Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/ED7irA7lmwh5tHPGbkFIIeJv-bg.roa
File: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (raw, json)
Hash identifier: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=
Subject key identifier: 10:3E:E2:AC:0E:E5:9B:08:79:B4:73:C6:6E:41:48:21:E2:6F:F9:B8
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 019426D90EF3A5763086C4923DFC3C1BE32E
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/ED7irA7lmwh5tHPGbkFIIeJv-bg.roa
Signing time: Thu 02 Jan 2025 11:49:06 +0000
ROA not before: Thu 02 Jan 2025 11:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38934
IP address blocks: 5.158.96.0/19 maxlen: 24
80.251.48.0/20 maxlen: 24
193.178.120.0/22 maxlen: 24
2a01:fc40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0e:f3:a5:76:30:86:c4:92:3d:fc:3c:1b:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Jan 2 11:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=103ee2ac0ee59b0879b473c66e414821e26ff9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:7e:f6:48:d0:52:8c:4b:4f:71:b6:83:71:
e9:4d:ed:8f:94:74:35:2f:10:d9:54:b2:46:f6:34:
67:df:3e:2a:a2:6e:e2:cb:3d:d1:b6:c6:7f:46:fc:
0a:f4:40:e2:a2:b4:f2:6b:ef:7f:41:58:fc:5c:c0:
47:59:89:c9:98:c7:81:1a:d7:74:ab:72:fd:25:2a:
6a:c2:54:cc:eb:7f:7b:a1:87:d5:ea:b7:68:cc:cf:
23:16:2e:21:cd:1c:e6:d1:a0:56:7d:07:80:58:75:
e5:7a:03:29:89:74:6c:47:70:5b:cb:03:73:48:1e:
1c:c4:2a:b8:4c:2b:37:89:16:00:da:fd:32:1b:03:
03:68:17:a2:57:cd:45:0b:fc:92:3c:d3:8d:5d:74:
bc:29:5b:8d:c0:f5:96:3f:4a:6c:8d:8f:98:42:6d:
54:6e:82:4d:8d:06:09:9f:cc:dc:e2:15:2a:de:c4:
f2:fa:e7:6c:3d:da:05:f9:8e:37:9f:05:05:16:0f:
4d:f9:a1:5f:5b:01:d0:af:d5:87:d5:b4:ba:c7:b2:
a3:37:c9:d4:cd:ec:28:46:cf:a9:c0:dd:1a:55:34:
a3:33:20:e1:84:64:b6:ed:3a:d8:f9:00:ea:8a:72:
44:e5:d7:c1:40:67:39:d1:3c:06:a6:6d:16:41:57:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:E2:AC:0E:E5:9B:08:79:B4:73:C6:6E:41:48:21:E2:6F:F9:B8
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/ED7irA7lmwh5tHPGbkFIIeJv-bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.96.0/19
80.251.48.0/20
193.178.120.0/22
IPv6:
2a01:fc40::/32
Signature Algorithm: sha256WithRSAEncryption
4b:f7:ac:3c:12:b6:ff:4d:cd:dd:af:90:29:f4:1a:90:f6:5f:
56:76:a2:4e:a0:03:2e:f8:60:92:a7:42:ac:ed:41:80:dc:39:
84:db:e4:03:a2:48:7f:3d:9d:7c:e6:4b:b7:83:95:e1:d6:db:
cc:d0:f7:7c:c1:c7:a3:a4:a2:62:f0:93:47:25:ec:5f:ae:96:
16:d8:1e:15:1d:81:3c:dd:89:8e:a6:37:77:32:12:f6:08:3b:
02:d1:86:d3:66:da:85:d7:f3:0a:66:8d:07:9d:b2:d9:f6:36:
ac:de:4f:37:49:a8:02:7e:4b:32:7f:46:23:06:18:a0:a4:0c:
fa:9d:ad:4e:04:30:15:35:e2:65:fc:40:5e:81:fb:f6:01:d8:
a4:8d:44:e1:62:4d:0e:e7:e3:6e:6a:80:24:29:81:71:e5:11:
a3:8b:72:fa:5b:43:4d:3d:1d:77:ff:8e:65:55:c0:a9:37:fb:
69:39:e5:92:13:3e:5a:a5:bd:b6:b3:3a:f7:d2:21:92:c4:2c:
6e:53:31:8e:36:2c:fa:94:97:06:a3:66:f8:54:cd:19:27:69:
77:bd:f5:f3:e2:56:96:65:f0:2b:99:be:62:ff:60:27:bc:94:
08:f8:20:72:58:9e:55:2c:04:37:37:b8:b7:bb:88:77:ed:e8:
7e:f2:20:53
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQm2Q7zpXYwhsSSPfw8G+MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmZhZGYyOTIzOWVkOGNmM2Y2YzY5M2Q4YmRiNzlmNDIw
MDBhYmMwHhcNMjUwMTAyMTE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDNlZTJhYzBlZTU5YjA4NzliNDczYzY2ZTQxNDgyMWUyNmZmOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmB+9kjQUoxLT3G2g3HpTe2PlHQ1
LxDZVLJG9jRn3z4qom7iyz3RtsZ/RvwK9EDiorTya+9/QVj8XMBHWYnJmMeBGtd0
q3L9JSpqwlTM6397oYfV6rdozM8jFi4hzRzm0aBWfQeAWHXlegMpiXRsR3BbywNz
SB4cxCq4TCs3iRYA2v0yGwMDaBeiV81FC/ySPNONXXS8KVuNwPWWP0psjY+YQm1U
boJNjQYJn8zc4hUq3sTy+udsPdoF+Y43nwUFFg9N+aFfWwHQr9WH1bS6x7KjN8nU
zewoRs+pwN0aVTSjMyDhhGS27TrY+QDqinJE5dfBQGc50TwGpm0WQVeXuwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFBA+4qwO5ZsIebRzxm5BSCHib/m4MB8GA1UdIwQY
MBaAFNC/rfKSOe2M8/bGk9i9t59CAAq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAt
N2JiMzY1ZjM0YzZjLzEvRUQ3aXJBN2xtd2g1dEhQR2JrRklJZUp2LWJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jZmE5Y2QtOGQ3Yi00YTM1LTgyZDAtN2JiMzY1ZjM0YzZj
LzEvMEwtdDhwSTU3WXp6OXNhVDJMMjNuMElBQ3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFBZ5gAwQE
UPswAwQCwbJ4MA0EAgACMAcDBQAqAfxAMA0GCSqGSIb3DQEBCwUAA4IBAQBL96w8
Erb/Tc3dr5Ap9BqQ9l9WdqJOoAMu+GCSp0Ks7UGA3DmE2+QDokh/PZ185ku3g5Xh
1tvM0Pd8wcejpKJi8JNHJexfrpYW2B4VHYE83YmOpjd3MhL2CDsC0YbTZtqF1/MK
Zo0HnbLZ9jas3k83SagCfksyf0YjBhigpAz6na1OBDAVNeJl/EBegfv2AdikjUTh
Yk0O5+NuaoAkKYFx5RGji3L6W0NNPR13/45lVcCpN/tpOeWSEz5apb22szr30iGS
xCxuUzGONiz6lJcGo2b4VM0ZJ2l3vfXz4laWZfArmb5i/2AnvJQI+CByWJ5VLAQ3
N7i3u4h37eh+8iBT
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:26 2025 by rpki-client