Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/0AvhhCLyvTt0NFuXqsdXQlkgt40.roa
File: 0AvhhCLyvTt0NFuXqsdXQlkgt40.roa (raw, json)
Hash identifier: qoFiViNt1NPLAegmV87qtp91sKHUur5TCh4ALXmKols=
Subject key identifier: D0:0B:E1:84:22:F2:BD:3B:74:34:5B:97:AA:C7:57:42:59:20:B7:8D
Certificate issuer: /CN=7088b623105722db5289e409ae4a8c079d4f3938
Certificate serial: 018571FA210DA0594FB195A3B35CBFB13CF4
Authority key identifier: 70:88:B6:23:10:57:22:DB:52:89:E4:09:AE:4A:8C:07:9D:4F:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIi2IxBXIttSieQJrkqMB51POTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/0AvhhCLyvTt0NFuXqsdXQlkgt40.roa
Signing time: Mon 02 Jan 2023 10:14:55 +0000
ROA not before: Mon 02 Jan 2023 10:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 5.44.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:21:0d:a0:59:4f:b1:95:a3:b3:5c:bf:b1:3c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7088b623105722db5289e409ae4a8c079d4f3938
Validity
Not Before: Jan 2 10:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d00be18422f2bd3b74345b97aac757425920b78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:10:fa:45:bd:4b:9b:25:9d:58:9e:8f:c0:
a1:55:41:1f:84:24:68:bb:7e:f6:d2:c0:f6:c2:31:
84:9d:1c:29:61:dd:07:17:36:77:bf:ad:5e:92:85:
2e:88:62:9f:d6:25:df:8a:2e:3f:5d:20:86:4b:3d:
f6:a0:e3:68:b7:5e:39:a7:f6:e2:04:95:1f:64:cc:
2d:da:00:b9:5c:67:f9:89:16:50:d8:d5:8a:26:ce:
21:4a:ee:a9:0f:d6:68:8e:ca:90:11:08:d1:e3:47:
1d:66:bb:00:cc:bc:75:24:52:62:0b:ab:d6:cf:dd:
4d:3b:f3:81:90:bb:06:cb:a2:80:23:c7:61:a1:8a:
74:70:c9:ea:12:8d:76:47:2a:24:46:7c:f4:2c:02:
bd:30:98:99:70:42:45:3d:64:a8:90:4e:70:82:31:
0f:1a:1e:02:32:23:1f:1c:0c:21:72:3d:e1:fb:be:
25:83:b2:18:91:96:f1:d2:4f:99:c8:7f:2b:5e:0d:
76:0e:c9:1d:3e:c5:f1:c9:cf:c4:f2:13:3d:c0:71:
a9:01:cc:8a:79:d8:69:52:af:bc:be:c7:5b:f8:8c:
ac:b4:7b:86:1f:c1:2c:72:e1:2d:c6:eb:92:47:4f:
3e:41:31:10:af:3c:54:42:1c:ea:d9:c0:c6:7c:11:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:E1:84:22:F2:BD:3B:74:34:5B:97:AA:C7:57:42:59:20:B7:8D
X509v3 Authority Key Identifier:
keyid:70:88:B6:23:10:57:22:DB:52:89:E4:09:AE:4A:8C:07:9D:4F:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIi2IxBXIttSieQJrkqMB51POTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/0AvhhCLyvTt0NFuXqsdXQlkgt40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c44cb0-119d-47a6-aedd-9e8fc34fc3f2/1/cIi2IxBXIttSieQJrkqMB51POTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.250.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e0:7a:f9:9d:28:a9:c6:a2:52:f6:b1:9d:f9:34:4c:8d:a3:
cd:2a:e6:16:25:30:8e:01:82:d1:f8:92:df:41:a0:65:b3:de:
15:63:1b:8d:26:bc:29:bc:78:27:33:79:c9:78:f7:81:74:a5:
17:63:39:29:ea:7c:f5:44:dc:fc:b4:74:5b:32:a3:73:86:fc:
6b:99:63:0f:46:77:10:a2:0d:37:a9:7e:f0:db:6b:7b:18:bf:
e3:fa:e7:be:0a:57:5f:21:1a:8a:ca:db:37:a3:fd:34:fb:af:
c5:c4:9b:8e:06:e1:3e:89:a3:f3:19:c6:4e:28:27:a9:3a:90:
86:eb:db:07:81:a8:9f:82:e5:46:ef:7a:fd:27:33:da:b5:f5:
ca:be:27:e3:06:4f:b6:20:fe:74:33:5e:3d:38:72:f2:89:1b:
10:d6:cc:3c:d3:70:98:40:58:f8:00:53:7c:ca:17:95:6e:73:
ee:1e:8b:ce:8e:56:88:71:7b:4f:a4:68:f7:1f:8e:56:fe:02:
00:fd:f5:50:9c:57:3d:e2:8a:6c:e3:3a:29:af:94:df:15:d6:
30:70:34:12:8d:86:2f:3a:af:9a:b8:77:61:8c:d0:cb:3c:e4:
d3:f0:6f:49:9a:04:2b:15:1f:b4:ba:0f:f1:87:66:73:c4:c8:
22:74:d9:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx+iENoFlPsZWjs1y/sTz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODhiNjIzMTA1NzIyZGI1Mjg5ZTQwOWFlNGE4YzA3OWQ0
ZjM5MzgwHhcNMjMwMTAyMTAxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDBiZTE4NDIyZjJiZDNiNzQzNDViOTdhYWM3NTc0MjU5MjBiNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc8Q+kW9S5slnViej8ChVUEfhCRo
u3720sD2wjGEnRwpYd0HFzZ3v61ekoUuiGKf1iXfii4/XSCGSz32oONot145p/bi
BJUfZMwt2gC5XGf5iRZQ2NWKJs4hSu6pD9ZojsqQEQjR40cdZrsAzLx1JFJiC6vW
z91NO/OBkLsGy6KAI8dhoYp0cMnqEo12RyokRnz0LAK9MJiZcEJFPWSokE5wgjEP
Gh4CMiMfHAwhcj3h+74lg7IYkZbx0k+ZyH8rXg12DskdPsXxyc/E8hM9wHGpAcyK
edhpUq+8vsdb+IystHuGH8EscuEtxuuSR08+QTEQrzxUQhzq2cDGfBFOaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAL4YQi8r07dDRbl6rHV0JZILeNMB8GA1UdIwQY
MBaAFHCItiMQVyLbUonkCa5KjAedTzk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lpMkl4QlhJdHRTaWVRSnJrcU1CNTFQT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jNDRjYjAtMTE5ZC00N2E2LWFlZGQt
OWU4ZmMzNGZjM2YyLzEvMEF2aGhDTHl2VHQwTkZ1WHFzZFhRbGtndDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jNDRjYjAtMTE5ZC00N2E2LWFlZGQtOWU4ZmMzNGZjM2Yy
LzEvY0lpMkl4QlhJdHRTaWVRSnJrcU1CNTFQT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSz6MA0G
CSqGSIb3DQEBCwUAA4IBAQAh4Hr5nSipxqJS9rGd+TRMjaPNKuYWJTCOAYLR+JLf
QaBls94VYxuNJrwpvHgnM3nJePeBdKUXYzkp6nz1RNz8tHRbMqNzhvxrmWMPRncQ
og03qX7w22t7GL/j+ue+CldfIRqKyts3o/00+6/FxJuOBuE+iaPzGcZOKCepOpCG
69sHgaifguVG73r9JzPatfXKvifjBk+2IP50M149OHLyiRsQ1sw803CYQFj4AFN8
yheVbnPuHovOjlaIcXtPpGj3H45W/gIA/fVQnFc94ops4zopr5TfFdYwcDQSjYYv
Oq+auHdhjNDLPOTT8G9JmgQrFR+0ug/xh2ZzxMgidNl3
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:24 2025 by rpki-client