Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/yW1cS9Mx29vTOamtTRsFT6bLIXw.roa
File: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (raw, json)
Hash identifier: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=
Subject key identifier: C9:6D:5C:4B:D3:31:DB:DB:D3:39:A9:AD:4D:1B:05:4F:A6:CB:21:7C
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019424B32CBD721D274E1AAB63FAC3787ADF
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/yW1cS9Mx29vTOamtTRsFT6bLIXw.roa
Signing time: Thu 02 Jan 2025 01:48:29 +0000
ROA not before: Thu 02 Jan 2025 01:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28760
IP address blocks: 5.104.216.0/21 maxlen: 21
77.242.64.0/20 maxlen: 20
185.71.252.0/22 maxlen: 22
185.236.144.0/22 maxlen: 22
213.174.224.0/19 maxlen: 19
2a03:fa00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:2c:bd:72:1d:27:4e:1a:ab:63:fa:c3:78:7a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jan 2 01:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c96d5c4bd331dbdbd339a9ad4d1b054fa6cb217c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:6f:9d:d5:c6:ce:c8:45:b5:7c:0b:f2:d8:
2b:18:3e:5e:13:dd:ce:a8:36:bd:05:83:25:b6:d6:
90:57:f0:12:71:51:cc:ea:cb:26:97:11:e2:4c:15:
60:c3:06:06:db:23:7d:41:57:4d:08:d4:dc:c2:cf:
4c:92:99:e8:a7:8c:cb:b0:8c:27:74:2e:d9:56:4a:
0c:0b:46:53:10:ef:d7:1e:47:c8:fe:fc:bb:7a:f7:
32:08:9a:6a:89:fa:c9:ad:d0:d0:c8:60:23:7a:96:
ae:5e:34:75:58:ac:92:92:1f:18:8d:90:60:a5:ca:
f7:7a:2c:ef:e9:08:e5:72:ec:b4:0e:5c:09:29:4f:
40:84:ef:f0:01:e4:8f:a1:be:39:9d:c9:ad:cb:a1:
a9:d5:cc:40:91:1a:15:3f:38:cd:66:e7:f5:56:a9:
df:36:26:e5:f4:59:25:96:fc:f5:92:81:1d:ac:d1:
90:a3:8b:2c:2a:b7:08:53:83:5d:54:69:e7:59:26:
4c:cd:e3:e9:18:27:87:df:25:f2:87:3a:3a:85:5d:
23:cb:8f:b5:97:18:9c:c7:8c:88:b9:98:9e:cf:ec:
0b:95:96:4d:bd:84:8f:95:f1:99:64:24:40:4f:09:
de:dc:d7:94:ad:90:02:f9:35:12:f5:fc:c0:92:8f:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:5C:4B:D3:31:DB:DB:D3:39:A9:AD:4D:1B:05:4F:A6:CB:21:7C
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/yW1cS9Mx29vTOamtTRsFT6bLIXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.216.0/21
77.242.64.0/20
185.71.252.0/22
185.236.144.0/22
213.174.224.0/19
IPv6:
2a03:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
96:7f:f9:00:aa:db:ae:17:59:bf:b3:18:f8:e9:f0:a9:fc:69:
e7:c1:86:0d:32:79:9d:3c:78:b3:bb:3a:8d:e8:f9:c0:a0:f3:
3e:9f:54:0f:7b:47:21:7b:e5:28:2a:31:62:f0:d3:6c:d6:1c:
f0:6f:e3:e3:98:b3:17:7d:08:3e:65:ed:e9:55:53:5b:c1:bb:
7a:01:60:2c:e7:8e:bb:d0:98:a9:1b:32:bf:dd:35:d9:29:b1:
18:ee:ff:1f:da:06:df:f1:28:a7:37:ba:99:71:22:4f:d6:b1:
87:6b:92:f8:32:15:1f:81:ee:db:78:e4:fe:9c:b2:3e:c2:ed:
cf:2a:2e:72:96:6b:f1:78:dd:4b:fe:ad:74:89:e9:2e:28:29:
18:fc:a3:38:3d:60:ec:3f:ba:50:a9:1d:42:0c:50:d3:65:1d:
9d:70:91:53:77:95:28:b8:d9:a5:be:02:64:bd:7b:95:c1:43:
ad:7f:db:bc:1c:9f:02:ac:e9:78:ca:8c:85:28:d4:8e:a4:f6:
38:52:0f:ae:b6:31:b4:07:37:08:05:62:95:d4:48:8f:f6:56:
f1:b4:33:a2:71:54:73:fc:de:f7:82:7a:4b:45:46:a8:de:2f:
d2:b5:f6:ad:5f:76:f1:3c:b0:aa:38:78:51:e9:8f:58:6a:bf:
f2:20:7d:11
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQksyy9ch0nThqrY/rDeHrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3
M2NhYWMwHhcNMjUwMTAyMDE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTZkNWM0YmQzMzFkYmRiZDMzOWE5YWQ0ZDFiMDU0ZmE2Y2IyMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpvndXGzshFtXwL8tgrGD5eE93O
qDa9BYMlttaQV/AScVHM6ssmlxHiTBVgwwYG2yN9QVdNCNTcws9Mkpnop4zLsIwn
dC7ZVkoMC0ZTEO/XHkfI/vy7evcyCJpqifrJrdDQyGAjepauXjR1WKySkh8YjZBg
pcr3eizv6Qjlcuy0DlwJKU9AhO/wAeSPob45ncmty6Gp1cxAkRoVPzjNZuf1Vqnf
Nibl9Fkllvz1koEdrNGQo4ssKrcIU4NdVGnnWSZMzePpGCeH3yXyhzo6hV0jy4+1
lxicx4yIuZiez+wLlZZNvYSPlfGZZCRATwne3NeUrZAC+TUS9fzAko8jEwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFMltXEvTMdvb0zmprU0bBU+myyF8MB8GA1UdIwQY
MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt
MzY0ZmFlN2M3MmM0LzEveVcxY1M5TXgyOXZUT2FtdFRSc0ZUNmJMSVh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0
LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBWjYAwQE
TfJAAwQCuUf8AwQCueyQAwQF1a7gMA0EAgACMAcDBQMqA/oAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWf/kAqtuuF1m/sxj46fCp/GnnwYYNMnmdPHizuzqN6PnAoPM+n1QP
e0che+UoKjFi8NNs1hzwb+PjmLMXfQg+Ze3pVVNbwbt6AWAs54670JipGzK/3TXZ
KbEY7v8f2gbf8SinN7qZcSJP1rGHa5L4MhUfge7beOT+nLI+wu3PKi5ylmvxeN1L
/q10iekuKCkY/KM4PWDsP7pQqR1CDFDTZR2dcJFTd5UouNmlvgJkvXuVwUOtf9u8
HJ8CrOl4yoyFKNSOpPY4Ug+utjG0BzcIBWKV1EiP9lbxtDOicVRz/N73gnpLRUao
3i/StfatX3bxPLCqOHhR6Y9Yar/yIH0R
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:46 2025 by rpki-client