Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7fsosqbiBQdAtUGRdgUmN3EHPfM.roa
File: 7fsosqbiBQdAtUGRdgUmN3EHPfM.roa (raw, json)
Hash identifier: gUP3FISQfEkQ9sqKyzHK76pFj6Bswe+/6RMiZWulsLo=
Subject key identifier: ED:FB:28:B2:A6:E2:05:07:40:B5:41:91:76:05:26:37:71:07:3D:F3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22138A9640B755FA75D25C1441873
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7fsosqbiBQdAtUGRdgUmN3EHPfM.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60106
IP address blocks: 81.15.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:21:38:a9:64:0b:75:5f:a7:5d:25:c1:44:18:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edfb28b2a6e2050740b541917605263771073df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:5e:fa:a2:ab:2b:c1:ac:62:24:7b:d8:35:
1a:d3:90:0d:f8:8b:3d:3a:1d:4a:97:ce:72:03:88:
a4:2d:0d:09:97:90:04:23:f1:05:13:e2:5e:f5:b0:
45:e5:f5:06:53:9b:7d:29:26:6b:ce:6e:38:54:05:
a1:66:4f:bf:e9:c1:cb:15:e7:bc:26:dc:88:3d:23:
88:3d:f1:53:2f:11:d2:e2:65:e5:db:a2:f1:94:2e:
ec:7d:90:db:7e:03:ff:00:1d:36:cb:2e:7b:d2:59:
68:c6:64:4e:67:91:74:86:05:e6:09:be:80:cb:ea:
e3:b0:df:ee:27:5b:5c:01:2b:78:b3:84:8d:d3:b3:
3f:8f:45:33:bc:7a:2b:dd:f8:14:90:9d:6a:2a:aa:
6c:ce:95:e0:17:2e:26:73:5e:44:b5:a3:e3:a4:f8:
ae:ee:d6:b2:98:4b:14:a1:ab:ac:63:9e:6a:50:c5:
de:bc:a9:1e:84:74:78:4c:03:99:2a:b5:61:cb:6f:
db:bf:db:0c:89:be:ff:1b:4f:d0:38:25:98:c4:ee:
64:bb:0e:77:b1:e6:3a:4a:ca:d9:be:fa:b2:a8:94:
62:da:4c:42:d3:2e:63:29:6c:cb:1a:c2:7d:32:e7:
a9:a5:88:bd:76:bd:cb:03:1a:ff:54:a6:b5:92:a2:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:28:B2:A6:E2:05:07:40:B5:41:91:76:05:26:37:71:07:3D:F3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7fsosqbiBQdAtUGRdgUmN3EHPfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.167.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b9:d2:2a:54:22:b0:dd:ea:9a:a0:0f:95:30:1a:d4:6d:06:
2e:50:03:32:7d:0b:9e:51:97:91:e3:a5:2d:53:a4:42:35:39:
e1:a5:98:f2:70:d1:a5:9c:0e:86:1a:1e:dc:7e:8c:bc:e8:fd:
9a:81:56:df:bb:26:2a:fa:ab:27:04:af:d3:da:eb:68:0d:08:
63:2a:6f:6d:2b:b4:67:3a:13:58:1d:0e:b7:3f:43:be:05:52:
75:56:8f:e4:1a:fe:8f:4e:9b:bc:29:b5:f9:cd:c9:c4:84:cd:
f8:27:35:9b:95:19:f1:0b:38:e4:e2:79:db:a1:9f:63:70:ca:
32:c7:7e:4b:0e:1a:1d:5f:58:a3:5f:8b:de:ca:46:b8:c0:59:
b2:e2:bd:5f:06:8d:3f:c2:1b:7e:9d:a0:b6:b0:62:02:ac:b2:
12:c4:ec:f7:25:15:1e:43:af:69:9c:b0:52:f0:12:75:d9:7d:
99:d1:ac:07:49:31:b2:b9:9f:12:62:db:5a:7b:03:78:6c:ab:
41:be:55:cb:9f:6b:1b:51:de:01:07:67:fc:43:8e:80:da:3d:
42:81:da:45:cd:30:f6:36:db:70:c4:34:bb:d0:e8:5a:41:2b:
f6:39:ba:07:c6:91:02:98:0d:18:b2:23:d8:43:65:66:b1:78:
f2:b6:47:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsiE4qWQLdV+nXSXBRBhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGZiMjhiMmE2ZTIwNTA3NDBiNTQxOTE3NjA1MjYzNzcxMDczZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vJe+qKrK8GsYiR72DUa05AN+Is9
Oh1Kl85yA4ikLQ0Jl5AEI/EFE+Je9bBF5fUGU5t9KSZrzm44VAWhZk+/6cHLFee8
JtyIPSOIPfFTLxHS4mXl26LxlC7sfZDbfgP/AB02yy570lloxmROZ5F0hgXmCb6A
y+rjsN/uJ1tcASt4s4SN07M/j0UzvHor3fgUkJ1qKqpszpXgFy4mc15EtaPjpPiu
7taymEsUoausY55qUMXevKkehHR4TAOZKrVhy2/bv9sMib7/G0/QOCWYxO5kuw53
seY6SsrZvvqyqJRi2kxC0y5jKWzLGsJ9MueppYi9dr3LAxr/VKa1kqL0gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO37KLKm4gUHQLVBkXYFJjdxBz3zMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvN2Zzb3NxYmlCUWRBdFVHUmRnVW1OM0VIUGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ+nMA0G
CSqGSIb3DQEBCwUAA4IBAQAWudIqVCKw3eqaoA+VMBrUbQYuUAMyfQueUZeR46Ut
U6RCNTnhpZjycNGlnA6GGh7cfoy86P2agVbfuyYq+qsnBK/T2utoDQhjKm9tK7Rn
OhNYHQ63P0O+BVJ1Vo/kGv6PTpu8KbX5zcnEhM34JzWblRnxCzjk4nnboZ9jcMoy
x35LDhodX1ijX4veyka4wFmy4r1fBo0/wht+naC2sGICrLISxOz3JRUeQ69pnLBS
8BJ12X2Z0awHSTGyuZ8SYttaewN4bKtBvlXLn2sbUd4BB2f8Q46A2j1CgdpFzTD2
NttwxDS70OhaQSv2OboHxpECmA0YsiPYQ2VmsXjytkfK
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:09 2025 by rpki-client