Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/5TPXCAFiMBh5U8VkfORxsQ-zCTU.roa
File: 5TPXCAFiMBh5U8VkfORxsQ-zCTU.roa (raw, json)
Hash identifier: 1gHTgwdhWWEjZ/EU+S/zQJgfLfq+GM0xLlVn+BOoURQ=
Subject key identifier: E5:33:D7:08:01:62:30:18:79:53:C5:64:7C:E4:71:B1:0F:B3:09:35
Certificate issuer: /CN=9ef9f7a0e82c737b2e62afeb221a9766aa0d3d27
Certificate serial: 01856E01D5440C03DBD91BDB5B4040E7221E
Authority key identifier: 9E:F9:F7:A0:E8:2C:73:7B:2E:62:AF:EB:22:1A:97:66:AA:0D:3D:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvn3oOgsc3suYq_rIhqXZqoNPSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/5TPXCAFiMBh5U8VkfORxsQ-zCTU.roa
Signing time: Sun 01 Jan 2023 15:44:51 +0000
ROA not before: Sun 01 Jan 2023 15:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42257
IP address blocks: 193.200.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:d5:44:0c:03:db:d9:1b:db:5b:40:40:e7:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9f7a0e82c737b2e62afeb221a9766aa0d3d27
Validity
Not Before: Jan 1 15:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e533d708016230187953c5647ce471b10fb30935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:cb:e0:19:67:f5:86:27:6d:f1:1d:aa:72:
b8:36:2f:1c:3f:23:9f:c1:8e:81:64:23:9b:91:6c:
14:a0:93:ef:bf:a1:63:d2:1a:56:d9:f6:56:2c:ca:
a9:48:44:47:35:a7:f2:0c:12:5b:7d:f5:df:56:47:
ac:6c:87:fb:58:b7:e3:ed:d6:95:a0:6d:35:5e:82:
b9:a6:9c:3d:96:95:29:44:03:e4:05:72:43:f0:39:
ed:1a:75:60:ae:0a:f1:48:51:b4:ed:a2:58:b5:1d:
40:a4:c3:1a:79:c2:32:60:26:94:c2:36:00:01:27:
6b:ac:02:23:17:3b:5a:18:de:89:b5:1d:75:3a:26:
a7:1b:e8:3b:05:d2:b5:de:13:ad:a7:10:e6:56:80:
e2:f5:53:95:f9:2d:3e:ee:d0:0d:64:4e:22:b3:97:
3a:40:23:af:cd:14:39:49:67:6e:a0:ce:5e:d4:69:
f6:e8:80:05:bd:67:21:a1:70:ab:f3:4b:47:de:0d:
75:b6:b4:49:a5:b2:49:83:6d:13:dd:ac:3a:1f:c0:
c3:cb:0a:ab:15:3a:e6:dd:50:e3:d1:bb:86:2e:1d:
1c:5f:db:89:51:72:88:36:2f:3f:ce:1f:d3:f7:a6:
17:db:df:fc:3a:fb:9e:b4:22:5e:24:a8:2d:1c:b0:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:33:D7:08:01:62:30:18:79:53:C5:64:7C:E4:71:B1:0F:B3:09:35
X509v3 Authority Key Identifier:
keyid:9E:F9:F7:A0:E8:2C:73:7B:2E:62:AF:EB:22:1A:97:66:AA:0D:3D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvn3oOgsc3suYq_rIhqXZqoNPSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/5TPXCAFiMBh5U8VkfORxsQ-zCTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b5afad-c20b-40f0-b12f-c6a44b83fbcc/1/nvn3oOgsc3suYq_rIhqXZqoNPSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.6.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:20:a5:28:5a:2d:e1:d3:56:ff:f9:e3:a4:f3:5a:e4:58:
c4:a1:3c:2d:b6:28:6b:9b:d5:a2:0a:e6:cc:db:bf:97:7a:b0:
8b:e2:3d:04:b8:2b:3b:72:75:7a:9c:99:b1:89:40:5a:c2:95:
0f:48:be:4d:c7:f5:7e:ed:a0:4e:a2:4d:02:e8:e2:12:e6:fc:
09:7b:e3:e4:99:35:28:f1:27:6e:0d:2f:26:a8:04:d9:02:5c:
2f:bb:29:66:4c:d0:e6:ae:bf:f2:b8:ab:60:a0:ad:4b:af:4f:
e0:47:59:39:9f:e4:f9:65:aa:de:45:91:80:34:6f:27:50:62:
c1:ca:71:27:5f:a3:87:f2:80:fd:c9:9b:be:ee:10:a9:f2:23:
3d:c3:8f:a9:c8:72:e5:b9:d3:d6:ad:c0:32:08:51:34:eb:a2:
35:18:f1:7f:7c:1b:30:22:64:63:35:44:f6:c2:5d:65:f6:1d:
78:62:cf:42:c1:70:16:63:e3:06:42:81:d9:f5:04:47:bb:0c:
7a:5f:ea:5f:60:6a:b2:11:33:ce:7d:61:a6:ab:ae:89:da:f2:
d8:2f:f4:d8:a6:e7:1d:c9:f8:f9:2a:36:d9:30:7b:7a:17:d5:
17:41:fd:be:6e:68:ea:79:56:14:3a:0a:7f:52:60:2c:86:ac:
c3:b7:18:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAdVEDAPb2RvbW0BA5yIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjlmN2EwZTgyYzczN2IyZTYyYWZlYjIyMWE5NzY2YWEw
ZDNkMjcwHhcNMjMwMTAxMTU0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTMzZDcwODAxNjIzMDE4Nzk1M2M1NjQ3Y2U0NzFiMTBmYjMwOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntvL4Bln9YYnbfEdqnK4Ni8cPyOf
wY6BZCObkWwUoJPvv6Fj0hpW2fZWLMqpSERHNafyDBJbffXfVkesbIf7WLfj7daV
oG01XoK5ppw9lpUpRAPkBXJD8DntGnVgrgrxSFG07aJYtR1ApMMaecIyYCaUwjYA
ASdrrAIjFztaGN6JtR11OianG+g7BdK13hOtpxDmVoDi9VOV+S0+7tANZE4is5c6
QCOvzRQ5SWduoM5e1Gn26IAFvWchoXCr80tH3g11trRJpbJJg20T3aw6H8DDywqr
FTrm3VDj0buGLh0cX9uJUXKINi8/zh/T96YX29/8OvuetCJeJKgtHLAA9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUz1wgBYjAYeVPFZHzkcbEPswk1MB8GA1UdIwQY
MBaAFJ7596DoLHN7LmKv6yIal2aqDT0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZuM29PZ3NjM3N1WXFfcklocVhacW9OUFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNWFmYWQtYzIwYi00MGYwLWIxMmYt
YzZhNDRiODNmYmNjLzEvNVRQWENBRmlNQmg1VThWa2ZPUnhzUS16Q1RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNWFmYWQtYzIwYi00MGYwLWIxMmYtYzZhNDRiODNmYmNj
LzEvbnZuM29PZ3NjM3N1WXFfcklocVhacW9OUFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcgGMA0G
CSqGSIb3DQEBCwUAA4IBAQCRmSClKFot4dNW//njpPNa5FjEoTwttihrm9WiCubM
27+XerCL4j0EuCs7cnV6nJmxiUBawpUPSL5Nx/V+7aBOok0C6OIS5vwJe+PkmTUo
8SduDS8mqATZAlwvuylmTNDmrr/yuKtgoK1Lr0/gR1k5n+T5ZareRZGANG8nUGLB
ynEnX6OH8oD9yZu+7hCp8iM9w4+pyHLludPWrcAyCFE066I1GPF/fBswImRjNUT2
wl1l9h14Ys9CwXAWY+MGQoHZ9QRHuwx6X+pfYGqyETPOfWGmq66J2vLYL/TYpucd
yfj5KjbZMHt6F9UXQf2+bmjqeVYUOgp/UmAshqzDtxiI
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:04 2025 by rpki-client