Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/V5j7ZGjSywKRCDXAjxokgW8VFZE.roa
File: V5j7ZGjSywKRCDXAjxokgW8VFZE.roa (raw, json)
Hash identifier: uYSKlKX5TWYi9YdQKvvSCkrzYO1bsHKPLgzkDflbXwI=
Subject key identifier: 57:98:FB:64:68:D2:CB:02:91:08:35:C0:8F:1A:24:81:6F:15:15:91
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0195C3CCBDC2337D026C76A6D451A3040A74
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/V5j7ZGjSywKRCDXAjxokgW8VFZE.roa
Signing time: Sun 23 Mar 2025 16:18:49 +0000
ROA not before: Sun 23 Mar 2025 16:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 188.191.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:cc:bd:c2:33:7d:02:6c:76:a6:d4:51:a3:04:0a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 23 16:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5798fb6468d2cb02910835c08f1a24816f151591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:15:05:17:58:0d:8e:6f:42:be:11:2c:2e:
13:37:26:29:a0:fc:47:cb:fe:c4:ff:f9:be:ae:53:
27:87:a9:d0:a3:b7:25:65:2b:9c:a8:83:1a:8f:2a:
f5:0b:b4:c6:c3:6b:9f:0f:f6:49:c9:31:91:08:17:
72:d8:58:f1:12:1a:96:e9:63:e3:13:f6:be:63:f4:
ce:43:ae:9a:10:57:aa:a7:92:e1:39:6e:df:89:18:
fc:90:76:c0:92:60:66:f9:07:40:38:4d:47:96:c1:
60:4e:48:74:9e:3b:d0:92:93:4a:5d:59:a1:4d:ab:
cd:88:9d:19:47:56:41:bf:3c:20:16:ee:62:b8:6f:
30:32:1d:72:1c:c4:a7:58:ac:db:ab:4a:51:92:cc:
53:f4:e1:e3:98:e1:ef:2b:e7:b2:12:be:a5:ac:4e:
ce:4b:2f:63:04:94:40:5d:af:bf:6d:21:b3:4e:af:
25:b6:78:c0:d4:31:e4:ea:26:3b:0b:11:7e:97:ad:
67:51:a0:30:05:7f:4b:47:12:e9:27:2c:52:ab:31:
38:27:47:4f:db:8f:9f:24:fb:73:df:d3:fd:22:44:
93:a4:c2:62:16:00:f4:27:19:9f:7a:f3:d5:c9:bf:
05:07:9c:d2:4b:4c:08:6b:63:83:a3:44:18:6a:7b:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:FB:64:68:D2:CB:02:91:08:35:C0:8F:1A:24:81:6F:15:15:91
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/V5j7ZGjSywKRCDXAjxokgW8VFZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.104.0/24
Signature Algorithm: sha256WithRSAEncryption
13:25:9a:73:6a:6b:6a:f6:e9:e4:c9:72:c8:54:e0:ff:13:9c:
41:82:95:02:2d:88:db:8d:2f:a1:e2:bc:4b:37:3b:a8:33:d5:
97:bf:88:95:7e:e2:a6:99:3a:cf:a0:ac:c3:53:aa:75:40:e6:
3c:4f:82:13:dc:c1:f7:87:e5:cc:91:51:7d:1f:8c:91:db:03:
31:78:ac:08:2c:d9:85:72:37:fc:77:e3:85:fe:02:8c:b0:60:
5c:5b:57:e5:07:5e:c4:13:dc:e0:85:64:52:ce:83:c0:fe:59:
c6:ca:d4:95:24:6e:b7:85:b7:4a:30:2f:62:bc:58:56:4c:e9:
0f:26:bc:f2:70:82:75:cb:9a:c9:ba:52:b2:70:2c:18:d4:47:
f1:c8:2c:1d:d2:a2:a4:b6:23:53:69:10:05:44:d7:89:26:60:
f6:34:b6:d2:58:41:20:51:8b:92:28:1f:da:27:ae:21:ae:3c:
18:f2:e8:78:d7:8b:e1:a3:fe:da:04:43:92:8a:26:e0:4e:fd:
8c:e5:34:11:3a:f0:80:9d:2f:ac:1f:8e:70:1b:4e:11:b5:d2:
85:b4:ba:db:38:b1:36:ef:dd:98:3f:7f:f0:96:10:a2:a1:94:
f6:7f:9f:2e:df:11:57:a4:60:c0:5f:11:38:ab:ee:60:29:0f:
d0:82:2e:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXDzL3CM30CbHam1FGjBAp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUwMzIzMTYxODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzk4ZmI2NDY4ZDJjYjAyOTEwODM1YzA4ZjFhMjQ4MTZmMTUxNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTAVBRdYDY5vQr4RLC4TNyYpoPxH
y/7E//m+rlMnh6nQo7clZSucqIMajyr1C7TGw2ufD/ZJyTGRCBdy2FjxEhqW6WPj
E/a+Y/TOQ66aEFeqp5LhOW7fiRj8kHbAkmBm+QdAOE1HlsFgTkh0njvQkpNKXVmh
TavNiJ0ZR1ZBvzwgFu5iuG8wMh1yHMSnWKzbq0pRksxT9OHjmOHvK+eyEr6lrE7O
Sy9jBJRAXa+/bSGzTq8ltnjA1DHk6iY7CxF+l61nUaAwBX9LRxLpJyxSqzE4J0dP
24+fJPtz39P9IkSTpMJiFgD0JxmfevPVyb8FB5zSS0wIa2ODo0QYanvnHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeY+2Ro0ssCkQg1wI8aJIFvFRWRMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvVjVqN1pHalN5d0tSQ0RYQWp4b2tnVzhWRlpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9oMA0G
CSqGSIb3DQEBCwUAA4IBAQATJZpzamtq9unkyXLIVOD/E5xBgpUCLYjbjS+h4rxL
NzuoM9WXv4iVfuKmmTrPoKzDU6p1QOY8T4IT3MH3h+XMkVF9H4yR2wMxeKwILNmF
cjf8d+OF/gKMsGBcW1flB17EE9zghWRSzoPA/lnGytSVJG63hbdKMC9ivFhWTOkP
JrzycIJ1y5rJulKycCwY1EfxyCwd0qKktiNTaRAFRNeJJmD2NLbSWEEgUYuSKB/a
J64hrjwY8uh414vho/7aBEOSiibgTv2M5TQROvCAnS+sH45wG04RtdKFtLrbOLE2
792YP3/wlhCioZT2f58u3xFXpGDAXxE4q+5gKQ/Qgi5g
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:19 2025 by rpki-client