Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/P5-h2I1KyO-9Y0yRvDLeY3xRdYM.roa
File: P5-h2I1KyO-9Y0yRvDLeY3xRdYM.roa (raw, json)
Hash identifier: PdMi1c67MZJSmvSnFHWHOjNq2l23nPlEMIUFBQvaZJ8=
Subject key identifier: 3F:9F:A1:D8:8D:4A:C8:EF:BD:63:4C:91:BC:32:DE:63:7C:51:75:83
Certificate issuer: /CN=13d35c057bdd5e8eca91a5752c7023bcc326ac2e
Certificate serial: 01856FCB7FB3BCF47BF89A011A1BCE572A63
Authority key identifier: 13:D3:5C:05:7B:DD:5E:8E:CA:91:A5:75:2C:70:23:BC:C3:26:AC:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9NcBXvdXo7KkaV1LHAjvMMmrC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/P5-h2I1KyO-9Y0yRvDLeY3xRdYM.roa
Signing time: Mon 02 Jan 2023 00:04:45 +0000
ROA not before: Mon 02 Jan 2023 00:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 194.26.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:7f:b3:bc:f4:7b:f8:9a:01:1a:1b:ce:57:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d35c057bdd5e8eca91a5752c7023bcc326ac2e
Validity
Not Before: Jan 2 00:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f9fa1d88d4ac8efbd634c91bc32de637c517583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:68:12:a2:03:92:46:0f:45:90:fa:94:a6:
32:08:42:8d:ce:7c:ef:2f:cc:3d:71:5b:70:52:27:
3a:71:49:ca:d7:56:5d:09:1a:17:f7:ea:c2:e8:cb:
70:84:d6:7a:09:79:61:e3:d3:27:39:fc:61:d9:75:
69:8b:70:f8:54:11:10:90:89:c9:da:f7:91:c1:20:
8a:9c:ec:49:3f:a5:c5:87:dd:ab:65:97:66:dd:46:
bd:9e:b8:77:e1:ff:9a:3a:7b:c1:9d:2d:66:d8:d2:
14:55:d1:09:9b:97:a5:0b:ec:2b:bd:d3:fb:90:f9:
61:02:41:ee:d1:e9:de:ae:f3:2e:b3:c4:30:49:dd:
b7:38:06:60:04:85:e3:a8:18:bc:bf:0c:ba:41:2d:
66:c1:81:36:67:60:1c:85:a6:25:5f:f8:5c:47:08:
f5:a4:3a:79:37:3e:1f:c5:5e:52:86:d8:78:ef:45:
f6:88:d6:88:c2:6d:6e:09:51:e2:1e:42:70:d4:71:
d9:18:cf:59:ef:18:9d:ed:de:ce:96:9f:c7:a5:8b:
ca:60:85:7a:e3:7e:c1:24:d6:e7:93:40:e4:86:4c:
72:71:39:ee:f1:7c:2e:2b:f8:f1:e1:c6:81:3e:14:
f6:90:48:da:ac:72:ba:e8:bc:5d:49:4a:ca:85:d2:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:A1:D8:8D:4A:C8:EF:BD:63:4C:91:BC:32:DE:63:7C:51:75:83
X509v3 Authority Key Identifier:
keyid:13:D3:5C:05:7B:DD:5E:8E:CA:91:A5:75:2C:70:23:BC:C3:26:AC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9NcBXvdXo7KkaV1LHAjvMMmrC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/P5-h2I1KyO-9Y0yRvDLeY3xRdYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/825a73-a098-4de2-b6ed-f6b9f7a31d81/1/E9NcBXvdXo7KkaV1LHAjvMMmrC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.143.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5d:aa:c1:2d:42:ff:8e:6f:c2:dc:a8:2a:13:8c:26:22:c9:
5d:e5:39:a6:8c:be:3b:ad:dd:ef:45:19:58:ce:43:6f:4d:d0:
4c:a6:15:f0:68:81:f2:9d:db:9d:48:ea:a0:77:23:a9:3a:7c:
cd:62:1e:2c:7d:2a:8a:69:d7:57:dd:8a:38:ae:b1:9d:ed:ff:
c6:af:38:04:42:fe:63:24:11:95:9e:fd:f1:a3:4d:08:a5:4f:
43:d4:e5:75:bd:f0:b0:27:fb:0b:4b:29:98:e7:b0:a2:c7:d6:
6b:0a:56:63:cb:4a:ee:3d:2a:78:1f:6f:2b:26:ec:57:59:e7:
07:66:a6:81:12:fe:d8:b5:b1:93:73:89:d7:0b:85:b5:92:ab:
72:89:5d:f9:7e:0a:30:0c:01:bb:ec:84:5b:7c:0b:5b:e1:c2:
1a:29:cf:f2:08:71:fe:d4:b2:0a:ba:e8:5d:a1:be:70:22:53:
36:5d:01:f1:ce:f3:56:86:9f:30:2d:71:2a:18:08:a7:fe:ec:
ee:da:3e:5f:bc:34:50:e2:79:e2:3d:d0:e4:a4:96:34:1c:45:
b7:63:db:81:f9:7b:aa:4e:fe:1b:8a:92:ed:87:79:8d:52:b3:
ed:18:b2:b3:74:d3:b1:41:a3:23:0f:01:cc:3a:8c:c0:4a:f1:
ba:d0:e7:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy3+zvPR7+JoBGhvOVypjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDM1YzA1N2JkZDVlOGVjYTkxYTU3NTJjNzAyM2JjYzMy
NmFjMmUwHhcNMjMwMTAyMDAwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjlmYTFkODhkNGFjOGVmYmQ2MzRjOTFiYzMyZGU2MzdjNTE3NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI1oEqIDkkYPRZD6lKYyCEKNznzv
L8w9cVtwUic6cUnK11ZdCRoX9+rC6MtwhNZ6CXlh49MnOfxh2XVpi3D4VBEQkInJ
2veRwSCKnOxJP6XFh92rZZdm3Ua9nrh34f+aOnvBnS1m2NIUVdEJm5elC+wrvdP7
kPlhAkHu0enervMus8QwSd23OAZgBIXjqBi8vwy6QS1mwYE2Z2AchaYlX/hcRwj1
pDp5Nz4fxV5Shth470X2iNaIwm1uCVHiHkJw1HHZGM9Z7xid7d7Olp/HpYvKYIV6
437BJNbnk0DkhkxycTnu8XwuK/jx4caBPhT2kEjarHK66LxdSUrKhdJ+WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD+fodiNSsjvvWNMkbwy3mN8UXWDMB8GA1UdIwQY
MBaAFBPTXAV73V6OypGldSxwI7zDJqwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlOY0JYdmRYbzdLa2FWMUxIQWp2TU1tckM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84MjVhNzMtYTA5OC00ZGUyLWI2ZWQt
ZjZiOWY3YTMxZDgxLzEvUDUtaDJJMUt5Ty05WTB5UnZETGVZM3hSZFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84MjVhNzMtYTA5OC00ZGUyLWI2ZWQtZjZiOWY3YTMxZDgx
LzEvRTlOY0JYdmRYbzdLa2FWMUxIQWp2TU1tckM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhqPMA0G
CSqGSIb3DQEBCwUAA4IBAQAwXarBLUL/jm/C3KgqE4wmIsld5TmmjL47rd3vRRlY
zkNvTdBMphXwaIHyndudSOqgdyOpOnzNYh4sfSqKaddX3Yo4rrGd7f/GrzgEQv5j
JBGVnv3xo00IpU9D1OV1vfCwJ/sLSymY57Cix9ZrClZjy0ruPSp4H28rJuxXWecH
ZqaBEv7YtbGTc4nXC4W1kqtyiV35fgowDAG77IRbfAtb4cIaKc/yCHH+1LIKuuhd
ob5wIlM2XQHxzvNWhp8wLXEqGAin/uzu2j5fvDRQ4nniPdDkpJY0HEW3Y9uB+Xuq
Tv4bipLth3mNUrPtGLKzdNOxQaMjDwHMOozASvG60Of4
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:42 2025 by rpki-client