Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/z14f9j9-kWTM3bOXiSMAu_krtdY.roa
File: z14f9j9-kWTM3bOXiSMAu_krtdY.roa (raw, json)
Hash identifier: NA5ercmLLayH2FKHCci3q68mqh09FJy+f3GLIgiGl3E=
Subject key identifier: CF:5E:1F:F6:3F:7E:91:64:CC:DD:B3:97:89:23:00:BB:F9:2B:B5:D6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F91696F59FA94C740467B3C5F08D1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/z14f9j9-kWTM3bOXiSMAu_krtdY.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48939
IP address blocks: 92.63.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:69:6f:59:fa:94:c7:40:46:7b:3c:5f:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf5e1ff63f7e9164ccddb397892300bbf92bb5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:ed:4e:c8:da:b2:18:5f:41:0c:1d:0e:bb:
a0:58:aa:d5:72:11:5b:77:28:de:52:2f:22:f3:07:
e9:29:75:3d:a9:5c:b6:5a:f5:39:4e:1a:a1:8b:cd:
84:2c:6e:f8:1b:f8:bc:7c:96:c2:15:fe:a9:9b:8f:
40:03:09:72:ed:42:4b:13:0e:e2:eb:38:39:1e:4e:
43:38:b8:fe:08:49:15:29:60:c0:fc:f1:45:99:f7:
6c:7e:4e:96:5d:56:95:07:b2:79:59:2e:98:ff:45:
ed:ab:5f:3c:72:7f:9a:29:ea:32:2e:fd:ec:60:91:
21:b0:46:5b:53:af:18:09:46:21:68:42:fe:e1:5c:
ec:f4:01:ee:5f:a8:b6:87:16:ba:22:3b:b9:14:38:
f1:99:c2:dd:68:51:cc:29:5f:8a:a7:e9:12:2a:f3:
dd:52:c8:cc:41:2c:a7:21:65:67:f5:4d:13:fa:4a:
0d:04:67:c9:b8:e3:7d:73:b4:96:b0:51:25:b1:33:
5a:4c:de:9a:aa:b0:b0:d6:67:f1:aa:36:22:a9:5a:
9c:ad:3b:92:b0:f2:e3:c4:39:7c:3d:f7:76:49:2e:
cd:bf:c7:1d:1f:a1:45:c3:f2:2b:af:9f:3c:d7:27:
87:84:a7:25:47:45:f4:e9:09:f3:b0:a2:f8:0b:4a:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5E:1F:F6:3F:7E:91:64:CC:DD:B3:97:89:23:00:BB:F9:2B:B5:D6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/z14f9j9-kWTM3bOXiSMAu_krtdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:46:2d:5e:fb:e4:c7:fa:54:14:00:69:c2:5e:87:d7:15:e0:
ed:9e:ed:69:8d:44:f4:e0:a7:32:c7:e4:c4:3f:a0:30:3d:61:
d9:95:17:24:d4:5f:44:f8:f3:da:f6:7c:d1:de:f4:7d:c6:96:
d4:fe:7c:07:c4:24:17:9f:00:72:58:2f:cc:04:b1:00:f4:bb:
d7:cd:a4:12:cc:08:dd:68:9f:d3:db:16:03:47:f3:0b:bf:01:
c2:5a:63:a0:49:b1:bf:bb:13:bf:d2:ad:d1:1a:f5:6f:fa:7e:
44:05:b1:81:59:69:85:08:ca:98:a6:e8:9b:c7:0c:d1:0f:3f:
c8:82:6d:f4:fd:9f:13:4a:10:3d:c5:d8:90:d8:77:26:ff:e0:
92:30:cb:c0:42:d9:6d:66:b2:e2:39:76:a8:06:60:c6:7b:7d:
b0:9b:f3:56:f9:fb:91:bf:35:dd:57:7c:90:72:fd:d3:42:fb:
46:26:91:b7:e6:e2:74:8e:47:79:18:d8:1f:fe:61:4f:2b:4d:
5e:f6:af:99:e1:df:bd:84:4d:8d:ea:35:c7:54:88:15:c1:78:
75:fb:6e:96:d1:c6:6b:ea:40:6d:6c:9f:b0:9c:0f:de:b1:9b:
d2:b0:49:3b:ab:35:b1:ad:66:b8:32:86:ac:dc:38:9e:d0:75:
f8:5e:95:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5Fpb1n6lMdARns8XwjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjVlMWZmNjNmN2U5MTY0Y2NkZGIzOTc4OTIzMDBiYmY5MmJiNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmvtTsjashhfQQwdDrugWKrVchFb
dyjeUi8i8wfpKXU9qVy2WvU5Thqhi82ELG74G/i8fJbCFf6pm49AAwly7UJLEw7i
6zg5Hk5DOLj+CEkVKWDA/PFFmfdsfk6WXVaVB7J5WS6Y/0Xtq188cn+aKeoyLv3s
YJEhsEZbU68YCUYhaEL+4Vzs9AHuX6i2hxa6Iju5FDjxmcLdaFHMKV+Kp+kSKvPd
UsjMQSynIWVn9U0T+koNBGfJuON9c7SWsFElsTNaTN6aqrCw1mfxqjYiqVqcrTuS
sPLjxDl8Pfd2SS7Nv8cdH6FFw/Irr5881yeHhKclR0X06QnzsKL4C0reTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9eH/Y/fpFkzN2zl4kjALv5K7XWMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvejE0ZjlqOS1rV1RNM2JPWGlTTUF1X2tydGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD+/MA0G
CSqGSIb3DQEBCwUAA4IBAQC1Ri1e++TH+lQUAGnCXofXFeDtnu1pjUT04Kcyx+TE
P6AwPWHZlRck1F9E+PPa9nzR3vR9xpbU/nwHxCQXnwByWC/MBLEA9LvXzaQSzAjd
aJ/T2xYDR/MLvwHCWmOgSbG/uxO/0q3RGvVv+n5EBbGBWWmFCMqYpuibxwzRDz/I
gm30/Z8TShA9xdiQ2Hcm/+CSMMvAQtltZrLiOXaoBmDGe32wm/NW+fuRvzXdV3yQ
cv3TQvtGJpG35uJ0jkd5GNgf/mFPK01e9q+Z4d+9hE2N6jXHVIgVwXh1+26W0cZr
6kBtbJ+wnA/esZvSsEk7qzWxrWa4Moas3Die0HX4XpVm
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:13 2025 by rpki-client