Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/vA4JTCZBPjorS9CM--5uNxgqUOI.roa
File: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (raw, json)
Hash identifier: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=
Subject key identifier: BC:0E:09:4C:26:41:3E:3A:2B:4B:D0:8C:FB:EE:6E:37:18:2A:50:E2
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019424B365090065B1961B32900852F1EF2D
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/vA4JTCZBPjorS9CM--5uNxgqUOI.roa
Signing time: Thu 02 Jan 2025 01:48:43 +0000
ROA not before: Thu 02 Jan 2025 01:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50818
IP address blocks: 5.182.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:65:09:00:65:b1:96:1b:32:90:08:52:f1:ef:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jan 2 01:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0e094c26413e3a2b4bd08cfbee6e37182a50e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:8f:23:3a:90:e7:e8:00:d1:9f:0e:34:8d:
6e:5c:f8:a0:0e:c1:66:10:25:9e:1b:43:ea:04:f5:
7f:18:1b:7e:6c:09:27:05:71:8f:42:2b:3a:d5:48:
17:f4:35:da:76:da:e4:ee:7e:8c:be:77:05:79:5e:
2c:ff:6f:df:ae:c4:20:2e:e4:7d:7f:00:9c:f2:2b:
13:45:3b:8a:3b:20:75:08:41:d0:a6:60:db:1c:3d:
2d:fd:53:e8:9e:7d:1d:27:d9:fb:1b:1f:35:79:81:
4f:e4:6b:30:5e:47:f6:e5:97:03:11:51:03:f3:bd:
43:3a:0d:4a:64:f8:96:3f:71:55:3c:68:e1:9e:0b:
2f:2a:79:ac:6a:ab:93:ff:11:52:fa:f6:d1:e7:e3:
fa:d5:9f:63:ab:6f:45:cc:4b:fa:7b:e2:42:1b:ca:
40:7b:8b:32:bc:6c:e8:3a:e8:a3:c7:bb:b4:9e:3e:
ff:33:cb:7c:a7:78:5e:71:8d:2c:b1:dd:53:a1:31:
a0:b7:08:62:06:17:68:02:5f:e9:54:b8:e8:0a:ea:
80:5f:c2:ce:9e:e5:8c:9f:4b:38:d6:fe:0d:b2:f8:
a6:d4:de:09:66:ac:d2:ad:f9:4e:4e:a2:09:a8:8d:
81:8f:21:28:25:03:8a:11:09:e1:18:f4:b9:a2:f5:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0E:09:4C:26:41:3E:3A:2B:4B:D0:8C:FB:EE:6E:37:18:2A:50:E2
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/vA4JTCZBPjorS9CM--5uNxgqUOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
Signature Algorithm: sha256WithRSAEncryption
36:5c:8e:30:f6:46:9b:c5:bd:de:0f:8d:dc:fa:74:24:8b:09:
5c:70:23:6f:d2:e5:4a:3f:ca:92:da:c6:b4:5b:32:39:14:6a:
8e:e6:fc:c3:8e:91:ea:23:50:ae:78:28:7d:99:cd:ff:e6:3b:
69:27:1c:42:4c:8d:7d:95:d5:3e:af:be:80:e8:6b:f3:1c:0d:
39:97:54:96:c0:b4:6a:58:37:a7:cd:00:40:72:67:20:4e:60:
9f:9a:98:ff:18:ba:f0:24:90:37:95:d1:ff:fe:d7:1f:fb:a0:
de:1a:fa:0e:13:35:9a:e0:49:8b:3f:80:cf:1b:04:4f:41:21:
ec:b5:0a:ec:08:9d:f2:52:1d:af:1d:ff:3d:f9:2c:60:4f:a6:
75:5d:0f:08:c1:52:ea:d8:2b:65:1c:51:40:28:45:72:29:e0:
f9:a4:0e:2f:53:b1:8d:cb:f4:10:a5:fe:ff:08:fc:52:bf:83:
3d:2a:66:ad:a9:23:f3:72:54:77:37:3a:71:e6:c2:73:2d:b8:
7f:37:57:fc:cf:4f:98:21:5f:c6:00:39:d7:89:f3:58:d4:68:
ca:9c:25:02:ae:52:77:86:22:de:80:8d:5b:41:44:f4:60:03:
00:6b:53:ed:e3:9a:09:99:d6:fb:5a:9d:6d:92:80:21:0d:de:
00:44:17:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks2UJAGWxlhsykAhS8e8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjUwMTAyMDE0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzBlMDk0YzI2NDEzZTNhMmI0YmQwOGNmYmVlNmUzNzE4MmE1MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN6PIzqQ5+gA0Z8ONI1uXPigDsFm
ECWeG0PqBPV/GBt+bAknBXGPQis61UgX9DXadtrk7n6MvncFeV4s/2/frsQgLuR9
fwCc8isTRTuKOyB1CEHQpmDbHD0t/VPonn0dJ9n7Gx81eYFP5GswXkf25ZcDEVED
871DOg1KZPiWP3FVPGjhngsvKnmsaquT/xFS+vbR5+P61Z9jq29FzEv6e+JCG8pA
e4syvGzoOuijx7u0nj7/M8t8p3hecY0ssd1ToTGgtwhiBhdoAl/pVLjoCuqAX8LO
nuWMn0s41v4Nsvim1N4JZqzSrflOTqIJqI2BjyEoJQOKEQnhGPS5ovWmbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwOCUwmQT46K0vQjPvubjcYKlDiMB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvdkE0SlRDWkJQam9yUzlDTS0tNXVOeGdxVU9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbaIMA0G
CSqGSIb3DQEBCwUAA4IBAQA2XI4w9kabxb3eD43c+nQkiwlccCNv0uVKP8qS2sa0
WzI5FGqO5vzDjpHqI1CueCh9mc3/5jtpJxxCTI19ldU+r76A6GvzHA05l1SWwLRq
WDenzQBAcmcgTmCfmpj/GLrwJJA3ldH//tcf+6DeGvoOEzWa4EmLP4DPGwRPQSHs
tQrsCJ3yUh2vHf89+SxgT6Z1XQ8IwVLq2CtlHFFAKEVyKeD5pA4vU7GNy/QQpf7/
CPxSv4M9KmatqSPzclR3Nzpx5sJzLbh/N1f8z0+YIV/GADnXifNY1GjKnCUCrlJ3
hiLegI1bQUT0YAMAa1Pt45oJmdb7Wp1tkoAhDd4ARBfg
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:13 2025 by rpki-client