Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/I1eqPjht9JtZsKs4J98fPfE6eFk.roa
File: I1eqPjht9JtZsKs4J98fPfE6eFk.roa (raw, json)
Hash identifier: s2wPfSAg34cF73Clny9R+0H1hDX0JMGNWCD24jTlJIg=
Subject key identifier: 23:57:AA:3E:38:6D:F4:9B:59:B0:AB:38:27:DF:1F:3D:F1:3A:78:59
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC25C5CBD5CA94FE96818403B0295B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/I1eqPjht9JtZsKs4J98fPfE6eFk.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265770
IP address blocks: 5.253.228.0/22 maxlen: 22
45.15.244.0/22 maxlen: 22
45.128.20.0/22 maxlen: 22
45.151.196.0/22 maxlen: 22
89.32.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:c5:cb:d5:ca:94:fe:96:81:84:03:b0:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2357aa3e386df49b59b0ab3827df1f3df13a7859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:1e:47:13:e9:fe:df:f7:48:d4:00:87:a2:
5f:c7:b8:bd:4d:0d:1f:82:eb:b2:69:18:a5:07:99:
67:37:1d:9f:01:ab:90:37:7e:5c:05:00:ad:c2:a9:
7c:13:ed:38:09:c6:35:29:da:2d:58:da:71:0c:8b:
3e:5d:82:84:b6:5c:93:1e:6c:ad:65:61:b3:bd:e2:
71:c1:b4:54:59:58:05:c2:83:e8:ae:d1:d2:cb:1d:
18:33:f6:62:68:64:ea:f4:4e:f1:29:c2:4e:e5:44:
2a:89:73:c2:17:d5:e7:68:d5:77:c6:66:bd:ad:cc:
47:06:04:e8:e5:64:9e:b7:60:e4:75:c7:c6:72:70:
c1:19:a9:fc:f2:49:40:ce:84:46:19:d1:aa:55:a7:
b1:db:1d:d0:35:c6:3c:f8:c6:89:43:39:b1:10:40:
e6:10:7d:9f:bb:e5:f9:b0:c9:6e:95:b2:ef:3e:11:
17:e7:0b:8b:2b:38:aa:50:f7:51:57:20:f6:62:29:
c0:23:b9:3b:e4:a6:d9:39:0f:66:55:90:84:88:fa:
f4:e0:97:29:be:f4:fe:9e:58:5b:4f:16:98:cd:ff:
ef:cb:06:ad:a0:f7:eb:ce:ab:9b:19:d5:e3:56:1e:
ee:eb:c9:71:46:8f:db:d7:e2:08:d6:75:e0:d7:21:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:AA:3E:38:6D:F4:9B:59:B0:AB:38:27:DF:1F:3D:F1:3A:78:59
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/I1eqPjht9JtZsKs4J98fPfE6eFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.228.0/22
45.15.244.0/22
45.128.20.0/22
45.151.196.0/22
89.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fe:51:8f:f0:71:a9:fa:8d:18:44:2d:a5:87:c8:c4:26:df:
54:bb:ca:1b:64:88:c8:4e:9c:57:78:d5:c4:df:5e:8e:d9:76:
39:a0:4f:fe:c3:9d:9b:50:9d:ed:cb:00:2e:9a:49:40:55:b6:
78:9b:18:28:f3:af:d8:a8:06:f4:ed:5f:6c:0d:bd:1d:86:b7:
77:c3:ca:09:8d:1e:3e:9a:31:e1:be:e3:fa:06:71:38:1e:53:
a3:ff:c9:bc:f0:bd:c3:f6:b2:02:e9:dd:69:e1:d8:8e:a0:5e:
d1:1e:a5:d7:f5:20:14:a2:67:0e:c9:35:a2:e6:fb:0b:c8:04:
22:ec:d6:05:1c:08:b3:8e:03:0c:19:df:07:74:c6:ef:c8:df:
56:a5:76:f9:bc:15:f2:50:25:3d:94:a5:d8:fd:e3:5c:16:4d:
d5:d5:dc:18:b9:5c:4e:53:bc:11:a8:cf:81:4d:1a:b5:b0:df:
40:ac:55:96:63:cc:d1:5e:76:d2:ca:8d:6d:a9:9f:43:04:d5:
2a:a4:33:9d:02:b0:a2:eb:98:6b:17:be:f5:56:ba:6f:fa:43:
94:08:e2:08:30:c2:62:aa:07:86:ff:6f:72:5f:73:c4:f3:09:
32:46:d6:69:8b:a1:dd:cd:60:e6:be:03:e1:90:cf:26:cc:87:
97:85:ad:db
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQi/CXFy9XKlP6WgYQDsClbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU3YWEzZTM4NmRmNDliNTliMGFiMzgyN2RmMWYzZGYxM2E3ODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UgeRxPp/t/3SNQAh6Jfx7i9TQ0f
guuyaRilB5lnNx2fAauQN35cBQCtwql8E+04CcY1KdotWNpxDIs+XYKEtlyTHmyt
ZWGzveJxwbRUWVgFwoPortHSyx0YM/ZiaGTq9E7xKcJO5UQqiXPCF9XnaNV3xma9
rcxHBgTo5WSet2DkdcfGcnDBGan88klAzoRGGdGqVaex2x3QNcY8+MaJQzmxEEDm
EH2fu+X5sMlulbLvPhEX5wuLKziqUPdRVyD2YinAI7k75KbZOQ9mVZCEiPr04Jcp
vvT+nlhbTxaYzf/vywatoPfrzqubGdXjVh7u68lxRo/b1+II1nXg1yH0XwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCNXqj44bfSbWbCrOCffHz3xOnhZMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvSTFlcVBqaHQ5SnRac0tzNEo5OGZQZkU2ZUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBf3kAwQC
LQ/0AwQCLYAUAwQCLZfEAwQAWSB+MA0GCSqGSIb3DQEBCwUAA4IBAQAu/lGP8HGp
+o0YRC2lh8jEJt9Uu8obZIjITpxXeNXE316O2XY5oE/+w52bUJ3tywAumklAVbZ4
mxgo86/YqAb07V9sDb0dhrd3w8oJjR4+mjHhvuP6BnE4HlOj/8m88L3D9rIC6d1p
4diOoF7RHqXX9SAUomcOyTWi5vsLyAQi7NYFHAizjgMMGd8HdMbvyN9WpXb5vBXy
UCU9lKXY/eNcFk3V1dwYuVxOU7wRqM+BTRq1sN9ArFWWY8zRXnbSyo1tqZ9DBNUq
pDOdArCi65hrF771Vrpv+kOUCOIIMMJiqgeG/29yX3PE8wkyRtZpi6HdzWDmvgPh
kM8mzIeXha3b
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:08 2025 by rpki-client