Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/H5a6_PbqYpspvXprSKayoanO0T4.roa
File: H5a6_PbqYpspvXprSKayoanO0T4.roa (raw, json)
Hash identifier: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=
Subject key identifier: 1F:96:BA:FC:F6:EA:62:9B:29:BD:7A:6B:48:A6:B2:A1:A9:CE:D1:3E
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019423D72DE180BA746E2B3B24A65595243F
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/H5a6_PbqYpspvXprSKayoanO0T4.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202779
IP address blocks: 95.215.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2d:e1:80:ba:74:6e:2b:3b:24:a6:55:95:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f96bafcf6ea629b29bd7a6b48a6b2a1a9ced13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:05:fc:ee:ec:ab:5f:16:a7:bd:c5:a1:04:
7c:fd:50:a2:0c:a9:4d:75:18:ce:f9:e1:1f:0d:b4:
c7:21:3b:61:91:36:78:7e:14:db:ea:87:3c:87:dc:
62:cd:5e:80:8d:f8:ad:49:f9:0a:a2:0d:ef:a1:5d:
88:af:83:44:38:26:7b:4a:18:58:34:93:dc:21:3f:
4b:f1:60:08:84:bf:7c:aa:41:44:c9:f9:d1:97:8f:
74:dd:7b:8b:13:a8:3f:d8:72:73:62:93:05:11:32:
3a:eb:fa:ba:6c:5d:f3:84:65:de:94:b9:f3:86:21:
79:62:d6:81:02:05:7e:bd:ed:d8:6a:b4:6a:26:68:
66:39:ba:d6:34:ad:5b:ea:92:7f:d1:66:10:0e:0d:
e9:1f:93:60:84:0d:60:33:d6:2f:2e:a1:9e:43:fa:
74:66:d5:6c:a8:1f:3c:fa:be:b5:d8:2f:ee:47:94:
ef:44:ea:ae:15:c9:91:c1:4b:e1:09:44:5b:00:a3:
b7:96:fe:97:dd:f0:e0:79:23:48:63:4d:cd:d7:29:
db:7c:2d:c1:bd:b8:d7:aa:78:5c:35:4e:22:e9:da:
84:dc:86:fd:68:ac:7c:ec:e4:d1:59:de:bd:db:8e:
e2:ce:bc:fa:48:2b:51:77:c6:d1:ad:18:92:80:e6:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:BA:FC:F6:EA:62:9B:29:BD:7A:6B:48:A6:B2:A1:A9:CE:D1:3E
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/H5a6_PbqYpspvXprSKayoanO0T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:eb:c0:0f:70:43:a7:79:5c:5e:5e:46:96:99:04:d1:4d:37:
16:0c:92:1d:cb:4f:6f:87:19:18:b2:94:b4:64:9e:19:32:65:
15:fb:a5:fa:6b:ae:99:ef:41:42:ab:b5:a4:69:ab:b6:e9:8d:
79:8e:13:66:98:d5:d0:b5:55:81:ca:07:b1:cf:69:26:b1:57:
d4:38:65:9b:1c:76:39:72:44:95:d6:80:b3:b9:03:35:da:37:
a4:aa:cf:04:54:f3:72:68:52:5f:7e:76:16:09:f1:90:a9:11:
60:52:c9:c5:df:19:18:30:1b:49:0d:c9:ca:f9:f1:04:d5:f2:
a0:61:81:c5:58:ef:66:2b:e7:93:dd:ee:01:90:57:90:fb:78:
57:09:7c:2e:d4:96:16:77:59:89:cd:78:8a:34:8a:12:13:82:
4a:76:97:85:c0:3a:1b:8d:ba:af:7e:34:61:e8:d0:ea:05:9e:
e4:34:da:14:f0:5e:46:3e:5b:44:d5:ca:fb:0f:dc:73:6e:70:
ed:5e:8a:6a:83:9f:e0:36:57:7b:c7:50:95:be:d4:ae:e5:dd:
97:8b:12:65:eb:45:6a:06:e0:96:56:3a:2f:a4:71:02:9a:e3:
c0:18:28:58:24:80:3b:3a:c3:18:d1:1b:a2:53:77:43:0b:2c:
55:84:08:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1y3hgLp0bis7JKZVlSQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDg1ODc1Yzg0NzBlNmFhY2RjOTQ3NDIxMDVmMzBjNTk3
YWMyYmIwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk2YmFmY2Y2ZWE2MjliMjliZDdhNmI0OGE2YjJhMWE5Y2VkMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPYF/O7sq18Wp73FoQR8/VCiDKlN
dRjO+eEfDbTHITthkTZ4fhTb6oc8h9xizV6AjfitSfkKog3voV2Ir4NEOCZ7ShhY
NJPcIT9L8WAIhL98qkFEyfnRl4903XuLE6g/2HJzYpMFETI66/q6bF3zhGXelLnz
hiF5YtaBAgV+ve3YarRqJmhmObrWNK1b6pJ/0WYQDg3pH5NghA1gM9YvLqGeQ/p0
ZtVsqB88+r612C/uR5TvROquFcmRwUvhCURbAKO3lv6X3fDgeSNIY03N1ynbfC3B
vbjXqnhcNU4i6dqE3Ib9aKx87OTRWd69247izrz6SCtRd8bRrRiSgOYU0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+Wuvz26mKbKb16a0imsqGpztE+MB8GA1UdIwQY
MBaAFPJIWHXIRw5qrNyUdCEF8wxZesK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUt
OGZkNGMwMjQ0ODhlLzEvSDVhNl9QYnFZcHNwdlhwclNLYXlvYW5PMFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUtOGZkNGMwMjQ0ODhl
LzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX9fcMA0G
CSqGSIb3DQEBCwUAA4IBAQCO68APcEOneVxeXkaWmQTRTTcWDJIdy09vhxkYspS0
ZJ4ZMmUV+6X6a66Z70FCq7Wkaau26Y15jhNmmNXQtVWBygexz2kmsVfUOGWbHHY5
ckSV1oCzuQM12jekqs8EVPNyaFJffnYWCfGQqRFgUsnF3xkYMBtJDcnK+fEE1fKg
YYHFWO9mK+eT3e4BkFeQ+3hXCXwu1JYWd1mJzXiKNIoSE4JKdpeFwDobjbqvfjRh
6NDqBZ7kNNoU8F5GPltE1cr7D9xzbnDtXopqg5/gNld7x1CVvtSu5d2XixJl60Vq
BuCWVjovpHECmuPAGChYJIA7OsMY0RuiU3dDCyxVhAiQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:01 2025 by rpki-client