Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/49sPigCP8WL5inOPbcFneEtB7jg.roa
File: 49sPigCP8WL5inOPbcFneEtB7jg.roa (raw, json)
Hash identifier: fIjWxDr7qsziDaCGl3gCRMuzodVjr3V4nH7b5v0Worc=
Subject key identifier: E3:DB:0F:8A:00:8F:F1:62:F9:8A:73:8F:6D:C1:67:78:4B:41:EE:38
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2292663DA0ED2872E40577F63A865
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/49sPigCP8WL5inOPbcFneEtB7jg.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199260
IP address blocks: 82.177.30.0/23 maxlen: 23
195.136.12.0/23 maxlen: 23
195.136.78.0/24 maxlen: 24
195.136.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:29:26:63:da:0e:d2:87:2e:40:57:7f:63:a8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3db0f8a008ff162f98a738f6dc167784b41ee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:84:38:53:ba:6c:05:56:62:38:3f:f1:d4:
e5:b8:af:93:22:b3:d6:1d:f0:71:b1:a2:c5:a4:a6:
b6:d8:2d:58:78:3a:9f:b1:06:a0:0b:d4:78:bc:0f:
f5:ae:d0:36:96:2f:9f:21:82:57:e3:ea:b1:da:13:
20:2e:86:4d:a4:3a:2e:95:2b:12:8b:b8:58:13:3f:
05:32:38:f7:1f:66:dd:c1:11:f8:9e:e7:00:fd:a0:
fa:a8:87:87:be:96:1f:70:df:02:84:98:26:bc:1c:
c9:74:ae:b9:98:cc:95:1a:c0:9c:3d:5b:33:d8:4c:
6f:84:5f:f8:72:e9:2c:ec:2e:ba:ba:eb:3e:56:4d:
cb:c1:84:54:d9:df:61:68:44:7f:12:2b:e6:8e:c1:
0c:c1:05:97:be:d0:9f:ff:f4:18:c8:8f:9d:c4:73:
9d:76:de:7b:e9:c2:af:85:b1:dc:d5:d3:fd:d4:b3:
f4:26:84:57:a6:d3:cf:b1:64:30:3e:88:6b:24:52:
e3:79:ff:9c:79:ac:d6:50:c2:09:0d:d2:ce:7c:51:
57:20:3e:89:35:16:98:bd:5d:38:73:cb:e7:08:6c:
cf:18:b6:71:fe:34:9a:88:eb:07:7f:ee:06:dc:c4:
49:46:74:af:3d:a2:6d:b1:fa:d6:a0:7b:06:a6:28:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DB:0F:8A:00:8F:F1:62:F9:8A:73:8F:6D:C1:67:78:4B:41:EE:38
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/49sPigCP8WL5inOPbcFneEtB7jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.30.0/23
195.136.12.0/23
195.136.78.0/24
195.136.158.0/23
Signature Algorithm: sha256WithRSAEncryption
54:1a:54:fa:80:f9:ac:43:b5:a9:d6:c9:1b:41:63:d5:6a:d9:
d0:dd:1a:ad:45:f1:3f:22:ea:eb:18:3d:96:71:0c:52:80:df:
1f:3e:19:a8:fc:f4:a0:0f:ab:c5:d6:de:c6:20:65:fa:1d:fa:
9c:ea:a7:59:6b:83:c2:5e:6c:db:a9:e3:e2:07:42:90:b2:53:
97:ff:98:ff:89:9f:92:29:cb:c9:ce:83:e9:6b:9e:c6:14:2b:
52:82:61:79:88:48:ec:a8:c8:8f:ee:2c:ad:7a:69:d1:95:ca:
a8:3b:9b:0b:5a:02:ec:1a:7e:7a:be:cb:b0:44:d8:a5:0a:bd:
6b:b7:18:d8:3a:ab:74:fe:06:a3:3b:9e:98:1b:7c:25:dd:64:
d1:90:35:e4:7f:65:48:57:30:26:4a:8b:8d:5a:b2:34:0d:7c:
16:11:a7:f9:64:55:88:eb:d3:89:fb:2c:29:f2:14:a9:bc:05:
a0:3e:87:81:20:2e:72:43:ab:45:f5:51:cd:6f:2f:a9:b5:1c:
de:3a:ba:9e:e1:f8:d5:c6:2d:1e:f7:9e:2d:d0:b8:21:ae:db:
c8:4c:bf:14:11:8e:31:95:e1:a2:af:3b:5a:3e:29:44:c3:b6:
03:49:71:bb:b2:1e:10:6d:96:9e:77:a0:28:c4:6f:2a:aa:2c:
bd:97:1f:5a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhsikmY9oO0ocuQFd/Y6hlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2RiMGY4YTAwOGZmMTYyZjk4YTczOGY2ZGMxNjc3ODRiNDFlZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw2EOFO6bAVWYjg/8dTluK+TIrPW
HfBxsaLFpKa22C1YeDqfsQagC9R4vA/1rtA2li+fIYJX4+qx2hMgLoZNpDoulSsS
i7hYEz8FMjj3H2bdwRH4nucA/aD6qIeHvpYfcN8ChJgmvBzJdK65mMyVGsCcPVsz
2ExvhF/4cuks7C66uus+Vk3LwYRU2d9haER/EivmjsEMwQWXvtCf//QYyI+dxHOd
dt576cKvhbHc1dP91LP0JoRXptPPsWQwPohrJFLjef+ceazWUMIJDdLOfFFXID6J
NRaYvV04c8vnCGzPGLZx/jSaiOsHf+4G3MRJRnSvPaJtsfrWoHsGpijtGQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOPbD4oAj/Fi+Ypzj23BZ3hLQe44MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvNDlzUGlnQ1A4V0w1aW5PUGJjRm5lRXRCN2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUrEeAwQB
w4gMAwQAw4hOAwQBw4ieMA0GCSqGSIb3DQEBCwUAA4IBAQBUGlT6gPmsQ7Wp1skb
QWPVatnQ3RqtRfE/IurrGD2WcQxSgN8fPhmo/PSgD6vF1t7GIGX6Hfqc6qdZa4PC
XmzbqePiB0KQslOX/5j/iZ+SKcvJzoPpa57GFCtSgmF5iEjsqMiP7iytemnRlcqo
O5sLWgLsGn56vsuwRNilCr1rtxjYOqt0/gajO56YG3wl3WTRkDXkf2VIVzAmSouN
WrI0DXwWEaf5ZFWI69OJ+ywp8hSpvAWgPoeBIC5yQ6tF9VHNby+ptRzeOrqe4fjV
xi0e954t0LghrtvITL8UEY4xleGirztaPilEw7YDSXG7sh4QbZaed6AoxG8qqiy9
lx9a
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:27 2025 by rpki-client