Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/Dn7nXax41tvFJBp_3MQsXtHKT7U.roa
File: Dn7nXax41tvFJBp_3MQsXtHKT7U.roa (raw, json)
Hash identifier: XDBm2EC7Jltcs1/SwfFUQ/tGQh6RTcr2XqkrSQ/RV/0=
Subject key identifier: 0E:7E:E7:5D:AC:78:D6:DB:C5:24:1A:7F:DC:C4:2C:5E:D1:CA:4F:B5
Certificate issuer: /CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Certificate serial: 018AD6FEA4CFAF5667DDD501B84B409F3AFB
Authority key identifier: 5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/Dn7nXax41tvFJBp_3MQsXtHKT7U.roa
Signing time: Wed 27 Sep 2023 14:15:27 +0000
ROA not before: Wed 27 Sep 2023 14:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 83.146.0.0/22 maxlen: 22
83.146.0.0/18 maxlen: 18
87.74.0.0/15 maxlen: 15
212.158.192.0/18 maxlen: 18
84.9.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:fe:a4:cf:af:56:67:dd:d5:01:b8:4b:40:9f:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Validity
Not Before: Sep 27 14:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e7ee75dac78d6dbc5241a7fdcc42c5ed1ca4fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:dc:55:c0:05:fe:6e:d9:03:a1:7b:6f:69:
40:b9:37:46:8b:fa:05:9f:b8:d1:00:08:bd:a7:1d:
10:5d:fa:e2:d3:a8:9e:c0:cf:fe:75:c2:74:ea:d2:
a8:2f:4a:26:1c:a2:87:36:fd:ce:80:6a:67:50:a3:
39:44:46:18:67:e6:0b:54:b4:88:ab:f0:5d:2b:3b:
07:3c:18:ee:85:06:bf:c8:d9:3c:7c:26:94:68:16:
57:14:dd:30:8c:3c:40:fb:48:0d:a8:2a:54:b1:e8:
68:36:c0:99:83:af:dd:95:af:2b:ea:2c:66:f1:19:
1f:19:0a:99:95:68:05:90:25:26:4f:49:4b:5a:d1:
98:99:f1:03:c3:37:4c:47:78:f7:27:c4:66:0a:c2:
79:e7:d5:ee:bf:98:7b:ac:57:27:e1:cd:9b:92:5c:
1b:a5:ac:93:87:5b:46:05:cb:3c:a3:1f:60:c4:ef:
85:15:1d:df:1f:b7:77:03:68:b8:66:fa:16:ed:95:
f4:ef:b5:88:fe:2c:1f:38:d6:71:2f:2e:a7:5a:8b:
26:c0:57:ac:de:2f:90:61:e6:3c:4d:4e:43:00:50:
f2:eb:34:83:d9:cb:bc:80:af:48:e4:40:bc:df:0d:
5b:43:95:f9:23:20:d2:11:5d:9c:f0:f4:d6:94:f8:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:E7:5D:AC:78:D6:DB:C5:24:1A:7F:DC:C4:2C:5E:D1:CA:4F:B5
X509v3 Authority Key Identifier:
keyid:5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/Dn7nXax41tvFJBp_3MQsXtHKT7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.0.0/18
84.9.0.0/16
87.74.0.0/15
212.158.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:66:65:a7:10:aa:20:b7:92:c4:40:de:d6:1c:ac:06:90:b3:
f1:85:ba:eb:2a:ba:e3:97:b8:d2:47:ad:f9:a8:54:dc:d8:b1:
63:07:f4:b7:6f:30:ab:ff:fe:cb:10:b2:a3:4e:07:58:0e:de:
fa:4c:af:a5:70:9c:a3:fb:d5:62:6d:a1:49:b9:95:b6:14:2b:
ab:9b:3e:76:61:7d:a5:5a:8d:3a:42:d5:7c:4c:c0:cb:3b:2c:
9d:63:d6:b3:55:50:16:d6:0a:dc:cb:22:2c:cb:6a:9f:c3:6d:
8c:80:94:72:33:03:21:23:f0:bc:21:63:bc:e3:e8:57:9b:f6:
a3:8f:4c:5c:23:79:a1:73:61:0e:40:f4:00:44:78:fc:25:1e:
51:f3:ab:4e:c9:6e:55:9f:7d:26:64:1e:16:63:82:5c:02:b8:
85:5e:aa:63:0d:4f:3f:81:70:28:52:b6:4e:68:03:fc:32:f0:
85:e7:f2:71:67:35:a8:8b:ae:f9:09:d4:6c:25:45:99:7e:39:
72:8c:c3:f6:28:25:ea:a2:fb:e1:4c:0c:7e:c3:fa:d0:20:97:
a3:2a:10:e8:86:56:0c:1a:2d:80:1a:09:8c:32:6d:79:09:f7:
d1:9f:4b:32:01:c3:8c:35:9e:53:84:f7:e9:b0:b7:b6:b2:8b:
53:3d:b8:cd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYrW/qTPr1Zn3dUBuEtAnzr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzBmNzM2YTRiMDUyNGE0NzZmNmYxYmUyOTY0YWU5OWI2
NDc4OWYwHhcNMjMwOTI3MTQxNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTdlZTc1ZGFjNzhkNmRiYzUyNDFhN2ZkY2M0MmM1ZWQxY2E0ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjfcVcAF/m7ZA6F7b2lAuTdGi/oF
n7jRAAi9px0QXfri06iewM/+dcJ06tKoL0omHKKHNv3OgGpnUKM5REYYZ+YLVLSI
q/BdKzsHPBjuhQa/yNk8fCaUaBZXFN0wjDxA+0gNqCpUsehoNsCZg6/dla8r6ixm
8RkfGQqZlWgFkCUmT0lLWtGYmfEDwzdMR3j3J8RmCsJ559Xuv5h7rFcn4c2bklwb
payTh1tGBcs8ox9gxO+FFR3fH7d3A2i4ZvoW7ZX077WI/iwfONZxLy6nWosmwFes
3i+QYeY8TU5DAFDy6zSD2cu8gK9I5EC83w1bQ5X5IyDSEV2c8PTWlPiHUwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFA5+512seNbbxSQaf9zELF7Ryk+1MB8GA1UdIwQY
MBaAFFtw9zaksFJKR29vG+KWSumbZHifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNEM05xU3dVa3BIYjI4YjRwWks2WnRrZUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YTM4NDYtODVkOS00ZDk0LTllYjAt
Mjk3ODRkN2I2OGEyLzEvRG43blhheDQxdHZGSkJwXzNNUXNYdEhLVDdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YTM4NDYtODVkOS00ZDk0LTllYjAtMjk3ODRkN2I2OGEy
LzEvVzNEM05xU3dVa3BIYjI4YjRwWks2WnRrZUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAATAWAwQGU5IAAwMA
VAkDAwFXSgMEBtSewDANBgkqhkiG9w0BAQsFAAOCAQEAoGZlpxCqILeSxEDe1hys
BpCz8YW66yq645e40ket+ahU3NixYwf0t28wq//+yxCyo04HWA7e+kyvpXCco/vV
Ym2hSbmVthQrq5s+dmF9pVqNOkLVfEzAyzssnWPWs1VQFtYK3MsiLMtqn8NtjICU
cjMDISPwvCFjvOPoV5v2o49MXCN5oXNhDkD0AER4/CUeUfOrTsluVZ99JmQeFmOC
XAK4hV6qYw1PP4FwKFK2TmgD/DLwhefycWc1qIuu+QnUbCVFmX45cozD9igl6qL7
4UwMfsP60CCXoyoQ6IZWDBotgBoJjDJteQn30Z9LMgHDjDWeU4T36bC3trKLUz24
zQ==
-----END CERTIFICATE-----
Generated at Sun May 11 08:35:31 2025 by rpki-client