Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/pQYq5-XOE0GW9VIQWVVOezj_vPI.roa
File: pQYq5-XOE0GW9VIQWVVOezj_vPI.roa (raw, json)
Hash identifier: sNewpRG7jeaOoWjw5BgvEQfR5LfaUDIuU0tjDK4Ljq8=
Subject key identifier: A5:06:2A:E7:E5:CE:13:41:96:F5:52:10:59:55:4E:7B:38:FF:BC:F2
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 019423D6F46EAA0015F948CA5E5790BFB2B5
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/pQYq5-XOE0GW9VIQWVVOezj_vPI.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211644
IP address blocks: 91.147.80.0/22 maxlen: 22
91.147.83.0/24 maxlen: 24
185.252.192.0/24 maxlen: 24
2a10:b0c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f4:6e:aa:00:15:f9:48:ca:5e:57:90:bf:b2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5062ae7e5ce134196f5521059554e7b38ffbcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:24:31:d2:7f:77:a3:4d:df:cb:6d:bf:85:
8e:3a:a1:29:72:08:9b:61:df:0c:ac:72:04:4b:31:
13:29:a1:db:9f:f2:fa:dc:75:35:a6:b7:a3:6b:d9:
51:9a:68:2e:ef:46:06:fb:6a:43:aa:73:b7:15:9b:
c3:94:c3:f2:73:bf:dc:3d:2d:a0:af:90:fe:e6:58:
66:b5:5e:d4:65:10:dd:ff:ad:8c:0d:f1:39:f4:b5:
c6:3e:86:2e:ae:e6:a7:00:01:d4:73:9c:a2:c0:79:
79:d7:da:54:6a:b9:8b:2c:95:87:da:dd:fa:02:bf:
5d:d3:b9:c3:63:25:0e:08:fd:44:74:47:2e:01:ee:
05:cc:11:86:1c:db:83:b6:99:c4:c9:d0:4f:71:85:
ea:a9:ad:89:67:d3:90:92:93:46:57:bd:8c:f1:79:
b6:ef:35:97:6e:af:b3:bd:ee:e0:f4:8f:da:29:b3:
22:81:6b:64:85:cb:25:dd:63:c8:c4:5e:c6:b0:6e:
ea:41:c2:11:45:65:88:87:51:bb:0c:69:34:78:53:
46:27:0c:d3:38:92:ef:24:c9:32:b1:b9:51:01:31:
f3:6c:bd:f1:d2:0b:ca:b2:b8:0e:9c:1b:6b:c7:03:
83:9d:11:56:cf:96:9a:6a:17:56:f7:e0:d0:20:9f:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:2A:E7:E5:CE:13:41:96:F5:52:10:59:55:4E:7B:38:FF:BC:F2
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/pQYq5-XOE0GW9VIQWVVOezj_vPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.80.0/22
185.252.192.0/24
IPv6:
2a10:b0c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:f9:21:93:2d:0b:6d:81:72:8a:04:97:07:1b:50:85:81:5f:
bb:3f:75:7a:20:be:b1:40:6b:5d:ff:e0:ab:1e:fc:d4:28:61:
d1:cb:04:4d:be:c4:e3:e7:38:ff:28:94:c7:d5:6a:78:f3:b2:
75:69:54:5e:65:29:26:a0:d7:5c:68:99:59:25:b9:dd:db:69:
5d:dc:a7:8b:cb:51:f4:bc:39:10:93:b1:c6:3f:1d:b6:ef:00:
70:72:22:5f:31:dc:9e:0d:31:2d:cd:16:b0:2f:97:2d:26:c7:
60:2b:1f:eb:97:40:9c:00:7a:7b:07:c5:9e:e7:01:db:18:e2:
9c:4e:00:ad:59:d9:01:45:83:25:0d:ab:4c:3b:95:a2:a3:59:
db:99:8a:28:1e:14:0f:b7:9a:06:62:7a:c7:ee:1e:dd:45:53:
24:a3:ae:0f:5f:1c:33:93:78:d9:fd:23:e3:bf:b3:a7:9d:29:
d2:f8:fd:ad:e0:8f:d2:08:d4:b8:59:f6:a5:91:a5:84:d8:27:
54:e5:77:c5:15:d2:47:5f:45:50:24:51:7b:34:b8:3f:82:80:
36:ab:17:a2:85:ea:b2:cd:42:b8:df:27:ad:4a:07:5b:a3:dd:
31:1f:7f:40:e1:69:a2:50:4e:25:8d:41:50:11:8d:e1:9a:41:
72:4b:0e:fe
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQj1vRuqgAV+UjKXleQv7K1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5
OWY4ODAwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTA2MmFlN2U1Y2UxMzQxOTZmNTUyMTA1OTU1NGU3YjM4ZmZiY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo68kMdJ/d6NN38ttv4WOOqEpcgib
Yd8MrHIESzETKaHbn/L63HU1preja9lRmmgu70YG+2pDqnO3FZvDlMPyc7/cPS2g
r5D+5lhmtV7UZRDd/62MDfE59LXGPoYuruanAAHUc5yiwHl519pUarmLLJWH2t36
Ar9d07nDYyUOCP1EdEcuAe4FzBGGHNuDtpnEydBPcYXqqa2JZ9OQkpNGV72M8Xm2
7zWXbq+zve7g9I/aKbMigWtkhcsl3WPIxF7GsG7qQcIRRWWIh1G7DGk0eFNGJwzT
OJLvJMkysblRATHzbL3x0gvKsrgOnBtrxwODnRFWz5aaahdW9+DQIJ92IQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKUGKuflzhNBlvVSEFlVTns4/7zyMB8GA1UdIwQY
MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It
YmU0OGI3OTI1NDc4LzEvcFFZcTUtWE9FMEdXOVZJUVdWVk9lempfdlBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4
LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW5NQAwQA
ufzAMA0EAgACMAcDBQAqELDAMA0GCSqGSIb3DQEBCwUAA4IBAQAM+SGTLQttgXKK
BJcHG1CFgV+7P3V6IL6xQGtd/+CrHvzUKGHRywRNvsTj5zj/KJTH1Wp487J1aVRe
ZSkmoNdcaJlZJbnd22ld3KeLy1H0vDkQk7HGPx227wBwciJfMdyeDTEtzRawL5ct
JsdgKx/rl0CcAHp7B8We5wHbGOKcTgCtWdkBRYMlDatMO5Wio1nbmYooHhQPt5oG
YnrH7h7dRVMko64PXxwzk3jZ/SPjv7OnnSnS+P2t4I/SCNS4WfalkaWE2CdU5XfF
FdJHX0VQJFF7NLg/goA2qxeiheqyzUK43yetSgdbo90xH39A4WmiUE4ljUFQEY3h
mkFySw7+
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:23 2025 by rpki-client