Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa
File: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (raw, json)
Hash identifier: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=
Subject key identifier: 73:92:A0:C7:D3:3F:A5:9A:32:0B:E1:6E:2B:2C:EB:73:46:86:3C:8E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3DE8C32C7ADEB06838444F73A8A7
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 185.173.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:e8:c3:2c:7a:de:b0:68:38:44:4f:73:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7392a0c7d33fa59a320be16e2b2ceb7346863c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:e8:f0:a2:13:19:bb:67:fe:7e:60:ec:20:
b8:12:f7:04:c1:73:14:77:19:95:02:9d:38:09:38:
c1:f1:7a:d3:45:08:17:cc:63:02:dc:9e:53:81:62:
40:27:e7:e3:0a:77:7a:c5:af:ce:49:15:08:f9:3c:
9b:a0:1c:65:0a:f3:e2:38:31:74:40:96:06:4a:fe:
4c:fa:71:95:9b:d3:69:e4:f4:dd:07:71:1c:1a:00:
1e:75:d7:c4:a9:fd:ec:37:a2:5c:57:c5:48:2e:23:
12:b1:c8:a4:79:c8:16:8a:ca:6d:09:f5:6e:41:3e:
ed:a8:c1:83:c7:dc:c0:d1:bf:ac:71:db:32:97:0e:
80:95:45:b0:1b:b3:8e:f9:5a:7e:31:97:0d:eb:d8:
be:a2:ac:c4:3d:70:88:d5:ed:84:dd:f0:22:30:fc:
91:8f:fd:20:ea:4b:0e:a2:14:db:02:bb:ec:a2:dc:
38:6b:30:ad:97:49:fb:86:db:74:d9:51:cd:22:e2:
9d:ad:17:51:3e:1e:2f:31:75:db:e1:43:5b:0d:55:
9e:40:fd:18:c0:63:70:2d:60:a2:da:49:ae:d9:9b:
8a:e1:ee:d7:52:53:7e:08:aa:8f:d7:5f:01:63:39:
39:2d:1e:03:9d:f1:1a:58:7d:df:4e:a8:54:f7:e9:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:A0:C7:D3:3F:A5:9A:32:0B:E1:6E:2B:2C:EB:73:46:86:3C:8E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ff:5c:b5:fc:29:cc:17:20:6c:2c:c4:00:27:f0:91:3e:36:
6c:c1:7d:f5:82:15:34:4a:f0:3a:e5:60:cf:f7:d8:3f:c7:de:
c7:54:f6:d5:48:13:94:9e:fd:05:4a:72:59:50:12:69:95:30:
2f:80:2c:7a:01:50:88:96:2f:0b:34:fc:06:76:8a:5b:85:75:
90:72:d6:cf:0b:0d:48:e6:1f:7a:c4:93:43:34:24:e3:70:ed:
40:d7:36:23:a1:52:cf:c6:4f:bc:8e:43:cc:64:1e:48:6b:24:
e8:ba:df:2e:ee:45:00:14:c6:cb:15:8c:33:07:6d:12:d5:46:
74:5b:a5:b2:b1:c7:b1:03:76:58:b0:8e:8d:e9:d2:0e:83:c0:
96:6e:94:e8:c8:11:c9:95:9b:80:09:01:57:1b:0f:a6:9e:fe:
d5:cd:cd:71:2f:1e:10:21:58:a2:da:43:7f:e2:c4:a2:6c:36:
70:ea:ab:5d:86:a2:46:5c:90:6c:84:22:c3:30:f7:fe:96:da:
dd:74:10:24:ae:60:34:71:fc:3c:00:10:38:16:46:15:d6:4b:
df:bc:9b:bd:43:87:f0:6f:09:15:79:6d:10:08:23:76:9a:d7:
ce:94:c7:da:4d:b9:84:ae:6d:74:74:d3:e5:30:25:91:02:ce:
24:cb:0c:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjD3owyx63rBoOERPc6inMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzkyYTBjN2QzM2ZhNTlhMzIwYmUxNmUyYjJjZWI3MzQ2ODYzYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tzo8KITGbtn/n5g7CC4EvcEwXMU
dxmVAp04CTjB8XrTRQgXzGMC3J5TgWJAJ+fjCnd6xa/OSRUI+TyboBxlCvPiODF0
QJYGSv5M+nGVm9Np5PTdB3EcGgAeddfEqf3sN6JcV8VILiMSscikecgWisptCfVu
QT7tqMGDx9zA0b+scdsylw6AlUWwG7OO+Vp+MZcN69i+oqzEPXCI1e2E3fAiMPyR
j/0g6ksOohTbArvsotw4azCtl0n7htt02VHNIuKdrRdRPh4vMXXb4UNbDVWeQP0Y
wGNwLWCi2kmu2ZuK4e7XUlN+CKqP118BYzk5LR4DnfEaWH3fTqhU9+moawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOSoMfTP6WaMgvhbiss63NGhjyOMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvYzVLZ3g5TV9wWm95Qy1GdUt5enJjMGFHUEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua2QMA0G
CSqGSIb3DQEBCwUAA4IBAQAM/1y1/CnMFyBsLMQAJ/CRPjZswX31ghU0SvA65WDP
99g/x97HVPbVSBOUnv0FSnJZUBJplTAvgCx6AVCIli8LNPwGdopbhXWQctbPCw1I
5h96xJNDNCTjcO1A1zYjoVLPxk+8jkPMZB5IayTout8u7kUAFMbLFYwzB20S1UZ0
W6WyscexA3ZYsI6N6dIOg8CWbpToyBHJlZuACQFXGw+mnv7Vzc1xLx4QIVii2kN/
4sSibDZw6qtdhqJGXJBshCLDMPf+ltrddBAkrmA0cfw8ABA4FkYV1kvfvJu9Q4fw
bwkVeW0QCCN2mtfOlMfaTbmErm10dNPlMCWRAs4kywxv
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:09:15 2025 by rpki-client