Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/eYwcDrbCOrfqP-rYaXCht21Elhk.roa
File: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (raw, json)
Hash identifier: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=
Subject key identifier: 79:8C:1C:0E:B6:C2:3A:B7:EA:3F:EA:D8:69:70:A1:B7:6D:44:96:19
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 019421444CA2F3EDE41562C37320076CC5F8
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/eYwcDrbCOrfqP-rYaXCht21Elhk.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215859
IP address blocks: 5.223.0.0/16 maxlen: 24
2a01:4ff:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4c:a2:f3:ed:e4:15:62:c3:73:20:07:6c:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798c1c0eb6c23ab7ea3fead86970a1b76d449619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:47:7e:69:f5:c6:d7:41:53:3f:ab:21:be:
d5:21:d0:16:17:23:0c:4f:6d:59:79:d4:07:71:71:
3b:9f:a0:8f:ad:c3:51:c8:37:f8:d5:a9:5e:dd:d5:
a3:0f:20:7f:2f:94:1c:42:01:66:ac:6d:31:8d:0c:
21:fa:0f:ba:36:00:19:22:67:ed:07:c5:c1:aa:d3:
b9:b7:54:dd:f3:a4:4a:25:bf:db:dd:1e:75:82:6a:
a0:89:6f:ca:da:c6:33:b4:b2:5a:a2:49:3d:09:a1:
f1:30:6f:ac:e4:39:f2:9d:9e:3f:e9:9d:93:5f:c8:
cb:f1:5f:c7:7b:b7:8a:5e:d5:e2:47:4d:08:04:46:
89:0b:60:3a:09:f5:65:6b:80:db:6c:3f:61:30:b5:
72:3a:3b:4d:08:b3:d7:91:2c:46:a7:5f:69:8e:f5:
3e:07:5f:83:f0:29:be:b5:c5:13:09:9a:af:c0:b5:
85:07:c3:cf:83:ee:26:21:74:17:b6:40:ee:e6:4a:
be:82:d2:8d:d7:0b:e9:9c:6c:f2:41:eb:e3:92:3f:
99:66:dd:cf:ab:98:d6:ef:bb:c3:93:6b:77:09:78:
42:a3:da:63:a6:9e:cc:b0:f9:a5:c6:3d:38:a1:fa:
2b:06:13:ff:5f:58:f7:f8:bf:cb:54:75:15:7b:66:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:1C:0E:B6:C2:3A:B7:EA:3F:EA:D8:69:70:A1:B7:6D:44:96:19
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/eYwcDrbCOrfqP-rYaXCht21Elhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.223.0.0/16
IPv6:
2a01:4ff:200::/40
Signature Algorithm: sha256WithRSAEncryption
3a:fd:e2:d0:79:4c:4b:9d:65:0c:b1:f9:fa:29:85:78:48:17:
8a:ad:92:e8:c3:1d:bb:c2:7c:75:30:0c:f0:11:bf:4c:3d:04:
15:39:35:9b:af:48:da:fc:ef:56:97:24:a2:6a:4d:ce:a9:ee:
59:b3:80:2d:c0:fd:29:c1:8e:ea:8e:9a:42:b2:ae:af:64:90:
f2:06:37:ed:5d:f0:b5:7b:b8:25:f3:eb:30:86:e4:20:74:71:
60:04:50:f3:bf:fe:5f:e4:94:57:f7:af:fd:92:41:fa:73:b5:
78:22:ea:48:24:cd:f8:d9:e5:be:11:a9:2d:48:4d:01:b0:76:
be:60:15:ab:6a:8c:4a:52:12:08:08:83:86:76:fe:38:d9:1e:
03:38:c6:f5:20:7e:36:ab:65:af:3d:5e:2d:e0:68:2d:16:55:
f7:d3:17:96:44:82:34:ce:e0:3a:83:5f:fb:4b:76:01:57:4c:
83:62:92:2c:7b:ce:b7:a0:30:18:89:b0:52:a9:2b:b4:db:2f:
ff:c3:00:ca:c5:46:15:17:f1:c0:56:9a:a1:41:06:3e:a9:db:
7c:a2:36:7f:57:41:43:b9:71:21:e0:42:65:2f:9c:de:a2:36:
1d:2b:06:82:da:f8:73:c1:f3:d2:d6:9f:fc:d2:1d:2b:61:7e:
b3:ba:f7:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhREyi8+3kFWLDcyAHbMX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjUwMTAxMDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OThjMWMwZWI2YzIzYWI3ZWEzZmVhZDg2OTcwYTFiNzZkNDQ5NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqNHfmn1xtdBUz+rIb7VIdAWFyMM
T21ZedQHcXE7n6CPrcNRyDf41ale3dWjDyB/L5QcQgFmrG0xjQwh+g+6NgAZImft
B8XBqtO5t1Td86RKJb/b3R51gmqgiW/K2sYztLJaokk9CaHxMG+s5DnynZ4/6Z2T
X8jL8V/He7eKXtXiR00IBEaJC2A6CfVla4DbbD9hMLVyOjtNCLPXkSxGp19pjvU+
B1+D8Cm+tcUTCZqvwLWFB8PPg+4mIXQXtkDu5kq+gtKN1wvpnGzyQevjkj+ZZt3P
q5jW77vDk2t3CXhCo9pjpp7MsPmlxj04oforBhP/X1j3+L/LVHUVe2ZxjQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHmMHA62wjq36j/q2GlwobdtRJYZMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvZVl3Y0RyYkNPcmZxUC1yWWFYQ2h0MjFFbGhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTALBAIAATAFAwMABd8wDgQC
AAIwCAMGACoBBP8CMA0GCSqGSIb3DQEBCwUAA4IBAQA6/eLQeUxLnWUMsfn6KYV4
SBeKrZLowx27wnx1MAzwEb9MPQQVOTWbr0ja/O9WlySiak3Oqe5Zs4AtwP0pwY7q
jppCsq6vZJDyBjftXfC1e7gl8+swhuQgdHFgBFDzv/5f5JRX96/9kkH6c7V4IupI
JM342eW+EaktSE0BsHa+YBWraoxKUhIICIOGdv442R4DOMb1IH42q2WvPV4t4Ggt
FlX30xeWRII0zuA6g1/7S3YBV0yDYpIse863oDAYibBSqSu02y//wwDKxUYVF/HA
VpqhQQY+qdt8ojZ/V0FDuXEh4EJlL5zeojYdKwaC2vhzwfPS1p/80h0rYX6zuvcv
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:35 2025 by rpki-client