Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/5cVhFYAQn2qwO3pKnDvXyhdIBHs.roa
File: 5cVhFYAQn2qwO3pKnDvXyhdIBHs.roa (raw, json)
Hash identifier: /ZWd9oPOOX+rUxn9X+vIOf1fPrnm/UrbzaNFEQw8fVE=
Subject key identifier: E5:C5:61:15:80:10:9F:6A:B0:3B:7A:4A:9C:3B:D7:CA:17:48:04:7B
Certificate issuer: /CN=891d6101d729bc95597da528604ec0b0b7e0042c
Certificate serial: 4E31D7
Authority key identifier: 89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/5cVhFYAQn2qwO3pKnDvXyhdIBHs.roa
Signing time: Wed 27 Apr 2022 06:01:19 +0000
ROA not before: Wed 27 Apr 2022 06:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 86.104.195.0/24 maxlen: 24
86.104.19.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5124567 (0x4e31d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891d6101d729bc95597da528604ec0b0b7e0042c
Validity
Not Before: Apr 27 06:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5c5611580109f6ab03b7a4a9c3bd7ca1748047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:03:d6:6f:eb:74:1d:04:87:7b:2e:39:5e:
b0:53:47:7d:6d:5a:b1:00:91:fe:03:5a:ba:20:eb:
fc:37:b6:17:52:bc:f1:8f:0a:fe:61:d0:ee:75:6c:
f1:b5:1f:e4:f2:7b:b3:95:3b:dc:f7:e7:7b:70:91:
34:ab:d8:0a:50:c1:b8:59:4e:a1:e5:c3:cf:85:15:
1a:99:58:cb:ae:7a:c6:25:45:f0:29:a7:21:c2:38:
0b:b3:91:ed:95:a4:42:ae:0d:58:36:e9:da:b5:f4:
01:c8:3c:9e:8f:74:05:87:6f:68:1b:98:a1:93:c9:
42:09:66:6b:5d:9c:d1:b7:49:79:38:a8:85:40:55:
1d:02:3a:fa:c4:3a:0e:85:13:52:b3:1c:46:36:8e:
df:75:6e:df:a9:11:d5:a9:fd:2d:cc:95:3f:cf:38:
47:44:eb:f5:d1:2f:34:07:87:c3:3c:bc:65:63:8b:
75:23:d6:17:cd:ef:af:be:83:e9:e5:43:67:95:13:
85:09:7c:9c:14:1a:9f:3a:f1:f6:63:07:41:af:0f:
cb:98:4d:13:11:96:6b:24:6c:75:0f:59:02:70:f7:
81:06:49:bd:e9:ff:7b:84:cf:6c:e6:7a:d9:20:cc:
a5:4f:bd:3a:61:dd:d1:76:26:db:05:a4:4a:c6:29:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:61:15:80:10:9F:6A:B0:3B:7A:4A:9C:3B:D7:CA:17:48:04:7B
X509v3 Authority Key Identifier:
keyid:89:1D:61:01:D7:29:BC:95:59:7D:A5:28:60:4E:C0:B0:B7:E0:04:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iR1hAdcpvJVZfaUoYE7AsLfgBCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/5cVhFYAQn2qwO3pKnDvXyhdIBHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4b90d6-87e6-473e-b36d-6e54215b24e7/1/iR1hAdcpvJVZfaUoYE7AsLfgBCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
86.104.195.0/24
89.32.126.0/24
94.231.198.0/24
Signature Algorithm: sha256WithRSAEncryption
21:de:d4:37:d1:cc:1d:a3:2a:b7:f2:98:67:b1:42:94:e9:3b:
a8:f7:a3:36:ce:d4:71:3b:2a:d8:cb:64:ab:89:c6:47:cd:c8:
c6:fe:0d:18:6c:de:34:14:5a:f0:75:f8:e0:c0:9d:66:9d:6d:
b7:25:e4:65:85:48:12:63:58:aa:26:e9:4a:90:40:a7:d2:aa:
0c:b2:43:20:d8:95:bd:d4:f6:d6:48:89:b7:6d:1b:21:16:ac:
3e:55:be:74:ba:44:28:e8:27:89:33:63:a5:0f:a3:fc:4b:63:
53:91:89:f4:40:61:9c:26:28:df:bd:ef:75:d8:fe:1a:62:6d:
b6:ac:a3:12:f9:cb:c5:c7:59:59:03:3c:f3:af:8b:5b:98:bb:
ab:7a:9e:9b:fb:4d:45:9d:41:c2:57:45:b7:20:d5:19:30:00:
02:a4:b6:1f:ac:a1:78:ad:53:a8:65:2d:67:a5:f4:e2:a5:f1:
7b:18:db:cb:30:2e:7b:f6:13:8a:a9:52:7a:3f:09:b0:45:62:
14:a9:fc:74:97:b6:43:15:b1:70:b7:83:b5:d2:09:23:25:7b:
f1:a8:06:0f:41:38:fe:02:9b:50:81:07:66:12:07:88:a9:48:
cc:a7:9b:cd:e8:21:b1:79:7e:64:4f:0b:84:e6:bd:fa:89:e7:
c2:3e:fa:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDTjHXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
MWQ2MTAxZDcyOWJjOTU1OTdkYTUyODYwNGVjMGIwYjdlMDA0MmMwHhcNMjIwNDI3
MDYwMTE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlNWM1NjExNTgwMTA5
ZjZhYjAzYjdhNGE5YzNiZDdjYTE3NDgwNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArOwD1m/rdB0Eh3suOV6wU0d9bVqxAJH+A1q6IOv8N7YXUrzx
jwr+YdDudWzxtR/k8nuzlTvc9+d7cJE0q9gKUMG4WU6h5cPPhRUamVjLrnrGJUXw
KachwjgLs5HtlaRCrg1YNunatfQByDyej3QFh29oG5ihk8lCCWZrXZzRt0l5OKiF
QFUdAjr6xDoOhRNSsxxGNo7fdW7fqRHVqf0tzJU/zzhHROv10S80B4fDPLxlY4t1
I9YXze+vvoPp5UNnlROFCXycFBqfOvH2YwdBrw/LmE0TEZZrJGx1D1kCcPeBBkm9
6f97hM9s5nrZIMylT706Yd3RdibbBaRKxiknWQIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFOXFYRWAEJ9qsDt6Spw718oXSAR7MB8GA1UdIwQYMBaAFIkdYQHXKbyVWX2l
KGBOwLC34AQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aVIxaEFkY3B2SlZaZmFVb1lFN0FzTGZnQkN3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZS80YjkwZDYtODdlNi00NzNlLWIzNmQtNmU1NDIxNWIyNGU3LzEv
NWNWaEZZQVFuMnF3TzNwS25Edlh5aGRJQkhzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80
YjkwZDYtODdlNi00NzNlLWIzNmQtNmU1NDIxNWIyNGU3LzEvaVIxaEFkY3B2SlZa
ZmFVb1lFN0FzTGZnQkN3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVmgTAwQAVmjDAwQAWSB+AwQAXufG
MA0GCSqGSIb3DQEBCwUAA4IBAQAh3tQ30cwdoyq38phnsUKU6Tuo96M2ztRxOyrY
y2SricZHzcjG/g0YbN40FFrwdfjgwJ1mnW23JeRlhUgSY1iqJulKkECn0qoMskMg
2JW91PbWSIm3bRshFqw+Vb50ukQo6CeJM2OlD6P8S2NTkYn0QGGcJijfve912P4a
Ym22rKMS+cvFx1lZAzzzr4tbmLurep6b+01FnUHCV0W3INUZMAACpLYfrKF4rVOo
ZS1npfTipfF7GNvLMC579hOKqVJ6PwmwRWIUqfx0l7ZDFbFwt4O10gkjJXvxqAYP
QTj+AptQgQdmEgeIqUjMp5vN6CGxeX5kTwuE5r36iefCPvpB
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:46 2025 by rpki-client