Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oaXu_FxIfIXOpAte9l_Fpj5QCn4.roa
File: oaXu_FxIfIXOpAte9l_Fpj5QCn4.roa (raw, json)
Hash identifier: nlOKV1gnpAC7puKjYB6sLND43RVfxQjwOtEVAm+jQ6s=
Subject key identifier: A1:A5:EE:FC:5C:48:7C:85:CE:A4:0B:5E:F6:5F:C5:A6:3E:50:0A:7E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A39A54FA126FB0E4365FC6DC2BCF8
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oaXu_FxIfIXOpAte9l_Fpj5QCn4.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30707
IP address blocks: 5.253.136.0/24 maxlen: 24
45.141.246.0/24 maxlen: 24
2a06:7247::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:39:a5:4f:a1:26:fb:0e:43:65:fc:6d:c2:bc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a5eefc5c487c85cea40b5ef65fc5a63e500a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:04:d3:91:d5:fd:02:cf:b3:bb:c4:fa:fc:
2d:fb:30:86:8c:d5:af:23:f9:69:8e:34:7e:7e:e3:
b5:2f:7f:59:e7:b9:7b:dd:bf:53:f6:0d:78:a9:ef:
05:e5:57:8a:2a:4f:a1:44:81:6a:2f:ff:a4:be:d3:
25:83:8a:61:87:bd:0d:40:7e:85:29:28:27:de:08:
e9:66:78:aa:6b:5a:4f:c8:57:45:bd:09:83:6b:86:
f9:fe:5d:e8:60:f7:62:d2:be:18:7b:a6:53:86:02:
ac:04:ec:0e:f4:22:58:f1:d6:85:c5:8b:21:12:d7:
8a:f7:ed:a8:66:ed:fa:80:51:b6:e2:7f:13:d0:39:
8b:e1:b6:d0:86:24:5e:d6:2a:3e:4b:07:c8:d7:fe:
3b:17:4b:ac:24:08:42:b6:6e:5e:a2:83:24:4d:60:
8f:c3:4f:27:e8:64:36:d5:21:b4:8c:c7:39:24:82:
48:d2:64:e2:c4:73:05:7f:85:c0:db:9c:f3:60:83:
4f:cd:1f:b0:ef:88:03:8e:a9:63:38:e1:66:9a:24:
f2:f3:a1:af:52:78:37:27:4a:62:0d:cb:b2:ba:64:
5a:3c:0e:9b:79:0a:d5:31:6b:85:22:54:5b:02:a7:
01:ba:bc:75:a4:c8:df:7a:f3:70:49:4c:31:68:0f:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:EE:FC:5C:48:7C:85:CE:A4:0B:5E:F6:5F:C5:A6:3E:50:0A:7E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oaXu_FxIfIXOpAte9l_Fpj5QCn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.136.0/24
45.141.246.0/24
IPv6:
2a06:7247::/45
Signature Algorithm: sha256WithRSAEncryption
6c:4f:93:e6:52:56:91:eb:d0:4a:b4:12:ba:73:c8:97:0b:a0:
26:2b:49:6c:68:80:8c:b4:e5:98:4c:35:b6:69:b0:15:fc:9d:
75:e8:dc:3d:c7:12:4c:b2:73:4b:81:14:98:61:d0:8d:ea:26:
45:55:ef:c7:06:2c:bf:a3:c1:6b:0a:89:c8:32:be:c9:69:52:
9a:78:70:33:e3:63:05:f5:93:ff:31:0a:cf:bf:2a:f9:29:4d:
00:6f:95:23:12:2d:56:78:2f:1d:ef:7c:7a:0d:51:69:d0:9d:
9f:4b:b5:43:cb:6e:ab:33:80:66:f3:b5:e7:2a:c8:ae:6c:3a:
e0:a9:d3:2e:0a:40:a7:f7:f8:de:78:5c:5e:04:92:f2:1b:63:
62:fd:14:87:cb:d1:80:5d:e7:96:61:37:b4:e8:a7:d1:ba:43:
a1:77:7d:a7:60:f0:d8:78:1a:e1:2d:c2:d1:10:a9:72:4e:65:
ed:fd:d1:0e:f5:db:d7:47:67:b8:16:d7:03:9d:25:67:4c:30:
cf:f1:51:b4:00:cf:34:e1:59:87:f3:da:89:38:ab:e9:95:8d:
9b:5e:c5:aa:88:b8:00:e1:5b:29:5a:ad:d3:40:b6:21:01:7d:
fd:61:b6:79:11:77:e4:76:12:bb:81:24:c2:50:62:7d:44:95:
5c:7f:e8:3a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQjajmlT6Em+w5DZfxtwrz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWE1ZWVmYzVjNDg3Yzg1Y2VhNDBiNWVmNjVmYzVhNjNlNTAwYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD8E05HV/QLPs7vE+vwt+zCGjNWv
I/lpjjR+fuO1L39Z57l73b9T9g14qe8F5VeKKk+hRIFqL/+kvtMlg4phh70NQH6F
KSgn3gjpZniqa1pPyFdFvQmDa4b5/l3oYPdi0r4Ye6ZThgKsBOwO9CJY8daFxYsh
EteK9+2oZu36gFG24n8T0DmL4bbQhiRe1io+SwfI1/47F0usJAhCtm5eooMkTWCP
w08n6GQ21SG0jMc5JIJI0mTixHMFf4XA25zzYINPzR+w74gDjqljOOFmmiTy86Gv
Ung3J0piDcuyumRaPA6beQrVMWuFIlRbAqcBurx1pMjfevNwSUwxaA/B/wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKGl7vxcSHyFzqQLXvZfxaY+UAp+MB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvb2FYdV9GeElmSVhPcEF0ZTlsX0ZwajVRQ240LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQABf2IAwQA
LY32MA8EAgACMAkDBwMqBnJHAAAwDQYJKoZIhvcNAQELBQADggEBAGxPk+ZSVpHr
0Eq0ErpzyJcLoCYrSWxogIy05ZhMNbZpsBX8nXXo3D3HEkyyc0uBFJhh0I3qJkVV
78cGLL+jwWsKicgyvslpUpp4cDPjYwX1k/8xCs+/KvkpTQBvlSMSLVZ4Lx3vfHoN
UWnQnZ9LtUPLbqszgGbztecqyK5sOuCp0y4KQKf3+N54XF4EkvIbY2L9FIfL0YBd
55ZhN7Top9G6Q6F3fadg8Nh4GuEtwtEQqXJOZe390Q7129dHZ7gW1wOdJWdMMM/x
UbQAzzThWYfz2ok4q+mVjZtexaqIuADhWylardNAtiEBff1htnkRd+R2EruBJMJQ
Yn1ElVx/6Do=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:17:41 2025 by rpki-client