Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/5n_YcLg3YQQNFYTwhU5huai3ZJI.roa
File: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (raw, json)
Hash identifier: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=
Subject key identifier: E6:7F:D8:70:B8:37:61:04:0D:15:84:F0:85:4E:61:B9:A8:B7:64:92
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FDD5467AC9F2861D49D7AB0596A0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/5n_YcLg3YQQNFYTwhU5huai3ZJI.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200554
IP address blocks: 185.41.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fd:d5:46:7a:c9:f2:86:1d:49:d7:ab:05:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67fd870b83761040d1584f0854e61b9a8b76492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:87:fc:c5:4f:44:b4:da:31:df:0d:f3:3b:
13:bf:8c:5f:5e:e2:70:5f:74:2b:e0:41:2c:2f:aa:
9f:cf:7b:2c:ab:48:3d:6d:34:47:01:31:db:48:ea:
8f:6c:9d:f6:e4:d7:24:af:b1:bc:f5:1f:8f:42:5c:
83:c7:b2:4a:23:3d:fa:96:6c:ae:4a:b8:a7:31:51:
67:ac:15:01:82:ba:7b:38:4f:f0:75:04:e7:9b:08:
a8:82:6d:84:ea:90:e0:cf:c0:81:67:cc:eb:bd:28:
cc:f0:b0:2f:36:82:66:74:2c:98:b1:4e:3e:bd:49:
02:1f:0f:7b:a9:e8:1f:7c:cb:f2:30:7d:89:55:36:
13:ac:12:c6:78:79:0b:38:53:ed:a7:67:98:b8:21:
ad:a2:be:be:02:ec:4f:45:f8:8e:79:db:e8:21:e3:
19:ee:60:dd:ab:ce:8c:12:38:1c:90:57:f0:3f:1e:
a9:22:9f:55:83:a0:07:a3:7c:9a:03:c5:76:b0:c2:
e1:0d:86:dc:4e:10:d0:e8:db:7c:2d:ac:e8:98:6e:
93:4d:02:c5:9f:d8:3b:b8:a9:96:a2:79:1f:0c:38:
f8:02:28:61:7c:62:a3:8d:e2:32:53:a7:26:b1:56:
20:83:0c:8f:84:36:28:1d:4d:29:22:2c:da:98:fd:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:D8:70:B8:37:61:04:0D:15:84:F0:85:4E:61:B9:A8:B7:64:92
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/5n_YcLg3YQQNFYTwhU5huai3ZJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.0.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d4:47:98:f6:66:38:5a:c7:ea:fa:37:56:ce:29:ea:af:1e:
63:17:22:65:dd:1f:fb:38:49:46:2a:fe:9c:c2:7e:1e:a7:37:
fc:0a:56:21:62:b7:84:9f:1d:b1:af:88:b6:5b:de:af:34:b9:
75:eb:6c:bb:ad:04:58:e2:be:4e:85:28:18:34:18:33:46:0d:
38:bf:25:d2:45:5c:21:b3:45:20:b9:67:9f:14:04:e6:15:43:
9f:a8:fc:cf:53:55:1a:88:b2:d9:59:f8:9d:6a:97:13:f6:99:
45:d2:40:76:b1:77:a7:cd:bf:9b:13:1b:06:05:74:03:fc:8e:
e4:aa:0b:74:72:07:e2:dc:b7:e1:2c:16:b0:55:18:de:c2:74:
1f:17:3d:4f:dc:a0:16:02:58:7a:4d:c6:83:a3:04:31:c5:37:
e7:09:e5:74:c9:17:0a:3f:c8:8c:33:c1:46:6e:54:13:59:71:
d4:a3:06:b7:e7:e9:df:d5:63:a3:93:b0:f6:2d:f0:b2:6c:c5:
aa:40:bf:f1:f6:2d:f5:a7:23:a7:ab:0d:d5:07:e6:69:6f:59:
87:21:92:74:ec:e3:52:8a:27:b5:7c:1a:f2:a6:f4:28:93:3d:
60:30:65:42:63:6a:be:64:3c:cf:ab:aa:83:c0:3c:94:77:be:
f6:11:5a:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntf3VRnrJ8oYdSderBZagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwMTAyMTU1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjdmZDg3MGI4Mzc2MTA0MGQxNTg0ZjA4NTRlNjFiOWE4Yjc2NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI2H/MVPRLTaMd8N8zsTv4xfXuJw
X3Qr4EEsL6qfz3ssq0g9bTRHATHbSOqPbJ325Nckr7G89R+PQlyDx7JKIz36lmyu
SrinMVFnrBUBgrp7OE/wdQTnmwiogm2E6pDgz8CBZ8zrvSjM8LAvNoJmdCyYsU4+
vUkCHw97qegffMvyMH2JVTYTrBLGeHkLOFPtp2eYuCGtor6+AuxPRfiOedvoIeMZ
7mDdq86MEjgckFfwPx6pIp9Vg6AHo3yaA8V2sMLhDYbcThDQ6Nt8LazomG6TTQLF
n9g7uKmWonkfDDj4AihhfGKjjeIyU6cmsVYggwyPhDYoHU0pIizamP1wFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZ/2HC4N2EEDRWE8IVOYbmot2SSMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvNW5fWWNMZzNZUVFORllUd2hVNWh1YWkzWkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSkAMA0G
CSqGSIb3DQEBCwUAA4IBAQA31EeY9mY4Wsfq+jdWzinqrx5jFyJl3R/7OElGKv6c
wn4epzf8ClYhYreEnx2xr4i2W96vNLl162y7rQRY4r5OhSgYNBgzRg04vyXSRVwh
s0UguWefFATmFUOfqPzPU1UaiLLZWfidapcT9plF0kB2sXenzb+bExsGBXQD/I7k
qgt0cgfi3LfhLBawVRjewnQfFz1P3KAWAlh6TcaDowQxxTfnCeV0yRcKP8iMM8FG
blQTWXHUowa35+nf1WOjk7D2LfCybMWqQL/x9i31pyOnqw3VB+Zpb1mHIZJ07ONS
iie1fBrypvQokz1gMGVCY2q+ZDzPq6qDwDyUd772EVpH
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:09 2025 by rpki-client