Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa
File: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (raw, json)
Hash identifier: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=
Subject key identifier: 16:50:9A:DC:E4:96:F9:9A:06:12:2E:4A:04:3C:06:9A:38:8A:7E:3E
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019424447F7AF37CB7D649C4D9AD4402390C
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38999
IP address blocks: 5.57.0.0/24 maxlen: 24
185.76.176.0/24 maxlen: 24
185.76.176.0/25 maxlen: 25
185.76.176.64/26 maxlen: 26
185.76.177.0/24 maxlen: 24
185.76.177.192/27 maxlen: 27
185.76.177.224/28 maxlen: 28
185.76.178.0/24 maxlen: 24
212.98.134.0/24 maxlen: 24
213.204.96.0/24 maxlen: 24
2a05:5b80::/32 maxlen: 32
2a05:5b81::/32 maxlen: 32
2a05:5b82::/32 maxlen: 32
2a05:5b83::/32 maxlen: 32
2a05:5b84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7f:7a:f3:7c:b7:d6:49:c4:d9:ad:44:02:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16509adce496f99a06122e4a043c069a388a7e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:a2:f5:b2:8c:65:ab:41:a1:9c:ca:ba:7d:
48:6d:27:b0:7d:0d:23:65:e9:4c:05:34:d8:5f:5b:
4e:cf:d0:ba:3e:dd:51:f4:66:b7:fa:e3:6b:4f:53:
4e:8a:b6:e3:bf:b9:df:db:d7:ba:0a:11:a4:5f:8b:
fc:a8:f4:09:7f:cf:f4:02:d7:1f:23:03:2f:11:66:
02:18:a0:f1:e8:20:9e:89:cc:fd:ab:26:66:71:35:
02:00:16:0c:cf:07:b8:7b:c8:41:a7:83:63:08:48:
25:2d:cc:ff:92:2e:4e:d6:4c:d5:58:cf:89:83:75:
f8:3a:7f:0c:ba:dd:df:c3:1d:2f:65:f0:bb:7b:8a:
71:40:dd:af:0e:a1:7b:d2:99:e8:7c:3e:da:95:a0:
50:99:80:e1:88:af:7c:c9:68:15:47:73:f2:44:b3:
ca:40:17:ae:f9:f3:e5:6b:28:2a:4a:dd:64:4b:5f:
43:0f:25:b2:fa:d3:6e:8f:b3:a0:a8:0d:26:9d:2f:
75:53:2e:21:43:06:91:44:33:4a:80:6b:b8:b6:26:
b4:35:57:33:f2:dd:3e:7c:85:57:70:af:fd:85:25:
d5:1e:ee:58:d6:0c:70:23:30:ca:20:5c:a3:bc:8e:
43:5b:fd:26:5c:ac:21:fb:7f:b6:90:72:37:84:b4:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:9A:DC:E4:96:F9:9A:06:12:2E:4A:04:3C:06:9A:38:8A:7E:3E
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.0.0/24
185.76.176.0-185.76.178.255
212.98.134.0/24
213.204.96.0/24
IPv6:
2a05:5b80::-2a05:5b84:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c7:2a:79:c1:97:64:fd:17:14:63:dc:5f:f0:b7:f9:7f:9b:b0:
74:e0:6e:55:a6:9f:11:2c:c5:a8:9c:97:7f:88:35:88:9d:44:
b7:cb:b6:5f:42:77:4a:40:6d:7c:1d:1e:17:ce:84:3e:9e:ac:
d9:62:52:08:af:90:5e:7a:aa:4c:f8:8d:7b:34:97:9c:6b:1b:
23:79:7e:96:65:67:fc:34:74:0b:2f:34:14:24:9a:db:0e:33:
96:9e:59:3a:d9:b2:fc:f2:6a:44:7e:b6:ed:19:52:c5:a9:d4:
85:a2:2c:d8:66:55:67:17:39:88:cc:04:40:b4:bf:f4:90:b7:
fe:86:f2:7f:4b:30:5e:7a:ea:a2:02:c9:88:6b:0d:7b:b7:a8:
91:05:ee:9b:98:d8:3c:4e:81:59:3f:ba:9b:e0:85:b9:39:8c:
69:73:fc:37:9e:f1:54:a3:21:cc:05:89:45:7b:d5:fe:92:b9:
5c:a0:89:5f:28:c4:4d:31:09:4d:dc:e2:74:36:4c:45:3c:0f:
59:2d:2c:3b:f0:3d:4c:22:1a:73:07:be:2b:03:5c:fe:f6:ad:
52:bc:35:96:5b:1c:87:0a:46:fd:39:58:67:43:c1:e2:ba:49:
86:6a:d5:73:81:5d:36:72:a0:57:3c:ff:5d:9c:77:50:ca:b4:
f2:91:57:d8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZQkRH9683y31knE2a1EAjkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzk0NDk4ZTQ3OTg3MjljZTk5NTBiZTM0YjQ1OWE5ZWYy
OWY1ZTgwHhcNMjUwMTAxMjM0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjUwOWFkY2U0OTZmOTlhMDYxMjJlNGEwNDNjMDY5YTM4OGE3ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVOi9bKMZatBoZzKun1IbSewfQ0j
ZelMBTTYX1tOz9C6Pt1R9Ga3+uNrT1NOirbjv7nf29e6ChGkX4v8qPQJf8/0Atcf
IwMvEWYCGKDx6CCeicz9qyZmcTUCABYMzwe4e8hBp4NjCEglLcz/ki5O1kzVWM+J
g3X4On8Mut3fwx0vZfC7e4pxQN2vDqF70pnofD7alaBQmYDhiK98yWgVR3PyRLPK
QBeu+fPlaygqSt1kS19DDyWy+tNuj7OgqA0mnS91Uy4hQwaRRDNKgGu4tia0NVcz
8t0+fIVXcK/9hSXVHu5Y1gxwIzDKIFyjvI5DW/0mXKwh+3+2kHI3hLRMvQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFBZQmtzklvmaBhIuSgQ8Bpo4in4+MB8GA1UdIwQY
MBaAFJ45RJjkeYcpzplQvjS0WanvKfXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQt
ZmE1ZWY0ZjUzZmJiLzEvRmxDYTNPU1ctWm9HRWk1S0JEd0dtamlLZmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQtZmE1ZWY0ZjUzZmJi
LzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAmBAIAATAgAwQABTkAMAwD
BAS5TLADBAC5TLIDBADUYoYDBADVzGAwFgQCAAIwEDAOAwUHKgVbgAMFACoFW4Qw
DQYJKoZIhvcNAQELBQADggEBAMcqecGXZP0XFGPcX/C3+X+bsHTgblWmnxEsxaic
l3+INYidRLfLtl9Cd0pAbXwdHhfOhD6erNliUgivkF56qkz4jXs0l5xrGyN5fpZl
Z/w0dAsvNBQkmtsOM5aeWTrZsvzyakR+tu0ZUsWp1IWiLNhmVWcXOYjMBEC0v/SQ
t/6G8n9LMF566qICyYhrDXu3qJEF7puY2DxOgVk/upvghbk5jGlz/Dee8VSjIcwF
iUV71f6SuVygiV8oxE0xCU3c4nQ2TEU8D1ktLDvwPUwiGnMHvisDXP72rVK8NZZb
HIcKRv05WGdDweK6SYZq1XOBXTZyoFc8/12cd1DKtPKRV9g=
-----END CERTIFICATE-----
Generated at Thu May 1 19:51:37 2025 by rpki-client