Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/5LrP6fsEeipB-xjaCGTQi9KsiHU.roa
File: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (raw, json)
Hash identifier: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=
Subject key identifier: E4:BA:CF:E9:FB:04:7A:2A:41:FB:18:DA:08:64:D0:8B:D2:AC:88:75
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019423D6F6237961E8A09AB5CBC32EE5BB54
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/5LrP6fsEeipB-xjaCGTQi9KsiHU.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202299
IP address blocks: 195.5.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f6:23:79:61:e8:a0:9a:b5:cb:c3:2e:e5:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4bacfe9fb047a2a41fb18da0864d08bd2ac8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:02:90:01:56:a8:c5:0b:70:a9:2d:89:cb:
1c:7e:cf:0a:ef:0e:82:a6:dd:db:6a:33:70:9a:6c:
88:26:6d:24:0b:7f:3f:9b:c4:18:ce:c5:6c:9b:36:
2e:9f:a3:73:d7:da:9f:0e:49:a4:44:63:b1:47:f8:
22:ba:2f:3e:60:c0:d3:75:66:ca:34:d4:0f:30:61:
6b:b6:a2:51:0f:c8:ca:70:b7:c7:be:f5:9c:63:cd:
67:59:91:32:73:08:5e:b7:84:94:a1:63:fc:ad:c0:
4c:78:9e:ca:8b:69:5e:b4:c4:fe:f2:22:e9:c3:7d:
de:6b:ed:6c:c7:85:61:96:26:5a:f0:2d:3b:fe:38:
5c:13:74:1f:80:2b:9e:eb:0d:93:17:1c:42:b5:9c:
8d:8b:88:8b:a1:4c:20:6a:70:2e:bf:6b:ca:c4:57:
9d:86:b9:21:5b:6e:5d:fe:13:25:6c:33:25:8b:06:
6a:bc:f8:18:21:98:59:ca:c9:cf:84:3b:d6:29:6a:
72:0c:2d:6a:19:95:31:0e:8a:50:40:6b:f7:16:47:
bd:29:91:2b:f9:16:53:0f:5e:13:c9:34:95:af:72:
0a:e8:cd:26:e6:04:e4:cf:49:f7:55:f9:f0:e2:7c:
5d:5e:45:90:28:e8:0f:c9:00:98:40:23:45:7c:14:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BA:CF:E9:FB:04:7A:2A:41:FB:18:DA:08:64:D0:8B:D2:AC:88:75
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/5LrP6fsEeipB-xjaCGTQi9KsiHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.162.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c7:7d:9c:16:a3:7d:31:55:e1:01:25:69:de:3a:43:e3:20:
37:e5:b4:90:95:d5:d1:5f:f4:b3:4f:bb:bc:cc:7b:10:f2:07:
5f:49:f9:b6:03:41:e8:4d:2f:ce:5e:e2:1c:06:c3:80:6a:91:
c1:39:f6:5d:05:11:0c:df:66:19:5e:8b:73:6a:a7:b2:64:fe:
dd:0c:53:73:15:e4:9c:8e:1d:f1:44:81:11:48:ce:99:ef:b4:
40:a2:bb:f4:46:f2:04:b0:34:10:78:1c:35:a9:8a:59:c4:c4:
46:35:78:1a:ee:77:80:0e:23:ba:9c:ba:cd:b3:13:9f:76:a7:
0e:ae:58:bc:ea:23:43:04:77:a6:2c:d8:48:5f:9e:f8:8a:cf:
d4:c6:45:4b:5a:20:2c:ae:7d:f8:7f:09:21:a1:4a:e1:42:2d:
a8:89:06:46:eb:0e:c1:aa:4b:db:09:cf:63:23:ce:06:ac:12:
6f:4c:b5:02:57:81:12:db:16:19:0c:fc:be:27:b5:7f:93:46:
36:17:6b:1d:84:5f:70:01:ef:70:db:e3:84:01:18:54:39:ec:
4f:17:66:07:37:29:33:51:db:ec:1a:7d:93:76:6d:fb:0f:17:
9b:ce:2a:73:44:10:35:79:03:14:69:76:0a:c6:50:45:2e:d9:
8f:aa:bb:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vYjeWHooJq1y8Mu5btUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjk4N2FmNWFkYjIzMDRkNDI2ZjU0MGRlNWQ2NTA1NDUy
MzFlNTAwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGJhY2ZlOWZiMDQ3YTJhNDFmYjE4ZGEwODY0ZDA4YmQyYWM4ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws0CkAFWqMULcKkticscfs8K7w6C
pt3bajNwmmyIJm0kC38/m8QYzsVsmzYun6Nz19qfDkmkRGOxR/giui8+YMDTdWbK
NNQPMGFrtqJRD8jKcLfHvvWcY81nWZEycwhet4SUoWP8rcBMeJ7Ki2letMT+8iLp
w33ea+1sx4VhliZa8C07/jhcE3QfgCue6w2TFxxCtZyNi4iLoUwganAuv2vKxFed
hrkhW25d/hMlbDMliwZqvPgYIZhZysnPhDvWKWpyDC1qGZUxDopQQGv3Fke9KZEr
+RZTD14TyTSVr3IK6M0m5gTkz0n3Vfnw4nxdXkWQKOgPyQCYQCNFfBSZBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOS6z+n7BHoqQfsY2ghk0IvSrIh1MB8GA1UdIwQY
MBaAFNH5h69a2yME1Cb1QN5dZQVFIx5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjct
MmFmMDk1ZmZjOWJiLzEvNUxyUDZmc0VlaXBCLXhqYUNHVFFpOUtzaUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81ZWE1NjktZjE3NC00NWM1LTlkYjctMmFmMDk1ZmZjOWJi
LzEvMGZtSHIxcmJJd1RVSnZWQTNsMWxCVVVqSGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwWiMA0G
CSqGSIb3DQEBCwUAA4IBAQBSx32cFqN9MVXhASVp3jpD4yA35bSQldXRX/SzT7u8
zHsQ8gdfSfm2A0HoTS/OXuIcBsOAapHBOfZdBREM32YZXotzaqeyZP7dDFNzFeSc
jh3xRIERSM6Z77RAorv0RvIEsDQQeBw1qYpZxMRGNXga7neADiO6nLrNsxOfdqcO
rli86iNDBHemLNhIX574is/UxkVLWiAsrn34fwkhoUrhQi2oiQZG6w7BqkvbCc9j
I84GrBJvTLUCV4ES2xYZDPy+J7V/k0Y2F2sdhF9wAe9w2+OEARhUOexPF2YHNykz
UdvsGn2Tdm37DxebzipzRBA1eQMUaXYKxlBFLtmPqrvv
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net