Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/q7bqe6g-Anv0ZyUV9xBk9wmo9RE.roa
File: q7bqe6g-Anv0ZyUV9xBk9wmo9RE.roa (raw, json)
Hash identifier: S0G/ytbiPGmTcCJUKllHK5OhGbASZgHvX5jo/5EmVfQ=
Subject key identifier: AB:B6:EA:7B:A8:3E:02:7B:F4:67:25:15:F7:10:64:F7:09:A8:F5:11
Certificate issuer: /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial: 019421B1FB65350BCF3EDC93F2941C3EF923
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/q7bqe6g-Anv0ZyUV9xBk9wmo9RE.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44934
IP address blocks: 83.138.62.0/24 maxlen: 24
2a05:5a41::/32 maxlen: 32
2a05:5a42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fb:65:35:0b:cf:3e:dc:93:f2:94:1c:3e:f9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb6ea7ba83e027bf4672515f71064f709a8f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:95:97:71:16:84:71:28:97:8b:f7:58:a0:
36:7c:9e:30:14:08:97:95:a4:5f:e9:6a:f8:f4:af:
d8:05:31:c2:d1:51:34:45:60:7e:81:d9:5a:11:46:
cb:c5:82:66:d9:c5:b3:43:0e:0c:44:dd:43:90:8e:
0a:c8:33:e7:cc:13:c1:f4:ec:df:01:e8:ce:fe:f9:
d9:44:01:1e:ec:6a:3f:0c:4a:81:4d:db:45:f7:e4:
fd:bf:70:85:01:83:49:97:94:71:dd:f8:3d:77:86:
76:de:ca:0c:ac:33:6a:0c:98:73:d2:da:e5:ac:65:
b4:7f:79:96:b7:90:a7:85:27:ed:48:9e:23:f4:4d:
e8:88:50:0e:57:8b:3b:77:14:db:29:d5:29:b3:9f:
b2:67:a1:79:2b:3a:65:70:9f:b0:b3:65:cd:25:8a:
e7:64:6a:88:91:13:ef:78:a4:cd:75:09:1f:e0:6f:
d1:28:58:24:35:6f:ae:ca:0f:17:36:2c:1c:b4:bd:
c3:d7:aa:5b:c7:57:d5:f8:a2:85:14:d8:a1:e4:c1:
10:58:29:54:19:2a:66:59:d8:8c:90:56:fc:af:9c:
cd:a4:78:e0:89:ec:4c:2e:ec:8f:6f:11:f6:71:04:
20:91:bd:21:94:07:9c:dd:33:69:ae:8b:8e:e8:19:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B6:EA:7B:A8:3E:02:7B:F4:67:25:15:F7:10:64:F7:09:A8:F5:11
X509v3 Authority Key Identifier:
keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/q7bqe6g-Anv0ZyUV9xBk9wmo9RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.62.0/24
IPv6:
2a05:5a41::-2a05:5a42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:33:fb:aa:9d:b3:82:e4:6d:1f:d5:2e:d2:0d:96:58:ae:2c:
07:f3:f3:e2:59:db:3d:ef:d0:2c:cb:8d:f1:39:73:4a:41:aa:
45:c3:fe:86:ff:0b:e7:d1:9b:3a:5b:ae:3b:13:2b:72:2e:e9:
b0:5b:7f:8d:e3:9f:da:fe:43:38:33:9d:2b:94:e7:4a:11:fe:
63:44:50:43:26:f6:a0:e2:e8:d7:54:b1:d3:b7:19:f6:94:27:
3a:f7:39:ad:0d:38:47:73:7f:c8:cc:a2:4d:a6:81:7e:4b:d8:
4c:f5:5d:f7:0f:6e:15:73:2b:20:b4:fb:2f:5d:38:3e:6b:1c:
d1:15:02:15:87:1f:4e:ec:d9:84:d0:ab:c9:d3:b8:d2:a5:8d:
b9:b0:c9:0f:81:1d:0c:ce:b5:7f:81:6d:7e:91:3e:db:f1:2c:
c1:ea:dd:b1:ce:c4:ea:2b:3f:52:36:89:58:f6:5a:5f:fb:39:
d5:6d:37:f7:46:28:ef:8c:68:f7:2e:d3:87:75:d6:6a:17:ec:
64:12:b4:3e:81:41:27:27:94:5e:3b:2b:5d:9c:11:76:e4:7e:
54:f4:54:3d:98:c1:c1:a6:11:74:f6:d0:ca:68:57:aa:b5:72:
a4:10:6c:85:3e:50:5b:97:4b:8e:25:68:fc:70:32:fc:33:36:
2c:07:ea:dd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhsftlNQvPPtyT8pQcPvkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWZmOTFjNmIxYzdhOGVkMDI4NDJiMjVjOWIwZDA2Mzhh
OTA0MjQwHhcNMjUwMTAxMTE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmI2ZWE3YmE4M2UwMjdiZjQ2NzI1MTVmNzEwNjRmNzA5YThmNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjWVl3EWhHEol4v3WKA2fJ4wFAiX
laRf6Wr49K/YBTHC0VE0RWB+gdlaEUbLxYJm2cWzQw4MRN1DkI4KyDPnzBPB9Ozf
AejO/vnZRAEe7Go/DEqBTdtF9+T9v3CFAYNJl5Rx3fg9d4Z23soMrDNqDJhz0trl
rGW0f3mWt5CnhSftSJ4j9E3oiFAOV4s7dxTbKdUps5+yZ6F5KzplcJ+ws2XNJYrn
ZGqIkRPveKTNdQkf4G/RKFgkNW+uyg8XNiwctL3D16pbx1fV+KKFFNih5MEQWClU
GSpmWdiMkFb8r5zNpHjgiexMLuyPbxH2cQQgkb0hlAec3TNprouO6BlB5QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKu26nuoPgJ79GclFfcQZPcJqPURMB8GA1UdIwQY
MBaAFOqf+RxrHHqO0ChCslybDQY4qQQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgt
MDBiN2JmMzJlY2Y4LzEvcTdicWU2Zy1BbnYwWnlVVjl4Qms5d21vOVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgtMDBiN2JmMzJlY2Y4
LzEvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAU4o+MBYE
AgACMBAwDgMFACoFWkEDBQAqBVpCMA0GCSqGSIb3DQEBCwUAA4IBAQAWM/uqnbOC
5G0f1S7SDZZYriwH8/PiWds979Asy43xOXNKQapFw/6G/wvn0Zs6W647EytyLumw
W3+N45/a/kM4M50rlOdKEf5jRFBDJvag4ujXVLHTtxn2lCc69zmtDThHc3/IzKJN
poF+S9hM9V33D24VcysgtPsvXTg+axzRFQIVhx9O7NmE0KvJ07jSpY25sMkPgR0M
zrV/gW1+kT7b8SzB6t2xzsTqKz9SNolY9lpf+znVbTf3RijvjGj3LtOHddZqF+xk
ErQ+gUEnJ5ReOytdnBF25H5U9FQ9mMHBphF09tDKaFeqtXKkEGyFPlBbl0uOJWj8
cDL8MzYsB+rd
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:24 2025 by rpki-client