Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/9fxRsuaag9AwJDgBa602c5NvAG8.roa
File: 9fxRsuaag9AwJDgBa602c5NvAG8.roa (raw, json)
Hash identifier: N8KL+CeYiq8Jam2DjuxvMn97Pf97NR0HsJwSM91GoqQ=
Subject key identifier: F5:FC:51:B2:E6:9A:83:D0:30:24:38:01:6B:AD:36:73:93:6F:00:6F
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 0194836E3967FC1E8EF1C8E2D89BEBDF3193
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/9fxRsuaag9AwJDgBa602c5NvAG8.roa
Signing time: Mon 20 Jan 2025 11:17:06 +0000
ROA not before: Mon 20 Jan 2025 11:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 5.183.111.0/24 maxlen: 24
185.25.233.0/24 maxlen: 24
185.198.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:6e:39:67:fc:1e:8e:f1:c8:e2:d8:9b:eb:df:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 20 11:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fc51b2e69a83d0302438016bad3673936f006f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:01:91:ab:94:01:0c:a9:fc:59:5b:88:0e:
53:62:b6:c6:b2:c1:f8:d5:c9:8d:70:8e:e6:a0:f6:
2d:b1:df:f9:22:5a:b1:d3:0a:62:a6:21:dc:dc:9b:
9e:a3:d7:04:db:0a:01:3c:ed:e5:ca:6b:12:99:72:
9d:6e:9c:7a:c5:41:f6:79:0d:84:97:24:d4:70:2f:
e0:91:5a:4a:36:8f:89:50:f5:c9:1f:ea:29:23:ab:
f7:e9:48:32:4a:4d:fe:41:50:b6:ef:ed:e2:9b:1b:
fd:68:8a:32:ae:8e:15:6b:47:76:28:3e:d0:40:c5:
a5:9f:4e:2f:27:01:f2:61:5e:b8:4a:4d:95:90:a1:
51:2f:47:dc:5c:af:4b:44:ab:0d:8d:c1:f3:0c:55:
75:35:e5:48:3a:53:0c:69:7b:c5:b6:46:95:8f:ed:
fd:24:af:fa:a9:3a:22:29:5c:f4:20:1c:49:d0:a1:
25:76:24:c8:2d:68:f5:c1:20:d7:5a:61:6d:55:f4:
ef:2e:11:7a:c5:0b:52:e5:b0:4a:27:9f:91:e8:2e:
fd:93:77:1d:18:09:1a:66:0b:eb:9a:6d:6a:77:54:
8c:5e:04:c3:a2:51:d7:f3:9e:7a:9f:e0:01:22:e3:
44:a0:6a:a6:03:42:8f:4c:09:5c:92:4a:ba:77:74:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:51:B2:E6:9A:83:D0:30:24:38:01:6B:AD:36:73:93:6F:00:6F
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/9fxRsuaag9AwJDgBa602c5NvAG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.111.0/24
185.25.233.0/24
185.198.211.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6f:e9:d0:d8:16:72:43:d3:0f:72:ae:ce:06:a2:52:39:b6:
aa:d9:83:47:c0:a5:98:fb:57:55:56:91:5d:e8:83:12:a4:6e:
d1:8f:38:9f:d7:27:54:d8:94:87:98:18:04:8b:03:b3:27:a8:
a6:cd:15:f0:c8:da:4e:19:f3:0e:05:6a:f5:a2:68:7a:4f:59:
5d:e2:db:64:e9:e6:d0:50:9a:3b:f5:30:c9:28:1a:77:f8:91:
47:e7:4d:cb:7e:fd:71:46:31:d6:65:db:bd:64:e9:fc:5b:57:
fa:8c:fb:4b:e7:ca:8c:b4:61:91:40:7b:7e:1f:91:7c:f5:34:
86:82:d4:81:23:81:c9:b7:e6:a6:97:14:89:e7:17:a7:d6:2e:
33:d3:1f:d8:e2:6a:b2:85:22:46:04:5c:95:da:ca:86:ee:c7:
b3:57:7e:98:d1:ac:6e:f4:bb:b8:7d:b4:2e:79:ca:58:03:e0:
c4:11:be:75:a7:1c:bd:69:6f:5e:f2:b3:05:98:82:41:d3:0a:
8a:86:e6:ca:8c:7a:59:05:0e:9a:91:98:e2:55:17:ae:65:1f:
12:65:21:34:0d:97:01:06:32:6d:e5:9b:b8:0f:81:d6:23:1c:
e6:23:8f:a0:ac:6f:a0:16:c2:b4:6a:71:1c:c5:e4:79:ee:69:
89:1c:80:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSDbjln/B6O8cji2Jvr3zGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzODRmNmZhNmRlY2NlZDU1NzhhODVhNTFlMGJkNjU3MDFl
YTM0ZWMwHhcNMjUwMTIwMTExNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWZjNTFiMmU2OWE4M2QwMzAyNDM4MDE2YmFkMzY3MzkzNmYwMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qcBkauUAQyp/FlbiA5TYrbGssH4
1cmNcI7moPYtsd/5Ilqx0wpipiHc3Jueo9cE2woBPO3lymsSmXKdbpx6xUH2eQ2E
lyTUcC/gkVpKNo+JUPXJH+opI6v36UgySk3+QVC27+3imxv9aIoyro4Va0d2KD7Q
QMWln04vJwHyYV64Sk2VkKFRL0fcXK9LRKsNjcHzDFV1NeVIOlMMaXvFtkaVj+39
JK/6qToiKVz0IBxJ0KEldiTILWj1wSDXWmFtVfTvLhF6xQtS5bBKJ5+R6C79k3cd
GAkaZgvrmm1qd1SMXgTDolHX8556n+ABIuNEoGqmA0KPTAlckkq6d3QjvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPX8UbLmmoPQMCQ4AWutNnOTbwBvMB8GA1UdIwQY
MBaAFEOE9vpt7M7VV4qFpR4L1lcB6jTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMt
MWIxM2JkNDU2NmE1LzEvOWZ4UnN1YWFnOUF3SkRnQmE2MDJjNU52QUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNjk4YmQtOGRkMi00MGJlLTgyYTMtMWIxM2JkNDU2NmE1
LzEvUTRUMi1tM3N6dFZYaW9XbEhndldWd0hxTk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbdvAwQA
uRnpAwQAucbTMA0GCSqGSIb3DQEBCwUAA4IBAQBJb+nQ2BZyQ9MPcq7OBqJSObaq
2YNHwKWY+1dVVpFd6IMSpG7Rjzif1ydU2JSHmBgEiwOzJ6imzRXwyNpOGfMOBWr1
omh6T1ld4ttk6ebQUJo79TDJKBp3+JFH503Lfv1xRjHWZdu9ZOn8W1f6jPtL58qM
tGGRQHt+H5F89TSGgtSBI4HJt+amlxSJ5xen1i4z0x/Y4mqyhSJGBFyV2sqG7sez
V36Y0axu9Lu4fbQuecpYA+DEEb51pxy9aW9e8rMFmIJB0wqKhubKjHpZBQ6akZji
VReuZR8SZSE0DZcBBjJt5Zu4D4HWIxzmI4+grG+gFsK0anEcxeR57mmJHIBa
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:53 2025 by rpki-client