Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/r689ePkRVnior_PCWODRlg2hlcw.roa
File: r689ePkRVnior_PCWODRlg2hlcw.roa (raw, json)
Hash identifier: +pCgMEe0l0NWDfvIP2E0cPvN8Vrrzx3xnX4jtsgfhyU=
Subject key identifier: AF:AF:3D:78:F9:11:56:78:A8:AF:F3:C2:58:E0:D1:96:0D:A1:95:CC
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 018BD2548811D362AA676325CFB06F65E281
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/r689ePkRVnior_PCWODRlg2hlcw.roa
Signing time: Wed 15 Nov 2023 09:33:57 +0000
ROA not before: Wed 15 Nov 2023 09:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15596
IP address blocks: 109.122.56.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:54:88:11:d3:62:aa:67:63:25:cf:b0:6f:65:e2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Nov 15 09:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afaf3d78f9115678a8aff3c258e0d1960da195cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:85:29:51:cb:1d:56:46:d1:bf:24:da:46:
ef:65:86:57:31:0f:71:e4:a2:4e:a6:cb:96:40:fc:
1b:dd:cd:c0:83:cf:15:ad:b8:bc:e1:9b:ba:1d:bc:
d5:3d:f0:a5:08:5e:c4:e0:a8:0b:9a:2c:4c:13:58:
68:a4:e3:7f:43:93:25:8c:31:a3:c5:e8:9d:18:08:
e2:7c:89:75:22:6d:fa:78:90:38:11:64:ef:c5:7d:
78:73:ee:1f:94:bb:42:79:cc:d0:54:d4:9b:b6:b9:
b1:8d:11:27:9d:cc:41:46:c5:84:ce:01:c5:9e:c5:
61:dc:8f:4a:df:17:63:9a:00:b5:be:cd:f6:f9:9b:
8c:43:95:3d:05:e0:10:76:32:c7:22:51:56:f1:5a:
da:6a:cb:cb:6c:2e:cb:9a:d4:1d:7c:2d:91:a8:8b:
32:7f:2c:89:65:ee:a2:7c:ee:86:67:1b:9c:23:62:
48:0d:e5:61:43:75:08:fb:97:fe:2a:5d:14:9b:f6:
46:82:82:89:cd:2d:e9:49:9a:ca:c9:2e:c9:bb:36:
a7:85:b0:b9:be:9b:3b:75:53:ca:27:e8:bc:4e:1a:
7f:c9:e6:cc:ab:c1:0b:91:92:d1:b8:15:37:1a:02:
3e:52:66:a9:86:fd:09:73:82:8f:1e:97:85:c9:51:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AF:3D:78:F9:11:56:78:A8:AF:F3:C2:58:E0:D1:96:0D:A1:95:CC
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/r689ePkRVnior_PCWODRlg2hlcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/21
Signature Algorithm: sha256WithRSAEncryption
12:ba:88:4d:e2:e5:8c:74:c4:f9:ae:ab:4f:42:0b:07:6d:d0:
de:e1:22:e6:48:f8:cd:e9:38:b1:51:5e:ea:ea:b1:f2:5c:7b:
30:02:18:15:8c:63:6c:93:a6:e0:e2:d9:ea:b5:7f:c0:53:e2:
12:3b:ea:01:26:ad:68:91:14:21:e5:9b:d3:cf:94:5e:66:ee:
d4:6e:af:38:8c:8d:9c:0c:54:d0:9e:0f:ef:b8:00:af:2f:3d:
4b:19:38:d6:1b:48:c2:5b:3e:1b:e9:8b:c0:a3:0d:17:6d:a6:
fa:58:a0:98:65:bf:c5:4d:cc:99:4c:cf:6c:da:36:ff:78:d5:
23:42:c3:0d:9f:ce:88:ac:f7:33:25:d4:94:cf:9e:c4:8c:ea:
92:96:51:9d:e7:f7:b8:fa:6c:c4:01:c8:33:6a:63:41:7b:c8:
56:91:59:d9:0b:ba:00:d4:fa:83:d1:6e:bf:7b:cb:0e:16:ca:
e0:71:25:75:32:7a:f6:01:7d:3a:b8:6d:52:37:ab:f3:d9:8f:
c2:c3:06:ef:d6:69:bb:40:bf:3a:40:3e:04:5d:6b:fa:23:35:
20:e2:83:e7:2d:51:0f:9b:97:8f:9a:90:14:b2:16:85:78:38:
01:a4:61:6d:f7:d4:f8:ee:cf:4e:8f:fa:a7:b9:37:35:a5:b1:
f5:01:c0:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvSVIgR02KqZ2Mlz7BvZeKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTJlOWI1ZmI5NjdhN2QzZDc4ZDBmYmI5MzBjMDgwZWM5
ZDkxZTUwHhcNMjMxMTE1MDkzMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmFmM2Q3OGY5MTE1Njc4YThhZmYzYzI1OGUwZDE5NjBkYTE5NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr2FKVHLHVZG0b8k2kbvZYZXMQ9x
5KJOpsuWQPwb3c3Ag88Vrbi84Zu6HbzVPfClCF7E4KgLmixME1hopON/Q5MljDGj
xeidGAjifIl1Im36eJA4EWTvxX14c+4flLtCeczQVNSbtrmxjREnncxBRsWEzgHF
nsVh3I9K3xdjmgC1vs32+ZuMQ5U9BeAQdjLHIlFW8VraasvLbC7LmtQdfC2RqIsy
fyyJZe6ifO6GZxucI2JIDeVhQ3UI+5f+Kl0Um/ZGgoKJzS3pSZrKyS7JuzanhbC5
vps7dVPKJ+i8Thp/yebMq8ELkZLRuBU3GgI+Umaphv0Jc4KPHpeFyVFiowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+vPXj5EVZ4qK/zwljg0ZYNoZXMMB8GA1UdIwQY
MBaAFPTi6bX7lnp9PXjQ+7kwwIDsnZHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9McHRmdVdlbjA5ZU5EN3VUREFnT3lka2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zZGViZmMtZGYyZS00OWQ0LWJkYzYt
NmQ1NGJmNDQ5OTVlLzEvcjY4OWVQa1JWbmlvcl9QQ1dPRFJsZzJobGN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zZGViZmMtZGYyZS00OWQ0LWJkYzYtNmQ1NGJmNDQ5OTVl
LzEvOU9McHRmdVdlbjA5ZU5EN3VUREFnT3lka2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbXo4MA0G
CSqGSIb3DQEBCwUAA4IBAQASuohN4uWMdMT5rqtPQgsHbdDe4SLmSPjN6TixUV7q
6rHyXHswAhgVjGNsk6bg4tnqtX/AU+ISO+oBJq1okRQh5ZvTz5ReZu7Ubq84jI2c
DFTQng/vuACvLz1LGTjWG0jCWz4b6YvAow0Xbab6WKCYZb/FTcyZTM9s2jb/eNUj
QsMNn86IrPczJdSUz57EjOqSllGd5/e4+mzEAcgzamNBe8hWkVnZC7oA1PqD0W6/
e8sOFsrgcSV1Mnr2AX06uG1SN6vz2Y/Cwwbv1mm7QL86QD4EXWv6IzUg4oPnLVEP
m5ePmpAUshaFeDgBpGFt99T47s9Oj/qnuTc1pbH1AcBa
-----END CERTIFICATE-----
Generated at Mon May 12 10:47:20 2025 by rpki-client