Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/5EeMt85pmHbrc8tS0uOEQ0w0A0s.roa
File: 5EeMt85pmHbrc8tS0uOEQ0w0A0s.roa (raw, json)
Hash identifier: /eaDHE3PXnv99OEgq/6Q5iqOF1TPVQlYSgHyv84hc3Q=
Subject key identifier: E4:47:8C:B7:CE:69:98:76:EB:73:CB:52:D2:E3:84:43:4C:34:03:4B
Certificate issuer: /CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Certificate serial: 01856DCB0E6753DFCFDC072EC6C49E6546BC
Authority key identifier: 91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/5EeMt85pmHbrc8tS0uOEQ0w0A0s.roa
Signing time: Sun 01 Jan 2023 14:45:02 +0000
ROA not before: Sun 01 Jan 2023 14:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 193.163.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:0e:67:53:df:cf:dc:07:2e:c6:c4:9e:65:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Validity
Not Before: Jan 1 14:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4478cb7ce699876eb73cb52d2e384434c34034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9e:49:a6:5f:74:6f:d8:24:ec:d3:1d:db:81:
91:00:d1:3b:11:e2:a4:14:72:9e:63:48:bc:bd:3f:
f3:3c:9c:64:6c:16:f8:d1:56:ae:96:96:3e:08:6a:
af:d2:55:8e:7e:32:8e:31:ce:60:40:6e:8e:da:8b:
5e:af:9e:97:2d:9f:b5:3a:1d:e3:44:ad:0d:ea:58:
c3:26:3a:16:60:ff:76:17:9e:b6:39:3f:02:37:1a:
ef:01:d1:0d:59:2b:8c:0a:fd:23:39:3f:8f:b7:9a:
59:d6:5b:7b:b1:5f:6e:6f:5f:b5:b6:15:7e:30:0b:
32:95:18:9b:c7:03:e9:bc:c1:93:b0:4e:ab:63:3f:
28:6f:76:6b:a2:c0:6e:49:ed:18:67:cc:4c:52:46:
44:9f:0d:35:aa:e0:03:d1:9e:f2:7e:66:c3:46:97:
3c:63:a9:8d:a4:54:1d:70:26:5a:0c:f6:ba:1a:b1:
fb:28:df:4f:53:6a:0a:e2:38:82:02:66:59:d7:24:
f2:3e:72:7c:54:af:9b:90:9a:b9:fe:b7:49:50:2a:
94:54:3c:63:68:90:32:cc:34:c5:43:15:42:01:a8:
64:95:f4:ba:11:33:88:05:5d:f4:87:5a:b3:60:00:
9b:b8:4b:de:3a:a0:21:7d:c0:7e:76:9e:da:3b:dd:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:8C:B7:CE:69:98:76:EB:73:CB:52:D2:E3:84:43:4C:34:03:4B
X509v3 Authority Key Identifier:
keyid:91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/5EeMt85pmHbrc8tS0uOEQ0w0A0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.203.0/24
Signature Algorithm: sha256WithRSAEncryption
69:eb:5f:12:cd:51:31:e4:b5:3c:00:5a:3a:8d:e2:55:35:60:
9a:c3:08:0d:eb:47:94:ae:cd:52:69:a7:8d:3e:e0:d2:bd:64:
62:96:8a:4f:e2:50:49:d4:e8:f7:91:04:e2:26:50:4e:e6:46:
d6:67:a5:ad:32:ee:6c:89:61:fe:56:bc:b2:a7:70:14:97:bb:
99:1d:b6:91:f2:5e:c7:be:f3:e8:48:83:d3:fe:39:16:0a:6a:
5a:40:07:1c:81:df:bc:dc:df:c6:23:8a:51:00:21:5f:01:9c:
bb:e1:6a:ce:2a:8e:ba:78:3f:0f:48:e6:34:ad:7d:ca:3e:e3:
3c:dd:6c:0b:5b:43:6c:5d:13:a0:11:fc:c9:b7:0d:19:64:79:
f5:51:52:52:24:12:21:b7:90:fa:2e:4b:59:ce:5a:ea:7f:c9:
28:51:48:dd:6d:c7:0b:34:28:e8:ca:7e:b6:05:a5:1c:2b:fe:
dd:67:79:e2:7d:9a:7b:49:89:9d:75:0a:2c:35:c6:33:35:f2:
0e:9e:bb:69:d8:45:0e:91:73:00:c2:c3:96:fd:97:5e:a0:0e:
b2:af:83:7f:04:8e:0a:3c:ea:7e:a6:38:b3:cc:3f:48:37:f9:
7f:6d:ee:fd:13:c5:0f:7e:90:2a:17:a8:d3:19:d9:e5:c3:5b:
c6:67:d9:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtyw5nU9/P3AcuxsSeZUa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYTZlN2NlN2Q1YTAyMWZhYzMzMmJhZjg1NDEwYjVlM2Q2
MWNkOTQwHhcNMjMwMTAxMTQ0NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDQ3OGNiN2NlNjk5ODc2ZWI3M2NiNTJkMmUzODQ0MzRjMzQwMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ5Jpl90b9gk7NMd24GRANE7EeKk
FHKeY0i8vT/zPJxkbBb40VaulpY+CGqv0lWOfjKOMc5gQG6O2oter56XLZ+1Oh3j
RK0N6ljDJjoWYP92F562OT8CNxrvAdENWSuMCv0jOT+Pt5pZ1lt7sV9ub1+1thV+
MAsylRibxwPpvMGTsE6rYz8ob3ZrosBuSe0YZ8xMUkZEnw01quAD0Z7yfmbDRpc8
Y6mNpFQdcCZaDPa6GrH7KN9PU2oK4jiCAmZZ1yTyPnJ8VK+bkJq5/rdJUCqUVDxj
aJAyzDTFQxVCAahklfS6ETOIBV30h1qzYACbuEveOqAhfcB+dp7aO909wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORHjLfOaZh263PLUtLjhENMNANLMB8GA1UdIwQY
MBaAFJGm5859WgIfrDMrr4VBC149Yc2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FibnpuMWFBaC1zTXl1dmhVRUxYajFoelpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85ZGQ3MzItMzdhOS00ZDc2LWFlYjct
YmZkNjUyYjdjZjJmLzEvNUVlTXQ4NXBtSGJyYzh0UzB1T0VRMHcwQTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85ZGQ3MzItMzdhOS00ZDc2LWFlYjctYmZkNjUyYjdjZjJm
LzEva2FibnpuMWFBaC1zTXl1dmhVRUxYajFoelpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPLMA0G
CSqGSIb3DQEBCwUAA4IBAQBp618SzVEx5LU8AFo6jeJVNWCawwgN60eUrs1SaaeN
PuDSvWRilopP4lBJ1Oj3kQTiJlBO5kbWZ6WtMu5siWH+Vryyp3AUl7uZHbaR8l7H
vvPoSIPT/jkWCmpaQAccgd+83N/GI4pRACFfAZy74WrOKo66eD8PSOY0rX3KPuM8
3WwLW0NsXROgEfzJtw0ZZHn1UVJSJBIht5D6LktZzlrqf8koUUjdbccLNCjoyn62
BaUcK/7dZ3nifZp7SYmddQosNcYzNfIOnrtp2EUOkXMAwsOW/ZdeoA6yr4N/BI4K
POp+pjizzD9IN/l/be79E8UPfpAqF6jTGdnlw1vGZ9kF
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:37 2025 by rpki-client