Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/5up8UwZ-z-Kcx8cRkCjHGJqDu1o.roa
File: 5up8UwZ-z-Kcx8cRkCjHGJqDu1o.roa (raw, json)
Hash identifier: bCEtVgEuveaBWt1nLuo3r95Qz0ce/skvbhAlNfdedyU=
Subject key identifier: E6:EA:7C:53:06:7E:CF:E2:9C:C7:C7:11:90:28:C7:18:9A:83:BB:5A
Certificate issuer: /CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Certificate serial: 019421B209E1276C4FB333B5CFB91D5115D3
Authority key identifier: C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/5up8UwZ-z-Kcx8cRkCjHGJqDu1o.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212855
IP address blocks: 93.157.140.0/24 maxlen: 24
2001:67c:f8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:09:e1:27:6c:4f:b3:33:b5:cf:b9:1d:51:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6ea7c53067ecfe29cc7c7119028c7189a83bb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:6b:22:3c:c6:1e:4d:46:3e:38:b2:5b:63:
21:62:fe:16:e9:c3:84:3c:27:13:0f:81:33:83:a0:
2b:2a:f1:e5:60:58:73:30:1a:dc:06:78:21:8a:f9:
11:e1:3d:31:c6:c3:a9:fb:f7:63:6a:84:75:d8:d5:
c6:c1:3d:8e:8c:60:2e:31:8f:ce:62:87:60:68:e5:
b9:55:d6:ec:c4:4a:5e:5c:59:f7:ef:6a:5e:8d:f2:
5d:f8:ea:ed:45:89:67:26:3c:8c:83:53:2c:0c:b2:
2d:03:c7:41:22:c3:9f:ea:f3:85:e4:e3:bd:70:73:
68:f7:58:78:18:b3:dd:d1:ff:c6:39:84:d6:fe:92:
96:06:63:3f:c9:f6:cf:ec:f8:b0:ba:6b:b5:0c:f5:
88:0e:e8:85:78:4f:71:86:1d:f2:46:e3:68:ab:cd:
70:be:30:1c:e1:81:02:0b:34:54:fc:79:d8:13:88:
58:2e:68:e1:98:0a:75:7e:be:b7:ed:1e:88:41:3e:
6f:79:19:8c:c8:45:b5:30:84:15:88:73:07:6c:ab:
ce:62:e3:bc:5e:5f:53:05:fb:eb:7d:39:a4:3e:cf:
55:cc:bc:8b:dc:10:08:6e:cc:ce:cd:8f:2d:70:98:
13:0f:c4:f0:30:dd:2d:f6:f0:67:63:b8:85:35:a8:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EA:7C:53:06:7E:CF:E2:9C:C7:C7:11:90:28:C7:18:9A:83:BB:5A
X509v3 Authority Key Identifier:
keyid:C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/5up8UwZ-z-Kcx8cRkCjHGJqDu1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.140.0/24
IPv6:
2001:67c:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
1a:d5:a8:e8:34:75:cf:49:75:76:af:60:32:46:59:61:87:94:
b5:6b:df:ff:ab:45:b5:17:ed:28:01:3a:72:dd:bf:c3:b6:a5:
94:b2:74:ec:56:98:33:6f:d6:d0:a8:f5:0f:80:a2:66:a6:bf:
1e:f9:14:35:4c:4a:19:55:ef:b5:e3:a0:49:07:70:7c:03:e7:
5d:c0:38:b7:fb:c4:38:e1:c4:7a:11:36:bf:f5:e0:2d:83:c3:
48:a2:ce:15:6a:c2:a3:d8:ce:55:84:ab:e7:cb:a9:6b:0a:b8:
f7:8a:8f:cf:f6:2c:5e:17:3d:83:60:fd:44:6a:d4:e2:9f:c3:
3d:cc:9c:10:48:b8:38:1c:3e:93:e9:2b:4d:b0:be:b6:77:3e:
33:56:c6:eb:41:22:d7:73:01:52:7b:fe:0a:ba:6e:6d:e5:6d:
d3:78:1a:c7:44:33:7a:80:d5:fc:fd:12:39:91:7e:b7:d8:3b:
65:42:b7:04:ce:49:4d:3c:00:7c:54:82:5f:6d:b1:2b:62:ec:
f8:81:53:73:34:e8:f0:6a:ee:7d:fc:1f:0f:b7:cd:3e:07:16:
47:23:d3:05:a3:2f:b8:38:9f:ac:c0:58:92:0a:3c:22:ff:ef:
42:2f:28:50:84:d3:ff:08:d4:28:d6:1a:2b:ed:e8:8d:9f:cc:
e2:c9:ef:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhsgnhJ2xPszO1z7kdURXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YWUwNjQ2MjZmNWNlYjdlZWEwZGY4ZmQwMWMxMGRkNGFm
ODJkN2QwHhcNMjUwMTAxMTE0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmVhN2M1MzA2N2VjZmUyOWNjN2M3MTE5MDI4YzcxODlhODNiYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnhrIjzGHk1GPjiyW2MhYv4W6cOE
PCcTD4Ezg6ArKvHlYFhzMBrcBnghivkR4T0xxsOp+/djaoR12NXGwT2OjGAuMY/O
YodgaOW5VdbsxEpeXFn372pejfJd+OrtRYlnJjyMg1MsDLItA8dBIsOf6vOF5OO9
cHNo91h4GLPd0f/GOYTW/pKWBmM/yfbP7Piwumu1DPWIDuiFeE9xhh3yRuNoq81w
vjAc4YECCzRU/HnYE4hYLmjhmAp1fr637R6IQT5veRmMyEW1MIQViHMHbKvOYuO8
Xl9TBfvrfTmkPs9VzLyL3BAIbszOzY8tcJgTD8TwMN0t9vBnY7iFNajQtQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFObqfFMGfs/inMfHEZAoxxiag7taMB8GA1UdIwQY
MBaAFMWuBkYm9c637qDfj9AcEN1K+C19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGE0R1JpYjF6cmZ1b04tUDBCd1EzVXI0TFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jNTZjYTAtYzE1ZC00OTkzLWJiNjUt
ODYxNTkxMzM5NjAyLzEvNXVwOFV3Wi16LUtjeDhjUmtDakhHSnFEdTFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jNTZjYTAtYzE1ZC00OTkzLWJiNjUtODYxNTkxMzM5NjAy
LzEveGE0R1JpYjF6cmZ1b04tUDBCd1EzVXI0TFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXZ2MMA8E
AgACMAkDBwAgAQZ8D4wwDQYJKoZIhvcNAQELBQADggEBABrVqOg0dc9JdXavYDJG
WWGHlLVr3/+rRbUX7SgBOnLdv8O2pZSydOxWmDNv1tCo9Q+Aomamvx75FDVMShlV
77XjoEkHcHwD513AOLf7xDjhxHoRNr/14C2Dw0iizhVqwqPYzlWEq+fLqWsKuPeK
j8/2LF4XPYNg/URq1OKfwz3MnBBIuDgcPpPpK02wvrZ3PjNWxutBItdzAVJ7/gq6
bm3lbdN4GsdEM3qA1fz9EjmRfrfYO2VCtwTOSU08AHxUgl9tsSti7PiBU3M06PBq
7n38Hw+3zT4HFkcj0wWjL7g4n6zAWJIKPCL/70IvKFCE0/8I1CjWGivt6I2fzOLJ
7wM=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:22 2025 by rpki-client