Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/paTtQS2NyaHbDb3tIklc31w5FV8.roa
File: paTtQS2NyaHbDb3tIklc31w5FV8.roa (raw, json)
Hash identifier: dbTy5Fz797iSwCnHiJDN025/h7actmdKnSzDt44pjn0=
Subject key identifier: A5:A4:ED:41:2D:8D:C9:A1:DB:0D:BD:ED:22:49:5C:DF:5C:39:15:5F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2164ED89D7686886F97318B4B9985
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/paTtQS2NyaHbDb3tIklc31w5FV8.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39437
IP address blocks: 195.136.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:4e:d8:9d:76:86:88:6f:97:31:8b:4b:99:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5a4ed412d8dc9a1db0dbded22495cdf5c39155f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:08:a4:a4:9f:aa:40:33:ba:79:d7:24:84:
c8:e0:5c:67:6c:cd:e5:93:38:8a:56:e2:f0:bf:3b:
50:55:bb:c7:47:73:9f:1c:89:20:b6:1a:59:37:d6:
05:25:36:36:e6:2b:47:eb:bf:a1:97:30:03:00:9f:
ad:df:6d:52:8e:10:19:c7:de:6b:24:eb:a1:79:85:
bd:34:1c:e5:16:83:32:bc:3f:ad:35:f6:54:89:a5:
c5:da:c7:57:e9:79:07:b9:61:dc:b2:54:13:6a:f6:
8b:de:8e:3a:9e:c3:bf:9c:27:a5:67:a5:ce:4b:de:
84:4c:0c:d8:74:f9:7f:50:2f:82:6f:e0:eb:ad:3a:
34:bc:2b:da:ff:45:b1:bd:db:7a:50:09:58:85:15:
74:5d:64:ad:8a:87:83:1f:e9:0f:c7:dd:f4:db:02:
fb:32:a3:0c:a9:21:a6:a6:1f:f2:bb:68:9e:bc:6a:
ba:51:bc:f9:23:6e:99:7f:f5:13:0c:ef:e5:00:95:
90:83:8b:03:4b:c2:ff:3e:3e:9e:5e:00:21:92:9e:
40:38:ea:b0:d0:d2:79:d7:83:5b:24:e4:44:0b:85:
c3:58:c9:5d:41:45:75:86:1e:85:fb:59:f6:3e:68:
9d:7d:57:52:67:11:68:22:14:9f:c2:b1:8b:ae:1b:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A4:ED:41:2D:8D:C9:A1:DB:0D:BD:ED:22:49:5C:DF:5C:39:15:5F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/paTtQS2NyaHbDb3tIklc31w5FV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.79.0/24
Signature Algorithm: sha256WithRSAEncryption
50:83:2c:04:1f:98:e0:8b:62:fe:64:57:a9:13:de:58:01:89:
45:94:8b:25:aa:9d:8d:42:f3:a4:15:49:fc:23:10:01:e3:b5:
7a:71:b3:30:ff:d9:72:24:23:d0:11:2d:ef:74:94:71:02:37:
2e:d9:97:73:76:28:15:dc:cc:4d:54:8a:75:fd:94:4e:b0:46:
a7:f7:15:4e:e0:2f:ad:de:35:72:48:48:8c:61:fa:c7:47:04:
81:ea:53:4d:00:b8:f1:10:a2:19:41:cc:6e:27:9e:22:23:f9:
9d:57:35:7f:66:49:7b:62:ed:26:30:d0:d4:26:42:d4:ab:1d:
29:b3:5e:35:7c:04:4c:2d:55:e5:c0:e3:6e:91:41:8d:40:9a:
0a:94:cc:19:d0:00:ea:26:4f:e9:73:2e:d5:05:43:96:28:af:
29:85:18:d8:8e:5a:d6:b7:d6:5a:7b:7d:f4:d6:18:77:5d:88:
f1:97:fc:57:50:b2:4f:42:2e:59:7b:25:66:2f:8d:44:02:6c:
13:f6:26:b9:6a:67:51:14:bd:f6:54:31:a7:39:46:92:1d:cd:
fd:be:26:b4:6d:ae:70:0b:12:cd:84:8e:3b:6a:52:4f:6e:5c:
a5:a8:e1:8f:d6:d4:9e:08:67:fe:6a:07:d2:3f:a6:28:d4:60:
64:db:35:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhshZO2J12hohvlzGLS5mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWE0ZWQ0MTJkOGRjOWExZGIwZGJkZWQyMjQ5NWNkZjVjMzkxNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAgIpKSfqkAzunnXJITI4FxnbM3l
kziKVuLwvztQVbvHR3OfHIkgthpZN9YFJTY25itH67+hlzADAJ+t321SjhAZx95r
JOuheYW9NBzlFoMyvD+tNfZUiaXF2sdX6XkHuWHcslQTavaL3o46nsO/nCelZ6XO
S96ETAzYdPl/UC+Cb+DrrTo0vCva/0Wxvdt6UAlYhRV0XWStioeDH+kPx9302wL7
MqMMqSGmph/yu2ievGq6Ubz5I26Zf/UTDO/lAJWQg4sDS8L/Pj6eXgAhkp5AOOqw
0NJ514NbJOREC4XDWMldQUV1hh6F+1n2PmidfVdSZxFoIhSfwrGLrhuRuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWk7UEtjcmh2w297SJJXN9cORVfMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvcGFUdFFTMk55YUhiRGIzdElrbGMzMXc1RlY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4hPMA0G
CSqGSIb3DQEBCwUAA4IBAQBQgywEH5jgi2L+ZFepE95YAYlFlIslqp2NQvOkFUn8
IxAB47V6cbMw/9lyJCPQES3vdJRxAjcu2ZdzdigV3MxNVIp1/ZROsEan9xVO4C+t
3jVySEiMYfrHRwSB6lNNALjxEKIZQcxuJ54iI/mdVzV/Zkl7Yu0mMNDUJkLUqx0p
s141fARMLVXlwONukUGNQJoKlMwZ0ADqJk/pcy7VBUOWKK8phRjYjlrWt9Zae330
1hh3XYjxl/xXULJPQi5ZeyVmL41EAmwT9ia5amdRFL32VDGnOUaSHc39via0ba5w
CxLNhI47alJPblylqOGP1tSeCGf+agfSP6Yo1GBk2zV/
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:35 2025 by rpki-client