Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/PkfIS5G435_5emRi_COnc1WyLBs.roa
File: PkfIS5G435_5emRi_COnc1WyLBs.roa (raw, json)
Hash identifier: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=
Subject key identifier: 3E:47:C8:4B:91:B8:DF:9F:F9:7A:64:62:FC:23:A7:73:55:B2:2C:1B
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 01942368D1F812E1E4EE46F416F72580C679
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/PkfIS5G435_5emRi_COnc1WyLBs.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 92.42.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d1:f8:12:e1:e4:ee:46:f4:16:f7:25:80:c6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e47c84b91b8df9ff97a6462fc23a77355b22c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:f2:c5:25:fc:e9:11:b3:0a:2e:a3:0f:2a:
43:5a:66:2e:78:bd:e8:34:22:9f:72:ff:c0:60:74:
01:07:2f:cb:50:93:b2:44:d9:88:7a:fd:3b:69:75:
39:76:de:2b:36:85:0c:dc:17:be:83:73:12:fe:a6:
05:6c:01:df:ed:53:ae:fd:aa:67:86:8a:6f:ac:77:
a8:d1:3b:bd:78:69:2e:9f:49:1e:b6:0f:5d:a7:61:
de:40:c3:e4:fd:b8:6f:62:21:88:20:26:21:9b:0f:
2b:5b:a9:e4:6f:91:73:61:4d:f7:3b:93:b1:ce:13:
60:01:94:d9:b9:3c:bc:3d:d3:7e:52:32:8c:fc:d8:
6d:e3:6d:e6:38:d1:13:00:39:f7:2f:45:0e:35:29:
db:ba:a3:b6:55:16:dc:0b:7b:0e:75:fa:39:41:4c:
e7:33:d9:4f:ef:d3:ae:f3:6b:bd:5c:19:9a:fb:d4:
2f:f6:e7:9d:32:cd:c6:15:a7:c9:7a:28:96:c5:95:
60:7c:f6:ba:6f:e8:64:5a:56:1b:ed:30:ac:5b:61:
94:ce:d1:f4:55:56:74:ca:b9:de:24:fd:46:8d:2f:
99:14:ab:ff:65:32:59:93:8c:2c:72:76:95:4c:5f:
15:5c:87:2f:8e:db:03:97:0a:23:8a:6f:f3:5d:6e:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:C8:4B:91:B8:DF:9F:F9:7A:64:62:FC:23:A7:73:55:B2:2C:1B
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/PkfIS5G435_5emRi_COnc1WyLBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
99:58:e1:c1:9f:d3:16:32:be:03:4d:b4:01:63:79:dd:4e:f3:
e8:9d:10:bf:3e:f5:e1:d5:60:23:2a:a6:49:d5:fc:00:97:fa:
16:44:89:35:82:91:89:8c:e2:45:0d:d4:a8:d1:71:32:c5:60:
cd:08:5a:ef:df:28:9c:5c:f2:ad:66:18:ff:83:58:f0:a4:e0:
e8:4b:ad:3d:cd:a4:c6:5d:c9:14:78:38:25:f7:75:b5:18:d3:
49:bc:7f:ce:76:af:fa:57:f8:d4:ca:93:fa:89:be:9a:09:fc:
10:3e:f8:9c:e8:f0:cb:6a:83:e5:3c:af:ff:4f:06:95:08:39:
15:e5:82:af:82:61:18:09:1c:3b:de:d8:db:24:96:6d:db:fd:
85:48:9a:98:40:73:07:40:b3:e6:8b:5b:52:22:cd:e0:dd:89:
d8:4e:1f:c1:94:37:4c:eb:7e:bc:89:9f:9f:5d:71:8e:ae:cc:
97:7d:57:0d:82:c0:87:e3:e1:a6:54:64:72:1b:17:2e:12:41:
f6:f4:b5:71:66:31:e3:8b:cc:49:7e:0e:4f:c5:77:e7:50:c8:
ff:1d:23:9f:88:48:a3:b4:03:b0:3d:d8:a5:14:60:46:90:48:
f6:d0:c0:7d:3c:e4:90:dd:af:ba:4b:49:2d:a2:1d:40:8f:50:
d6:16:c5:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaNH4EuHk7kb0FvclgMZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWM3YzRhNTcxNTVjZThkZWM1YjFjZDYyZmZhODQwMTdi
MTZmNTgwHhcNMjUwMTAxMTk0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTQ3Yzg0YjkxYjhkZjlmZjk3YTY0NjJmYzIzYTc3MzU1YjIyYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCjyxSX86RGzCi6jDypDWmYueL3o
NCKfcv/AYHQBBy/LUJOyRNmIev07aXU5dt4rNoUM3Be+g3MS/qYFbAHf7VOu/apn
hopvrHeo0Tu9eGkun0ketg9dp2HeQMPk/bhvYiGIICYhmw8rW6nkb5FzYU33O5Ox
zhNgAZTZuTy8PdN+UjKM/Nht423mONETADn3L0UONSnbuqO2VRbcC3sOdfo5QUzn
M9lP79Ou82u9XBma+9Qv9uedMs3GFafJeiiWxZVgfPa6b+hkWlYb7TCsW2GUztH0
VVZ0yrneJP1GjS+ZFKv/ZTJZk4wscnaVTF8VXIcvjtsDlwojim/zXW5OFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5HyEuRuN+f+XpkYvwjp3NVsiwbMB8GA1UdIwQY
MBaAFMjsfEpXFVzo3sWxzWL/qEAXsW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEvUGtmSVM1RzQzNV81ZW1SaV9DT25jMVd5TEJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEveU94OFNsY1ZYT2pleGJITll2LW9RQmV4YjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCpjMA0G
CSqGSIb3DQEBCwUAA4IBAQCZWOHBn9MWMr4DTbQBY3ndTvPonRC/PvXh1WAjKqZJ
1fwAl/oWRIk1gpGJjOJFDdSo0XEyxWDNCFrv3yicXPKtZhj/g1jwpODoS609zaTG
XckUeDgl93W1GNNJvH/Odq/6V/jUypP6ib6aCfwQPvic6PDLaoPlPK//TwaVCDkV
5YKvgmEYCRw73tjbJJZt2/2FSJqYQHMHQLPmi1tSIs3g3YnYTh/BlDdM6368iZ+f
XXGOrsyXfVcNgsCH4+GmVGRyGxcuEkH29LVxZjHji8xJfg5PxXfnUMj/HSOfiEij
tAOwPdilFGBGkEj20MB9POSQ3a+6S0ktoh1Aj1DWFsV4
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:04 2025 by rpki-client