Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lfXG4A8_OmYuV4qwqhFVezd8Evg.roa
File: lfXG4A8_OmYuV4qwqhFVezd8Evg.roa (raw, json)
Hash identifier: DajuqwdamNo20dsmDBvwDzHCGeD/YNFp2D+R9ppNuhs=
Subject key identifier: 95:F5:C6:E0:0F:3F:3A:66:2E:57:8A:B0:AA:11:55:7B:37:7C:12:F8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D362EA816EDB28B4616B4F8AFD339
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lfXG4A8_OmYuV4qwqhFVezd8Evg.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198821
IP address blocks: 5.8.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:36:2e:a8:16:ed:b2:8b:46:16:b4:f8:af:d3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95f5c6e00f3f3a662e578ab0aa11557b377c12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:fa:4a:1f:03:21:dc:12:4d:b1:46:5a:c2:
f1:4b:99:11:fa:0e:bf:99:9b:40:fa:bb:15:62:6d:
58:f0:f9:e0:6c:dc:cc:ce:bd:d0:6c:b2:c3:e4:f1:
aa:39:22:59:bd:b2:01:11:38:36:25:31:1c:55:ba:
f7:97:6c:ba:d7:13:47:52:c9:99:dd:f7:0d:fc:d5:
04:95:70:6e:60:08:93:19:fc:37:49:5e:fd:7d:da:
f6:74:1b:a1:a1:d3:32:5f:09:dc:18:34:4b:69:f0:
e2:9a:be:df:ba:63:ba:24:48:ae:af:8e:58:71:db:
6c:c2:e3:1f:32:5b:52:f7:03:04:31:88:20:fa:29:
38:e8:02:16:d9:10:33:45:c6:24:72:08:ae:74:cb:
43:7b:02:18:74:50:dd:ca:27:21:2b:35:af:82:0c:
73:c3:3e:29:14:f9:c7:d9:6e:5e:55:2b:7c:8c:a4:
be:c4:7e:5a:e5:80:f6:f3:7c:67:0f:6b:2c:62:4d:
be:17:80:40:f0:62:10:c5:b5:97:30:ed:3c:80:56:
d7:9c:e4:75:0b:52:fd:8f:d1:60:6f:7a:4c:0c:b7:
26:ce:2e:65:97:fa:c7:eb:fa:24:e5:e9:5b:9e:18:
79:78:b2:7b:57:d7:91:fe:fd:a8:21:c3:fb:08:b3:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:C6:E0:0F:3F:3A:66:2E:57:8A:B0:AA:11:55:7B:37:7C:12:F8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/lfXG4A8_OmYuV4qwqhFVezd8Evg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.179.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ec:6d:ca:69:b0:fc:9b:00:76:e6:f6:5a:7a:50:a3:32:d2:
ce:b7:7c:02:f9:76:c3:9e:0f:67:6a:84:7f:96:b0:df:bf:7f:
ce:0b:53:ab:70:d0:64:a1:0e:dc:5c:3e:5e:ba:87:4e:ed:65:
16:24:c1:ed:f0:ec:a6:d0:4f:9a:ba:4a:b9:e7:4c:ae:84:12:
9f:33:a3:0c:bd:71:27:ac:97:74:89:c0:5e:53:0b:61:9b:5f:
01:2c:54:4f:77:5f:7f:8a:8e:b5:7d:61:b3:ec:f5:d5:25:0f:
e6:7e:f1:0c:4c:3c:57:61:80:ba:b1:0c:b8:3f:55:96:dd:10:
b6:d9:62:bc:cb:7a:e9:c7:fc:a6:23:8b:7e:fb:90:3d:f0:01:
a7:24:77:18:86:3d:29:51:d1:6c:d9:22:27:75:d3:65:e3:b8:
2e:57:c0:fc:12:9a:78:e5:b0:8c:50:b5:df:f4:12:5a:5e:e5:
46:e8:88:27:aa:8b:68:00:46:9a:46:fd:be:f5:6c:df:08:82:
a4:20:0b:26:af:8a:3c:7b:a2:70:c6:52:c1:d0:10:d0:ed:0d:
7c:f0:c3:e0:f0:21:42:77:4e:bb:28:f2:79:cf:29:ae:ae:c4:
a5:8d:6d:4e:93:22:c9:f5:97:e4:ce:78:c6:fd:38:15:0a:ae:
ec:44:e1:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijTYuqBbtsotGFrT4r9M5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWY1YzZlMDBmM2YzYTY2MmU1NzhhYjBhYTExNTU3YjM3N2MxMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPr6Sh8DIdwSTbFGWsLxS5kR+g6/
mZtA+rsVYm1Y8PngbNzMzr3QbLLD5PGqOSJZvbIBETg2JTEcVbr3l2y61xNHUsmZ
3fcN/NUElXBuYAiTGfw3SV79fdr2dBuhodMyXwncGDRLafDimr7fumO6JEiur45Y
cdtswuMfMltS9wMEMYgg+ik46AIW2RAzRcYkcgiudMtDewIYdFDdyichKzWvggxz
wz4pFPnH2W5eVSt8jKS+xH5a5YD283xnD2ssYk2+F4BA8GIQxbWXMO08gFbXnOR1
C1L9j9Fgb3pMDLcmzi5ll/rH6/ok5elbnhh5eLJ7V9eR/v2oIcP7CLOP/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJX1xuAPPzpmLleKsKoRVXs3fBL4MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvbGZYRzRBOF9PbVl1VjRxd3FoRlZlemQ4RXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQizMA0G
CSqGSIb3DQEBCwUAA4IBAQAX7G3KabD8mwB25vZaelCjMtLOt3wC+XbDng9naoR/
lrDfv3/OC1OrcNBkoQ7cXD5euodO7WUWJMHt8Oym0E+aukq550yuhBKfM6MMvXEn
rJd0icBeUwthm18BLFRPd19/io61fWGz7PXVJQ/mfvEMTDxXYYC6sQy4P1WW3RC2
2WK8y3rpx/ymI4t++5A98AGnJHcYhj0pUdFs2SInddNl47guV8D8Epp45bCMULXf
9BJaXuVG6IgnqotoAEaaRv2+9WzfCIKkIAsmr4o8e6JwxlLB0BDQ7Q188MPg8CFC
d067KPJ5zymursSljW1OkyLJ9ZfkznjG/TgVCq7sROHW
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:44 2025 by rpki-client