Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5KecUGAYC2nbKB2_rhKqnL4oOuU.roa
File: 5KecUGAYC2nbKB2_rhKqnL4oOuU.roa (raw, json)
Hash identifier: obaL/ojUFFQfXfkVY8F0FCdF09+gV9525bWuwnteSfI=
Subject key identifier: E4:A7:9C:50:60:18:0B:69:DB:28:1D:BF:AE:12:AA:9C:BE:28:3A:E5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095B241A47F4B0686D1EB979C1EB845
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5KecUGAYC2nbKB2_rhKqnL4oOuU.roa
Signing time: Mon 02 Jan 2023 03:45:36 +0000
ROA not before: Mon 02 Jan 2023 03:45:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209926
IP address blocks: 92.38.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:b2:41:a4:7f:4b:06:86:d1:eb:97:9c:1e:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4a79c5060180b69db281dbfae12aa9cbe283ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:0e:ea:36:8b:90:15:7d:ac:de:1e:4c:bb:
e1:d9:5d:ff:4f:16:36:86:ab:fb:d1:f6:26:4e:fd:
bf:bd:03:0f:07:64:a9:4a:a8:b0:31:e4:9f:5c:2d:
84:8b:0b:f7:4f:e9:ff:f6:b9:99:9a:99:58:47:5a:
2f:56:03:b1:33:da:b4:cf:72:72:71:4d:68:99:b3:
3a:bd:f7:60:5e:2b:75:a0:d4:66:fe:37:f8:e7:fc:
5d:ff:94:81:d7:e7:43:dd:16:76:c9:47:82:ef:19:
65:41:c2:0f:19:a0:83:60:74:ce:ad:c6:5b:26:91:
6a:bf:73:c7:c4:f9:6b:64:19:7e:ef:dd:95:1b:ce:
5d:92:e1:35:8a:f5:66:05:5e:14:eb:c5:44:c6:6d:
f5:ec:68:38:ef:cc:2d:4b:ee:49:31:70:c7:23:7b:
e0:fe:02:16:c6:e4:00:46:0d:c3:15:7e:48:6a:b8:
d1:ab:28:8c:82:a8:40:d1:2d:b9:f9:d5:fc:ed:f7:
6f:1f:86:df:4f:24:1a:38:7a:b1:f9:5c:34:7e:63:
fe:d4:66:48:ef:ba:28:df:a8:22:94:f8:ed:51:5d:
16:cd:17:86:6e:ed:66:19:ad:09:38:5b:e2:b5:e8:
6f:79:3e:be:67:99:15:9c:7d:f4:62:75:57:78:c3:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A7:9C:50:60:18:0B:69:DB:28:1D:BF:AE:12:AA:9C:BE:28:3A:E5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5KecUGAYC2nbKB2_rhKqnL4oOuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:58:28:67:2b:3a:99:3d:f9:a6:23:b6:9c:50:f4:63:ec:45:
22:72:74:68:f4:f6:1d:3f:15:04:ce:8c:9b:d8:33:bf:61:82:
5e:cb:56:f6:57:b7:ce:f3:d0:01:1a:09:0d:29:bb:1b:07:c2:
80:67:9e:3d:15:67:78:ea:16:ee:88:ec:52:d7:c2:98:fa:01:
44:ef:2d:c3:0a:e6:ab:e0:06:a1:ef:46:08:6b:77:fe:dd:d8:
ed:31:1a:75:84:44:1a:ad:47:ac:cf:fb:5f:f9:58:6c:67:13:
12:c1:99:a2:71:17:98:f7:a0:11:2e:29:96:3f:b9:ce:6a:c4:
6a:f6:de:75:fe:a6:c9:95:dc:59:a7:31:c8:33:c4:54:51:0a:
ef:71:4f:8f:9f:50:57:ff:6e:37:f4:46:a6:cf:ee:7e:ac:8f:
49:20:0c:a9:9a:1a:e2:49:1c:56:ed:51:a1:31:4b:5e:b9:7c:
1b:cd:d0:1e:6b:26:2e:62:19:8f:39:51:50:4d:c3:39:e7:70:
86:ee:99:a1:7c:a8:a0:3c:a3:99:42:fa:d7:73:ea:c3:00:02:
c9:57:88:15:24:68:b0:ef:15:c1:d0:4b:33:75:6a:a2:fa:84:
6d:14:5d:56:c0:99:a7:b9:06:a5:78:e7:93:75:51:04:65:1b:
d1:6f:cb:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlbJBpH9LBobR65ecHrhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGE3OWM1MDYwMTgwYjY5ZGIyODFkYmZhZTEyYWE5Y2JlMjgzYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAYO6jaLkBV9rN4eTLvh2V3/TxY2
hqv70fYmTv2/vQMPB2SpSqiwMeSfXC2Eiwv3T+n/9rmZmplYR1ovVgOxM9q0z3Jy
cU1ombM6vfdgXit1oNRm/jf45/xd/5SB1+dD3RZ2yUeC7xllQcIPGaCDYHTOrcZb
JpFqv3PHxPlrZBl+792VG85dkuE1ivVmBV4U68VExm317Gg478wtS+5JMXDHI3vg
/gIWxuQARg3DFX5IarjRqyiMgqhA0S25+dX87fdvH4bfTyQaOHqx+Vw0fmP+1GZI
77oo36gilPjtUV0WzReGbu1mGa0JOFvitehveT6+Z5kVnH30YnVXeMOPSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOSnnFBgGAtp2ygdv64Sqpy+KDrlMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNUtlY1VHQVlDMm5iS0IyX3JoS3FuTDRvT3VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCYEMA0G
CSqGSIb3DQEBCwUAA4IBAQB6WChnKzqZPfmmI7acUPRj7EUicnRo9PYdPxUEzoyb
2DO/YYJey1b2V7fO89ABGgkNKbsbB8KAZ549FWd46hbuiOxS18KY+gFE7y3DCuar
4Aah70YIa3f+3djtMRp1hEQarUesz/tf+VhsZxMSwZmicReY96ARLimWP7nOasRq
9t51/qbJldxZpzHIM8RUUQrvcU+Pn1BX/2439Eamz+5+rI9JIAypmhriSRxW7VGh
MUteuXwbzdAeayYuYhmPOVFQTcM553CG7pmhfKigPKOZQvrXc+rDAALJV4gVJGiw
7xXB0EszdWqi+oRtFF1WwJmnuQaleOeTdVEEZRvRb8uD
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:11 2025 by rpki-client