Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/5Tj38Bsn0hJUYrmVNSahq5IYxas.roa
File: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (raw, json)
Hash identifier: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=
Subject key identifier: E5:38:F7:F0:1B:27:D2:12:54:62:B9:95:35:26:A1:AB:92:18:C5:AB
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0194222037F57DB396038346CA98312EFF2D
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/5Tj38Bsn0hJUYrmVNSahq5IYxas.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 93.180.132.0/24 maxlen: 24
93.180.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:f5:7d:b3:96:03:83:46:ca:98:31:2e:ff:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e538f7f01b27d2125462b9953526a1ab9218c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3c:59:a7:c2:00:72:5a:e1:4a:1c:6f:8f:ef:
ab:81:31:03:a8:51:72:1e:2a:a8:14:15:f2:5e:1e:
79:db:67:be:7a:31:56:08:73:47:76:66:2b:2c:18:
2c:c1:53:f9:7e:eb:23:f8:bf:7d:3f:2e:3b:10:4f:
5e:c6:ce:6c:c8:69:c3:0f:16:a5:bc:08:9f:7e:2e:
93:4b:82:fa:ba:be:07:3b:33:7a:4f:35:1b:f0:41:
ed:30:61:f3:08:a0:5a:95:26:b2:b9:38:94:9f:fc:
02:d1:b7:b5:06:24:7d:4c:fc:35:a9:5c:3c:b6:3a:
e2:e5:f0:05:e8:f8:df:92:53:77:e8:09:27:13:53:
7b:23:94:7c:dc:e7:7d:e8:7b:47:02:71:d5:33:28:
9b:27:9c:db:88:09:bc:16:fa:26:0b:ee:0f:8b:a9:
c2:dc:48:3e:3e:9d:13:90:99:2c:1d:1c:2a:e0:0a:
65:e0:3c:17:3c:47:64:b6:63:e7:40:f9:0b:1e:fd:
18:4e:f0:d9:04:13:37:be:fd:50:c4:84:98:c5:ce:
2e:72:a9:b9:17:d5:80:c9:52:24:9b:1b:12:67:3d:
41:7a:1c:68:01:7d:99:41:8c:d9:d2:56:09:42:be:
23:c8:d4:50:f4:24:6b:ad:4e:72:28:ef:d4:18:f8:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:F7:F0:1B:27:D2:12:54:62:B9:95:35:26:A1:AB:92:18:C5:AB
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/5Tj38Bsn0hJUYrmVNSahq5IYxas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:b7:29:79:c0:ac:38:c3:99:a9:18:6b:1d:f7:d4:ef:6a:55:
13:cf:b2:1b:bd:34:b1:0e:44:52:63:0e:b3:49:db:cb:42:7d:
81:c8:8e:61:42:ba:8d:23:a2:11:07:5c:aa:9c:dc:13:d3:89:
65:8b:fe:d9:3b:46:85:40:96:32:67:dd:63:87:7c:39:9a:fb:
b3:28:d2:15:d2:5b:ae:8d:12:4c:cf:86:7c:2c:0b:ba:93:a2:
fb:17:52:33:f5:2c:2f:b5:a3:3f:09:4e:a7:3d:3e:38:6c:9e:
62:63:bc:9e:6c:67:11:eb:3d:51:21:88:18:fa:e0:0f:d1:1f:
e3:a9:7d:df:7a:ed:59:e9:e8:1e:54:03:0c:87:1c:23:10:f7:
28:9b:a8:4d:5a:82:3f:cd:2e:21:c9:91:49:b8:59:e7:79:17:
7a:64:8c:76:d3:60:fa:56:44:d7:42:51:99:ef:22:2e:be:bf:
1e:76:ca:c8:c6:8d:9e:e0:e1:5d:2e:09:e1:79:ed:3f:9b:f4:
bf:26:77:eb:4f:7e:f6:49:7d:97:8b:d2:5f:b4:1a:d9:69:d5:
bf:e6:ee:cd:97:ce:e5:0b:d9:59:c3:14:f7:a3:88:14:e3:05:
c0:83:e6:f5:ab:22:28:4f:0a:dd:1d:cc:66:e7:fc:80:a7:8c:
65:9a:e3:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIDf1fbOWA4NGypgxLv8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjUwMTAxMTM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTM4ZjdmMDFiMjdkMjEyNTQ2MmI5OTUzNTI2YTFhYjkyMThjNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zxZp8IAclrhShxvj++rgTEDqFFy
HiqoFBXyXh5522e+ejFWCHNHdmYrLBgswVP5fusj+L99Py47EE9exs5syGnDDxal
vAiffi6TS4L6ur4HOzN6TzUb8EHtMGHzCKBalSayuTiUn/wC0be1BiR9TPw1qVw8
tjri5fAF6PjfklN36AknE1N7I5R83Od96HtHAnHVMyibJ5zbiAm8FvomC+4Pi6nC
3Eg+Pp0TkJksHRwq4Apl4DwXPEdktmPnQPkLHv0YTvDZBBM3vv1QxISYxc4ucqm5
F9WAyVIkmxsSZz1BehxoAX2ZQYzZ0lYJQr4jyNRQ9CRrrU5yKO/UGPjnLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOU49/AbJ9ISVGK5lTUmoauSGMWrMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvNVRqMzhCc24waEpVWXJtVk5TYWhxNUlZeGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXbSEMA0G
CSqGSIb3DQEBCwUAA4IBAQAttyl5wKw4w5mpGGsd99TvalUTz7IbvTSxDkRSYw6z
SdvLQn2ByI5hQrqNI6IRB1yqnNwT04lli/7ZO0aFQJYyZ91jh3w5mvuzKNIV0luu
jRJMz4Z8LAu6k6L7F1Iz9SwvtaM/CU6nPT44bJ5iY7yebGcR6z1RIYgY+uAP0R/j
qX3feu1Z6egeVAMMhxwjEPcom6hNWoI/zS4hyZFJuFnneRd6ZIx202D6VkTXQlGZ
7yIuvr8edsrIxo2e4OFdLgnhee0/m/S/JnfrT372SX2Xi9JftBrZadW/5u7Nl87l
C9lZwxT3o4gU4wXAg+b1qyIoTwrdHcxm5/yAp4xlmuNH
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:31 2025 by rpki-client