Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/5dtg3LCI8AxcnAadUkHS3_C52GM.roa
File: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (raw, json)
Hash identifier: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=
Subject key identifier: E5:DB:60:DC:B0:88:F0:0C:5C:9C:06:9D:52:41:D2:DF:F0:B9:D8:63
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 0194266B3EF151AEEC7E916656BF8708B7F4
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/5dtg3LCI8AxcnAadUkHS3_C52GM.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5602
IP address blocks: 185.169.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3e:f1:51:ae:ec:7e:91:66:56:bf:87:08:b7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5db60dcb088f00c5c9c069d5241d2dff0b9d863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:d0:73:29:a0:18:0a:19:25:87:54:09:86:
39:f0:cc:2f:16:30:18:7b:c6:41:61:ee:10:9d:aa:
a7:4e:78:61:55:23:44:1a:62:ae:f1:f0:07:a1:a0:
52:c6:6f:79:e9:a1:fc:34:ed:fa:01:4d:23:29:ef:
66:33:8a:27:07:30:68:9b:cd:ae:d7:94:22:7e:a4:
37:d3:89:07:78:f6:56:be:de:47:c9:7c:1b:54:06:
e1:4c:46:e2:76:e9:2c:c2:c7:f5:6b:11:a2:f4:b5:
67:e6:2c:f6:c2:d4:eb:aa:40:ee:c7:70:68:33:de:
f9:ab:ae:4e:a2:82:5c:0e:19:76:e3:7b:3e:9c:2c:
8f:1b:61:4c:f2:59:be:6b:e0:b4:83:90:70:41:66:
f5:74:25:bf:78:e0:ca:3e:83:17:91:01:26:8a:82:
e0:9f:65:68:ca:26:d7:cf:8b:8d:b4:9f:0d:cf:70:
7c:4f:7a:e5:b5:94:9e:0a:e8:30:51:fc:16:ed:10:
76:65:80:27:9b:b7:94:99:c0:89:b7:96:78:ed:d0:
ca:68:46:0b:ed:79:53:f4:a2:15:83:8b:69:54:ce:
69:09:67:23:09:99:13:64:c3:1c:24:95:fb:af:3f:
c2:34:58:cc:8a:22:ca:ae:83:0e:12:6d:6b:70:5b:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:60:DC:B0:88:F0:0C:5C:9C:06:9D:52:41:D2:DF:F0:B9:D8:63
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/5dtg3LCI8AxcnAadUkHS3_C52GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.176.0/22
Signature Algorithm: sha256WithRSAEncryption
54:fd:22:6d:98:78:24:96:87:43:70:45:07:a2:a8:53:e4:df:
e3:a3:57:2a:42:dc:d9:fa:8a:28:b3:f4:56:93:f0:8f:e6:1d:
70:7a:10:30:c7:77:7a:d4:72:cd:a9:d8:af:06:3c:f6:73:d8:
d7:01:16:f3:cc:5d:e5:4b:88:67:3a:49:78:06:fd:01:7a:eb:
2c:3c:c9:3b:2a:95:f1:f4:a3:8a:10:cd:7e:d1:d2:f1:ae:9c:
5f:08:4a:f6:25:07:ec:15:7d:cd:a2:9b:d0:d3:a5:67:ac:ea:
71:fe:77:e6:ca:55:80:5d:1d:14:ab:95:dd:15:dd:74:08:2c:
d3:2c:3a:f7:e5:23:6d:11:b5:dd:4e:af:ea:21:40:ca:88:cd:
46:23:ac:68:4a:8d:d7:97:0f:2c:66:2d:16:eb:88:b4:0a:da:
db:10:32:4a:9c:9a:dd:17:72:e0:aa:d2:a6:6a:26:e4:db:b5:
ca:7d:90:a4:db:0e:13:ab:a1:01:76:aa:ee:9f:73:c9:6f:21:
54:02:27:28:28:dd:fc:88:ec:81:73:43:4a:1b:ff:bf:b4:62:
72:5e:c4:da:ea:38:2f:af:3c:fb:bd:c2:49:cd:3f:f9:9c:b5:
75:5c:82:91:51:c4:b5:3b:2d:c1:55:71:fc:a8:a5:91:f4:91:
74:dd:61:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmaz7xUa7sfpFmVr+HCLf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk
OWQ0ZTEwHhcNMjUwMTAyMDk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWRiNjBkY2IwODhmMDBjNWM5YzA2OWQ1MjQxZDJkZmYwYjlkODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AbQcymgGAoZJYdUCYY58MwvFjAY
e8ZBYe4QnaqnTnhhVSNEGmKu8fAHoaBSxm956aH8NO36AU0jKe9mM4onBzBom82u
15QifqQ304kHePZWvt5HyXwbVAbhTEbidukswsf1axGi9LVn5iz2wtTrqkDux3Bo
M975q65OooJcDhl243s+nCyPG2FM8lm+a+C0g5BwQWb1dCW/eODKPoMXkQEmioLg
n2VoyibXz4uNtJ8Nz3B8T3rltZSeCugwUfwW7RB2ZYAnm7eUmcCJt5Z47dDKaEYL
7XlT9KIVg4tpVM5pCWcjCZkTZMMcJJX7rz/CNFjMiiLKroMOEm1rcFts7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXbYNywiPAMXJwGnVJB0t/wudhjMB8GA1UdIwQY
MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt
ZThjNTU5YzcxZDY2LzEvNWR0ZzNMQ0k4QXhjbkFhZFVrSFMzX0M1MkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2
LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuamwMA0G
CSqGSIb3DQEBCwUAA4IBAQBU/SJtmHgklodDcEUHoqhT5N/jo1cqQtzZ+ooos/RW
k/CP5h1wehAwx3d61HLNqdivBjz2c9jXARbzzF3lS4hnOkl4Bv0BeussPMk7KpXx
9KOKEM1+0dLxrpxfCEr2JQfsFX3NopvQ06VnrOpx/nfmylWAXR0Uq5XdFd10CCzT
LDr35SNtEbXdTq/qIUDKiM1GI6xoSo3Xlw8sZi0W64i0CtrbEDJKnJrdF3LgqtKm
aibk27XKfZCk2w4Tq6EBdqrun3PJbyFUAicoKN38iOyBc0NKG/+/tGJyXsTa6jgv
rzz7vcJJzT/5nLV1XIKRUcS1Oy3BVXH8qKWR9JF03WEz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net