Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/5O89Acll2BSQwsAU1cu5uSGZnA4.roa
File: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (raw, json)
Hash identifier: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=
Subject key identifier: E4:EF:3D:01:C9:65:D8:14:90:C2:C0:14:D5:CB:B9:B9:21:99:9C:0E
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 01942067FE9DC6DDE121237F74B8067F6220
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/5O89Acll2BSQwsAU1cu5uSGZnA4.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 212.6.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fe:9d:c6:dd:e1:21:23:7f:74:b8:06:7f:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ef3d01c965d81490c2c014d5cbb9b921999c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:2c:45:77:fb:12:d8:3e:49:11:23:b6:0b:
1f:ff:66:df:f4:c5:94:16:24:d3:05:51:3b:c6:16:
cd:ac:41:17:8e:a4:87:08:75:2b:40:df:83:47:09:
90:bf:8f:77:d4:51:39:10:03:45:d8:ab:38:23:c0:
20:68:ae:6d:8b:9e:e9:92:eb:c1:74:9a:bf:e9:05:
47:12:b2:6f:5c:93:f1:46:fc:de:6c:9b:d4:a7:53:
1b:e3:fa:84:21:98:82:f4:fb:70:b3:31:d2:f5:ed:
58:b0:28:fd:7d:f2:3f:22:c4:b0:10:e9:65:3a:f7:
6e:2d:cd:48:42:bf:12:88:95:12:a2:12:84:cb:e6:
77:e9:15:0a:9c:22:e6:56:6e:94:14:ea:46:99:64:
31:0f:64:8a:4a:4f:c5:82:1d:9b:a8:f3:75:de:7d:
c9:af:6a:66:e0:78:f4:96:cb:f1:2e:f9:d8:c6:bc:
44:4a:e1:64:8a:fd:11:90:8e:10:5d:8e:dc:0c:af:
05:84:89:26:e9:93:a1:8c:00:63:e1:a3:8f:10:00:
14:c2:98:68:38:a4:e9:93:db:2e:b3:5a:1c:97:fe:
45:32:38:40:98:82:f6:64:2a:7f:da:4b:44:3d:39:
89:0b:64:8a:67:19:1f:0d:b4:dc:2e:b2:2f:ee:dc:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:3D:01:C9:65:D8:14:90:C2:C0:14:D5:CB:B9:B9:21:99:9C:0E
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/5O89Acll2BSQwsAU1cu5uSGZnA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:54:cc:ac:98:5c:b2:09:b8:00:f4:68:7b:83:5e:4f:56:7d:
e9:4b:b1:f5:6d:54:b6:8b:56:c8:e6:fe:48:18:68:e3:16:78:
49:be:87:1a:99:d1:74:e3:15:6e:f9:29:75:9d:db:39:44:c7:
54:71:9f:55:df:1b:e3:ae:0d:cd:c7:66:30:87:5b:c5:bf:53:
4f:11:78:a0:32:23:60:61:8a:26:45:d4:ac:b6:20:98:c6:48:
69:1f:a0:98:9a:a3:c2:38:af:de:7b:ab:49:7d:04:0c:d5:a8:
d9:4f:52:8e:43:1f:ff:21:0a:b5:dc:f7:30:1e:6e:94:f9:2b:
e0:02:2d:3d:15:4a:33:5b:a7:3b:24:45:fd:c9:93:37:65:39:
3b:66:ff:13:8b:41:39:1a:b1:4f:f8:24:fa:ee:2d:83:c1:a9:
c3:5b:97:10:f7:00:32:08:19:52:98:d2:a2:74:0d:12:a8:22:
ed:48:37:30:53:66:ae:88:08:48:17:cc:f2:e9:83:98:53:c3:
1a:dd:a6:50:33:b8:eb:7c:bc:e3:d4:80:d3:9e:3c:5d:e0:12:
e2:40:70:ed:42:2a:19:65:d7:d7:0e:47:58:b1:96:ce:32:17:
c9:93:db:39:1f:b1:77:d3:c0:06:af:8c:23:08:a0:00:4e:ba:
71:55:20:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ/6dxt3hISN/dLgGf2IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw
YzM0NmMwHhcNMjUwMTAxMDU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGVmM2QwMWM5NjVkODE0OTBjMmMwMTRkNWNiYjliOTIxOTk5YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYIsRXf7Etg+SREjtgsf/2bf9MWU
FiTTBVE7xhbNrEEXjqSHCHUrQN+DRwmQv4931FE5EANF2Ks4I8AgaK5ti57pkuvB
dJq/6QVHErJvXJPxRvzebJvUp1Mb4/qEIZiC9PtwszHS9e1YsCj9ffI/IsSwEOll
OvduLc1IQr8SiJUSohKEy+Z36RUKnCLmVm6UFOpGmWQxD2SKSk/Fgh2bqPN13n3J
r2pm4Hj0lsvxLvnYxrxESuFkiv0RkI4QXY7cDK8FhIkm6ZOhjABj4aOPEAAUwpho
OKTpk9sus1ocl/5FMjhAmIL2ZCp/2ktEPTmJC2SKZxkfDbTcLrIv7tz0dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTvPQHJZdgUkMLAFNXLubkhmZwOMB8GA1UdIwQY
MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt
OTEwZTA4MTBjYTk0LzEvNU84OUFjbGwyQlNRd3NBVTFjdTV1U0dabkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0
LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AYtMA0G
CSqGSIb3DQEBCwUAA4IBAQCaVMysmFyyCbgA9Gh7g15PVn3pS7H1bVS2i1bI5v5I
GGjjFnhJvocamdF04xVu+Sl1nds5RMdUcZ9V3xvjrg3Nx2Ywh1vFv1NPEXigMiNg
YYomRdSstiCYxkhpH6CYmqPCOK/ee6tJfQQM1ajZT1KOQx//IQq13PcwHm6U+Svg
Ai09FUozW6c7JEX9yZM3ZTk7Zv8Ti0E5GrFP+CT67i2DwanDW5cQ9wAyCBlSmNKi
dA0SqCLtSDcwU2auiAhIF8zy6YOYU8Ma3aZQM7jrfLzj1IDTnjxd4BLiQHDtQioZ
ZdfXDkdYsZbOMhfJk9s5H7F308AGr4wjCKAATrpxVSCw
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:05 2025 by rpki-client