Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/5G5BM-esfF_6C_xQG_XyVMwxyOE.roa
File: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (raw, json)
Hash identifier: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=
Subject key identifier: E4:6E:41:33:E7:AC:7C:5F:FA:0B:FC:50:1B:F5:F2:54:CC:31:C8:E1
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 01942369759CBC993E8B92A93E8DDF992937
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/5G5BM-esfF_6C_xQG_XyVMwxyOE.roa
Signing time: Wed 01 Jan 2025 19:48:21 +0000
ROA not before: Wed 01 Jan 2025 19:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51353
IP address blocks: 80.82.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:75:9c:bc:99:3e:8b:92:a9:3e:8d:df:99:29:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e46e4133e7ac7c5ffa0bfc501bf5f254cc31c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:b9:5a:60:3d:b7:28:7c:35:1d:14:43:d0:
32:98:c1:07:53:7b:25:4d:0e:3d:16:40:3a:de:a3:
5b:aa:31:f0:86:b5:ec:fb:54:fd:91:b5:31:ae:e5:
db:a6:bf:e5:47:b3:30:b6:da:14:27:02:63:2f:07:
b0:eb:24:6f:05:43:71:ad:52:c8:ab:90:44:48:a0:
68:2c:4d:43:b1:49:50:ba:0a:7f:5f:ba:a4:fd:13:
99:aa:80:2c:50:60:42:f1:45:ab:92:c6:b1:df:c3:
76:35:bf:2f:1f:76:9c:67:aa:4d:36:27:ec:fe:a2:
9d:c5:95:4e:27:5e:c9:b9:97:2b:4c:f9:82:f2:f4:
27:fd:0d:e6:84:45:c5:63:80:cc:f2:c9:9a:82:ee:
5f:52:a0:24:50:ee:8c:8b:cd:94:2d:6c:61:0f:af:
54:a8:ba:c2:fe:67:58:88:99:92:f0:5b:70:d2:ab:
fa:4a:84:10:c3:90:e8:82:9a:06:01:83:c8:a3:6a:
6e:d7:bd:54:a9:39:15:71:40:55:45:2c:4f:85:6d:
8f:4d:9c:ae:f1:16:9b:53:6f:79:03:45:ce:85:66:
4a:1b:55:60:aa:2c:41:10:e6:78:ab:fa:a5:4c:de:
1c:7a:03:b9:6d:f7:79:f3:35:d7:a2:5d:29:6c:55:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6E:41:33:E7:AC:7C:5F:FA:0B:FC:50:1B:F5:F2:54:CC:31:C8:E1
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/5G5BM-esfF_6C_xQG_XyVMwxyOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ab:ea:ff:ba:8e:7f:39:d7:f6:15:6a:2a:bb:32:a7:bc:93:
a8:81:16:98:0c:d6:b2:f5:71:26:e6:b3:62:38:ad:0c:a5:70:
a6:c8:ab:db:21:f6:36:f4:9c:91:ee:ad:4f:3a:61:71:dd:1d:
75:ae:db:e7:7a:b8:f7:80:92:6e:c5:3b:6d:ef:27:db:03:51:
d5:d4:67:0f:9b:26:6a:c0:3a:3d:7b:4a:24:07:1b:1e:c6:42:
5a:7e:ea:6a:2a:84:dc:df:bc:72:8d:02:93:79:f5:f7:bb:8e:
60:d2:82:1d:22:4e:25:1c:f4:56:0a:fd:36:fc:24:9c:1f:f7:
bc:19:0e:82:48:dc:02:a7:6e:be:df:91:bf:55:d9:14:34:8f:
b3:42:88:83:2b:63:fc:8b:2c:8c:c9:47:f6:c4:a7:3a:d2:50:
bc:ea:dd:63:ea:cf:e0:71:09:1b:9d:bf:70:c8:2f:98:de:12:
bf:ff:49:7a:1b:7e:45:97:5e:6c:c0:9f:ac:9e:d1:74:9e:98:
09:00:1e:3b:8e:6d:5a:35:0e:83:4a:87:ce:74:13:c5:2b:d2:
a6:29:36:90:ef:df:0d:59:4a:de:96:10:b2:3c:d3:91:04:4d:
1c:50:db:58:79:ba:e2:7e:07:68:1f:bf:32:0b:94:9a:c2:70:
30:16:40:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaXWcvJk+i5KpPo3fmSk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll
MGEyMzgwHhcNMjUwMTAxMTk0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDZlNDEzM2U3YWM3YzVmZmEwYmZjNTAxYmY1ZjI1NGNjMzFjOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2O5WmA9tyh8NR0UQ9AymMEHU3sl
TQ49FkA63qNbqjHwhrXs+1T9kbUxruXbpr/lR7MwttoUJwJjLwew6yRvBUNxrVLI
q5BESKBoLE1DsUlQugp/X7qk/ROZqoAsUGBC8UWrksax38N2Nb8vH3acZ6pNNifs
/qKdxZVOJ17JuZcrTPmC8vQn/Q3mhEXFY4DM8smagu5fUqAkUO6Mi82ULWxhD69U
qLrC/mdYiJmS8Ftw0qv6SoQQw5DogpoGAYPIo2pu171UqTkVcUBVRSxPhW2PTZyu
8RabU295A0XOhWZKG1VgqixBEOZ4q/qlTN4cegO5bfd58zXXol0pbFWD+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORuQTPnrHxf+gv8UBv18lTMMcjhMB8GA1UdIwQY
MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt
Nzg3OTFjOTM1NmEzLzEvNUc1Qk0tZXNmRl82Q194UUdfWHlWTXd4eU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz
LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFIYMA0G
CSqGSIb3DQEBCwUAA4IBAQBLq+r/uo5/Odf2FWoquzKnvJOogRaYDNay9XEm5rNi
OK0MpXCmyKvbIfY29JyR7q1POmFx3R11rtvnerj3gJJuxTtt7yfbA1HV1GcPmyZq
wDo9e0okBxsexkJafupqKoTc37xyjQKTefX3u45g0oIdIk4lHPRWCv02/CScH/e8
GQ6CSNwCp26+35G/VdkUNI+zQoiDK2P8iyyMyUf2xKc60lC86t1j6s/gcQkbnb9w
yC+Y3hK//0l6G35Fl15swJ+sntF0npgJAB47jm1aNQ6DSofOdBPFK9KmKTaQ798N
WUrelhCyPNORBE0cUNtYebrifgdoH78yC5SawnAwFkC7
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:10 2025 by rpki-client