Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Fb4Ws4LYIDqY5ZY6hKeQY3e86gg.roa
File: Fb4Ws4LYIDqY5ZY6hKeQY3e86gg.roa (raw, json)
Hash identifier: VQPQgwTdPWEfZjaqDYHuRnm+OHGwJx2ZjjmFWDQSrDA=
Subject key identifier: 15:BE:16:B3:82:D8:20:3A:98:E5:96:3A:84:A7:90:63:77:BC:EA:08
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F25422
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Fb4Ws4LYIDqY5ZY6hKeQY3e86gg.roa
Signing time: Sat 01 Jan 2022 13:00:27 +0000
ROA not before: Sat 01 Jan 2022 13:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49011
IP address blocks: 95.174.160.0/19 maxlen: 19
178.19.0.0/20 maxlen: 20
2a00:cc80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670192674 (0x27f25422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15be16b382d8203a98e5963a84a7906377bcea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:2b:ab:a9:81:64:c1:8a:68:af:57:bf:c5:
9b:86:39:97:46:e1:a9:f3:e8:08:67:e7:96:e8:54:
22:9d:74:2d:f7:43:e5:d1:aa:0c:82:9c:58:f7:7f:
29:eb:2f:dd:ae:7c:b1:b8:3e:61:35:da:15:39:da:
87:88:2c:be:86:30:d9:59:38:67:cd:bf:ec:0b:a6:
38:f1:6d:3f:5b:84:39:5f:63:76:17:55:ad:2e:8c:
98:5f:e5:e1:09:d5:43:69:28:b7:8a:96:9d:4f:4b:
39:c8:c6:52:c5:a4:cc:31:18:23:91:7f:58:ef:de:
e4:ae:53:e1:e7:7b:15:ae:da:21:ac:21:54:62:2a:
0b:da:7e:2d:58:34:d8:33:86:8e:fc:2c:cb:ee:72:
02:6e:c6:8c:ca:23:81:61:a4:dc:3e:29:53:bf:4b:
a5:0d:55:33:92:f0:db:b4:f4:10:e1:36:34:d9:0f:
b9:66:f2:9c:4b:fc:e5:e4:4c:1b:95:24:59:d9:10:
c5:f0:42:68:2d:a4:a0:42:e9:51:37:d8:aa:9d:69:
fa:33:c8:de:63:f5:25:63:11:cb:7c:fa:d0:e8:5a:
2c:0a:04:c4:ff:45:d1:35:83:67:52:47:b3:52:db:
a9:7a:c9:1e:d4:a0:bc:4a:99:c0:d6:0b:87:91:c3:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:16:B3:82:D8:20:3A:98:E5:96:3A:84:A7:90:63:77:BC:EA:08
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Fb4Ws4LYIDqY5ZY6hKeQY3e86gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.160.0/19
178.19.0.0/20
IPv6:
2a00:cc80::/32
Signature Algorithm: sha256WithRSAEncryption
44:e0:e8:36:18:83:52:30:20:a6:f9:a5:61:d0:e0:68:40:75:
70:bb:de:37:02:c9:f9:a9:72:53:72:ce:e3:f5:22:50:c3:03:
28:29:3d:04:e3:d7:8e:d1:c6:ae:1b:75:33:a8:37:62:df:93:
94:a6:23:68:5f:aa:b2:dd:66:cb:f4:9f:47:6c:17:6d:c0:16:
75:76:5e:46:6c:81:30:5f:e8:c7:e9:1c:89:e9:38:28:af:5b:
37:18:4d:3c:bf:0c:c7:fb:90:c5:3e:3f:3d:e4:80:a9:56:09:
9b:24:96:16:da:e6:d8:59:f1:6e:5d:a0:6d:16:18:9e:60:01:
d9:da:a9:d2:03:3e:7d:bf:f5:6e:8e:dc:38:d3:e6:b7:9c:3d:
11:9e:a1:3b:93:7d:38:95:ae:cb:d2:6b:87:2b:3b:91:47:fa:
5f:13:9b:0e:b3:88:f7:e7:68:d2:b6:da:dd:e6:9e:a0:cc:34:
9d:55:ae:e4:0f:93:dc:9e:8e:86:96:ac:d6:ef:af:20:9d:55:
34:15:e3:5d:a6:da:98:dd:d2:19:c3:85:d8:a6:96:9e:ac:31:
ac:61:5e:d6:ea:3d:98:c8:54:fc:11:31:72:4d:57:53:7a:36:
d3:64:79:e7:f8:1f:8f:b0:7e:91:c3:e0:a3:bf:08:a4:57:fb:
20:15:06:de
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEJ/JUIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTI5NTIzN2FiNDRiY2UzNWRkZmMyNjI3ZmQ0OWE4YzQ0NjEyNDQxMB4XDTIyMDEw
MTEzMDAyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTViZTE2YjM4MmQ4
MjAzYTk4ZTU5NjNhODRhNzkwNjM3N2JjZWEwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7XK6upgWTBimivV7/Fm4Y5l0bhqfPoCGfnluhUIp10LfdD
5dGqDIKcWPd/Kesv3a58sbg+YTXaFTnah4gsvoYw2Vk4Z82/7AumOPFtP1uEOV9j
dhdVrS6MmF/l4QnVQ2kot4qWnU9LOcjGUsWkzDEYI5F/WO/e5K5T4ed7Fa7aIawh
VGIqC9p+LVg02DOGjvwsy+5yAm7GjMojgWGk3D4pU79LpQ1VM5Lw27T0EOE2NNkP
uWbynEv85eRMG5UkWdkQxfBCaC2koELpUTfYqp1p+jPI3mP1JWMRy3z60OhaLAoE
xP9F0TWDZ1JHs1LbqXrJHtSgvEqZwNYLh5HDrY0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQVvhazgtggOpjlljqEp5Bjd7zqCDAfBgNVHSMEGDAWgBSlKVI3q0S8413f
wmJ/1JqMRGEkQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BTbFNONnRFdk9OZDM4SmlmOVNhakVSaEpFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvMDk1MWQ3LTNmNjctNGJkNC05MDRkLWM5NGZlYWE2Y2I3OS8x
L0ZiNFdzNExZSURxWTVaWTZoS2VRWTNlODZnZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
MDk1MWQ3LTNmNjctNGJkNC05MDRkLWM5NGZlYWE2Y2I3OS8xL3BTbFNONnRFdk9O
ZDM4SmlmOVNhakVSaEpFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBV+uoAMEBLITADANBAIAAjAHAwUA
KgDMgDANBgkqhkiG9w0BAQsFAAOCAQEARODoNhiDUjAgpvmlYdDgaEB1cLveNwLJ
+alyU3LO4/UiUMMDKCk9BOPXjtHGrht1M6g3Yt+TlKYjaF+qst1my/SfR2wXbcAW
dXZeRmyBMF/ox+kciek4KK9bNxhNPL8Mx/uQxT4/PeSAqVYJmySWFtrm2Fnxbl2g
bRYYnmAB2dqp0gM+fb/1bo7cONPmt5w9EZ6hO5N9OJWuy9Jrhys7kUf6XxObDrOI
9+do0rba3eaeoMw0nVWu5A+T3J6Ohpas1u+vIJ1VNBXjXabamN3SGcOF2KaWnqwx
rGFe1uo9mMhU/BExck1XU3o202R55/gfj7B+kcPgo78IpFf7IBUG3g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:40 2025 by rpki-client