Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa
File: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (raw, json)
Hash identifier: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=
Subject key identifier: 4E:0D:67:E4:5A:75:A4:97:7B:CC:13:BA:5B:F3:5C:62:D7:14:72:3B
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B22C0AE8C36050DAEB54D6260884ED
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34909
IP address blocks: 95.169.210.0/23 maxlen: 23
95.169.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2c:0a:e8:c3:60:50:da:eb:54:d6:26:08:84:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e0d67e45a75a4977bcc13ba5bf35c62d714723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:58:8a:6d:32:a9:db:74:1d:e1:3b:bc:80:
81:7e:1f:d1:72:16:6f:7d:c7:8e:c1:c6:86:c9:ff:
31:8a:c0:f7:8e:46:73:4f:20:6b:db:37:93:a6:b0:
83:91:c8:95:ff:71:67:85:22:6a:ea:d6:ef:77:18:
71:93:8e:2b:73:de:85:40:6b:8b:cf:06:47:b3:cd:
48:82:24:77:bd:34:9c:1c:94:d6:c2:10:30:b3:fa:
f0:e2:76:12:e2:5b:3d:53:40:76:20:cb:06:c2:23:
9e:e7:ee:27:0a:d7:40:12:46:2a:01:93:3f:e3:f7:
86:69:70:8b:16:51:a8:bc:ec:02:d8:1c:d8:b3:7d:
10:56:43:86:5d:5e:01:ab:50:35:59:d1:8e:bf:cc:
66:f4:ae:f7:13:5b:56:90:39:c3:fd:60:ab:5d:4b:
0d:2c:75:a4:98:14:5d:9b:21:49:75:29:92:50:5a:
3e:7f:c1:2d:c1:29:cd:89:d7:c9:c6:3e:9f:53:b0:
ab:2c:1c:14:ed:b8:7d:8b:4f:28:c5:08:1e:ea:41:
71:e2:8d:87:3b:6d:f2:db:5a:5c:57:18:05:8b:8c:
5c:08:53:cb:8b:79:de:49:b6:b1:ae:4f:9a:fb:aa:
3a:a5:88:1d:37:16:00:56:97:b0:d9:3c:81:45:8e:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:67:E4:5A:75:A4:97:7B:CC:13:BA:5B:F3:5C:62:D7:14:72:3B
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.210.0-95.169.212.255
Signature Algorithm: sha256WithRSAEncryption
1d:ae:d5:fe:bf:8c:8d:cb:ea:5f:fa:20:ed:58:6c:6b:66:62:
75:a5:07:82:fd:39:6c:ed:b3:09:c4:ac:f4:da:6e:f5:df:ec:
f4:63:e3:79:a8:d6:2f:ab:8c:0d:f0:4b:8c:d8:d7:08:13:94:
ae:17:74:20:1a:69:03:9c:9b:24:c1:08:55:45:2e:0d:6b:7d:
82:ec:b5:2c:55:4c:c8:cb:63:66:22:e0:fc:2d:25:d5:60:da:
01:a4:16:ac:4e:01:51:7f:aa:8b:c2:87:5b:37:7c:2a:f5:f8:
8d:c7:e1:30:37:09:6f:87:67:c5:b5:12:d8:4d:d5:fd:12:14:
e6:f8:21:88:a3:ad:48:3c:cf:c1:bb:2f:7e:e1:d2:1a:a4:24:
8b:d1:b1:b7:aa:04:7e:39:cb:aa:7e:67:f6:a8:b2:11:99:7c:
a5:a9:0f:fe:dd:75:66:8a:1d:65:1d:56:da:df:16:cb:f5:2b:
2c:be:2a:3c:52:ae:ee:ee:09:cb:69:e2:38:38:f5:d7:84:fe:
3d:3c:0c:79:d7:4a:e2:e3:75:01:d5:1f:e9:3c:8a:ed:86:8e:
d3:a0:68:ae:7e:19:f3:f4:fd:76:a3:60:19:b1:88:17:15:0c:
de:12:f4:4e:c1:15:e1:6d:87:9b:70:2e:88:58:45:47:02:01:
51:d1:c4:01
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhsiwK6MNgUNrrVNYmCITtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjUwMTAxMTE0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTBkNjdlNDVhNzVhNDk3N2JjYzEzYmE1YmYzNWM2MmQ3MTQ3MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SxYim0yqdt0HeE7vICBfh/RchZv
fceOwcaGyf8xisD3jkZzTyBr2zeTprCDkciV/3FnhSJq6tbvdxhxk44rc96FQGuL
zwZHs81IgiR3vTScHJTWwhAws/rw4nYS4ls9U0B2IMsGwiOe5+4nCtdAEkYqAZM/
4/eGaXCLFlGovOwC2BzYs30QVkOGXV4Bq1A1WdGOv8xm9K73E1tWkDnD/WCrXUsN
LHWkmBRdmyFJdSmSUFo+f8EtwSnNidfJxj6fU7CrLBwU7bh9i08oxQge6kFx4o2H
O23y21pcVxgFi4xcCFPLi3neSbaxrk+a+6o6pYgdNxYAVpew2TyBRY7XYQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE4NZ+RadaSXe8wTulvzXGLXFHI7MB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvVGcxbjVGcDFwSmQ3ekJPNldfTmNZdGNVY2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFfqdID
BABfqdQwDQYJKoZIhvcNAQELBQADggEBAB2u1f6/jI3L6l/6IO1YbGtmYnWlB4L9
OWztswnErPTabvXf7PRj43mo1i+rjA3wS4zY1wgTlK4XdCAaaQOcmyTBCFVFLg1r
fYLstSxVTMjLY2Yi4PwtJdVg2gGkFqxOAVF/qovCh1s3fCr1+I3H4TA3CW+HZ8W1
EthN1f0SFOb4IYijrUg8z8G7L37h0hqkJIvRsbeqBH45y6p+Z/aoshGZfKWpD/7d
dWaKHWUdVtrfFsv1Kyy+KjxSru7uCctp4jg49deE/j08DHnXSuLjdQHVH+k8iu2G
jtOgaK5+GfP0/XajYBmxiBcVDN4S9E7BFeFth5twLohYRUcCAVHRxAE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:29 2025 by rpki-client