Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/uu25l9W5gSZu_tAy5o8jy6VhkvE.roa
File: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (raw, json)
Hash identifier: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=
Subject key identifier: BA:ED:B9:97:D5:B9:81:26:6E:FE:D0:32:E6:8F:23:CB:A5:61:92:F1
Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial: 01941F8C6D307578622C9A84D7D3D2A55CCB
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/uu25l9W5gSZu_tAy5o8jy6VhkvE.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199117
IP address blocks: 194.33.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6d:30:75:78:62:2c:9a:84:d7:d3:d2:a5:5c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baedb997d5b981266efed032e68f23cba56192f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:ef:fa:43:da:bc:dd:da:c6:40:08:00:7a:
03:2a:56:89:c6:12:ba:6a:aa:85:12:82:6e:40:c4:
06:fe:09:e4:cb:e6:3f:e5:cc:cd:59:8d:1d:8a:2e:
a2:4d:64:a4:2b:0a:a1:0d:2c:77:bb:dc:40:cb:53:
c7:a4:88:2e:11:01:16:88:27:ff:27:ad:e8:17:f6:
e2:43:02:74:a5:fb:47:05:1e:ed:53:ab:6c:a5:e1:
16:a6:5f:7d:e4:0f:50:f1:ce:19:fa:0d:44:8b:ca:
b3:8e:ee:e5:a1:cd:4b:56:a2:da:29:cd:75:52:33:
73:38:9e:5c:94:f1:e7:c7:15:9a:fb:09:09:fe:ca:
5b:af:42:f6:e8:1d:96:58:bf:ad:50:4b:ce:86:c2:
48:01:8d:ff:d1:d1:21:94:75:d6:fb:24:2a:4c:8a:
4d:86:35:2b:0f:7b:2f:eb:c9:e6:9f:47:20:68:5e:
00:af:98:b2:8d:07:b5:f5:62:d0:24:4f:7f:6f:35:
1a:a8:22:c0:c3:6b:9c:61:54:16:bc:02:3d:10:5d:
ad:47:61:61:6e:a5:a7:5f:2c:7d:e3:33:e9:fa:e2:
91:e2:9a:ff:fe:79:f1:bf:2d:22:fd:4f:e5:d6:cc:
43:9c:c5:c6:ab:a1:22:85:89:f8:f9:5d:40:f5:83:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:B9:97:D5:B9:81:26:6E:FE:D0:32:E6:8F:23:CB:A5:61:92:F1
X509v3 Authority Key Identifier:
keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/uu25l9W5gSZu_tAy5o8jy6VhkvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:75:4c:89:f6:54:a4:60:1a:1e:ec:de:c3:e7:50:e5:68:94:
59:18:a1:54:28:38:87:df:06:72:58:c2:b9:7a:24:8f:60:3f:
f3:01:ec:6d:af:e2:78:77:0d:f7:4e:75:5a:a0:e5:16:4e:38:
0a:de:a0:5e:4c:fd:f6:88:45:46:97:f8:1c:2f:60:ea:96:4f:
fc:6e:5c:84:cf:33:f7:35:9d:c6:45:17:d9:df:3b:68:e8:80:
d6:cc:fe:d6:97:31:9e:ea:8a:dc:6e:09:2c:ce:bb:47:f9:eb:
7d:4e:57:1f:7c:7a:c7:52:2a:86:88:9d:9c:ba:d8:3b:b4:cf:
f4:91:30:1a:ca:8b:de:45:a5:99:8d:39:a5:13:e7:d9:c5:c3:
6b:40:f4:4e:c4:70:b8:98:3f:eb:58:0d:02:2c:6a:08:66:be:
3e:10:7f:56:d7:71:e4:5d:0c:c8:81:3f:e3:ff:b2:cc:85:45:
80:b4:19:08:b2:83:07:c7:bd:b9:80:ca:5d:14:1f:72:d7:2a:
e0:7a:d0:16:2f:b4:2a:2f:fa:0e:de:1b:68:16:60:8f:6c:53:
60:84:a7:b4:b9:e6:a5:aa:f2:0a:50:4f:cf:cc:07:f3:ac:f3:
07:df:99:f6:ea:83:e7:2d:f3:fb:e8:9b:bd:ec:8a:35:95:29:
55:23:34:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjG0wdXhiLJqE19PSpVzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFlNTE5YzljZTc3NTc1ZDg5ZjA3Y2Y3MThmM2IwY2M4
NmVjNTUwHhcNMjUwMTAxMDE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWVkYjk5N2Q1Yjk4MTI2NmVmZWQwMzJlNjhmMjNjYmE1NjE5MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwbv+kPavN3axkAIAHoDKlaJxhK6
aqqFEoJuQMQG/gnky+Y/5czNWY0dii6iTWSkKwqhDSx3u9xAy1PHpIguEQEWiCf/
J63oF/biQwJ0pftHBR7tU6tspeEWpl995A9Q8c4Z+g1Ei8qzju7loc1LVqLaKc11
UjNzOJ5clPHnxxWa+wkJ/spbr0L26B2WWL+tUEvOhsJIAY3/0dEhlHXW+yQqTIpN
hjUrD3sv68nmn0cgaF4Ar5iyjQe19WLQJE9/bzUaqCLAw2ucYVQWvAI9EF2tR2Fh
bqWnXyx94zPp+uKR4pr//nnxvy0i/U/l1sxDnMXGq6EihYn4+V1A9YMBXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLrtuZfVuYEmbv7QMuaPI8ulYZLxMB8GA1UdIwQY
MBaAFOWh5RnJzndXXYnwfPcY87DMhuxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUt
MzhjNWIwYzRmMTUyLzEvdXUyNWw5VzVnU1p1X3RBeTVvOGp5NlZoa3ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUtMzhjNWIwYzRmMTUy
LzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFOMA0G
CSqGSIb3DQEBCwUAA4IBAQB+dUyJ9lSkYBoe7N7D51DlaJRZGKFUKDiH3wZyWMK5
eiSPYD/zAextr+J4dw33TnVaoOUWTjgK3qBeTP32iEVGl/gcL2Dqlk/8blyEzzP3
NZ3GRRfZ3zto6IDWzP7WlzGe6orcbgkszrtH+et9TlcffHrHUiqGiJ2cutg7tM/0
kTAayoveRaWZjTmlE+fZxcNrQPROxHC4mD/rWA0CLGoIZr4+EH9W13HkXQzIgT/j
/7LMhUWAtBkIsoMHx725gMpdFB9y1yrgetAWL7QqL/oO3htoFmCPbFNghKe0ueal
qvIKUE/PzAfzrPMH35n26oPnLfP76Ju97Io1lSlVIzR0
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:54 2025 by rpki-client