRu89dWk4He
B5o1H65fZzuNGFXajWr2BsMLrd7yCLiLgoEuXEtuj5rVIhc94vREo6ww0ycQne3S
vEUrkhfdpK2VejFxp5NxrxIJwv4wlXFjm+k+c3tfoBDR4hhEFZCtU/5pT3gxY1ot
bnmySbdRNr7Fq1hynEQMt3KalqpV4SmUk5mblsxEhoI66R7nq8UdrrKXvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZCxlMEg3fwe6RX4Zh0pINSOp1MMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvNWtMR1V3U0RkX0I3cEZmaG1IU2tnMUk2blV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cAeMA0G
CSqGSIb3DQEBCwUAA4IBAQAlcbUWyK7BjV4Gl3GYdem23KTbVugNLsr5aJF4ma/B
GB0TGo4o6Va2IRBh03VFpVMbYbiKA/lRsjKP2U2ai/2hFDO/uBD+XiJiPCXK3uIm
vc5U9Swpo28nByLgDnIH8Sh7pGSmz6YE7UW/M2X749qk7u1ZTxaEl35yt81/dhVu
Mwj4sVfmtp8V1ghTtbjLfJ691v9FktBLJkes9TmbnxLytgS5wC9YB9Xv5DUFc4t/
O+HVICHEvp4MVqcYJU01SiOwjGOj/SOIWct7qO4TCCaAPn/EN8kHlShLo4fNT7Xy
ejloNznB4Pin9E0BcO6b/9czgly+u8PM3mMqcLSN65EW
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:06 2025 by rpki-client