Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_wC-1ROPyPjW0MawMd3mYCPZedQ.roa
File: _wC-1ROPyPjW0MawMd3mYCPZedQ.roa (raw, json)
Hash identifier: UNeTJPIxBOXFHEiJTwBfIDA25eLHNfDNGAyjojuXXck=
Subject key identifier: FF:00:BE:D5:13:8F:C8:F8:D6:D0:C6:B0:31:DD:E6:60:23:D9:79:D4
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9C3A8E5C233D24A128DC4468765F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_wC-1ROPyPjW0MawMd3mYCPZedQ.roa
Signing time: Thu 02 Jan 2025 09:49:34 +0000
ROA not before: Thu 02 Jan 2025 09:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204774
IP address blocks: 5.154.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9c:3a:8e:5c:23:3d:24:a1:28:dc:44:68:76:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff00bed5138fc8f8d6d0c6b031dde66023d979d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:ae:c7:ae:85:f4:07:9b:ad:aa:46:2d:68:
b3:7e:51:fe:c5:46:6f:4a:16:58:40:de:04:9b:cc:
13:2b:11:cc:db:92:d1:25:bf:63:ed:29:d4:be:62:
7a:3a:96:0e:4d:ff:b0:a9:cf:24:f8:e9:53:ba:35:
4f:5d:79:0c:d9:de:9d:d0:65:44:1c:cc:88:67:99:
05:fd:26:c3:a4:8e:01:64:07:f1:8d:d1:fc:6a:ff:
c2:91:c7:10:a6:95:c3:02:e2:f8:18:09:f9:e4:8d:
b1:9e:bc:5c:fb:76:6f:7b:1a:ed:a0:61:2f:50:ff:
6b:b0:1b:73:33:d9:c6:6c:3c:e1:cb:25:2b:d9:94:
ba:a9:58:97:82:75:64:66:6f:d4:c4:10:a1:60:fd:
58:50:89:6b:61:91:a1:16:43:a3:b0:0e:a1:a2:ab:
ef:0f:68:4a:c0:bf:76:79:1f:72:16:d1:d1:3b:19:
4a:06:74:9d:0b:ff:1c:13:85:e5:f4:94:09:d4:12:
e1:0d:48:30:4f:e2:e5:2a:44:33:84:0c:27:4c:0e:
70:33:87:52:7a:73:17:1c:c7:33:94:18:d4:57:b4:
77:b9:4b:0b:b5:31:41:eb:f6:9a:06:25:22:9a:46:
c3:60:4b:f1:c8:f4:63:38:c7:3a:13:93:c3:c9:71:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:BE:D5:13:8F:C8:F8:D6:D0:C6:B0:31:DD:E6:60:23:D9:79:D4
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_wC-1ROPyPjW0MawMd3mYCPZedQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3d:61:9f:07:78:46:83:42:a4:e8:c0:5e:1f:ea:81:d4:16:
fd:de:bb:b2:b8:de:25:7f:0e:ed:ea:e0:5f:41:09:b2:f0:ac:
36:60:06:28:db:e7:29:ff:7b:b7:33:d3:e2:90:51:0e:c1:c0:
ee:80:86:65:ea:75:a4:d6:3b:08:60:d8:2b:3f:2a:5f:45:be:
a0:17:62:2a:9c:d1:fa:46:87:e6:50:92:b3:0e:59:c4:ba:9c:
4d:b2:8c:b3:26:41:5b:79:dd:88:a5:52:0d:3d:66:a6:43:55:
23:9f:29:0b:20:23:be:85:f9:36:bf:63:65:53:9a:62:07:47:
44:11:58:03:df:1c:ad:ef:c5:80:57:5e:82:63:3a:24:eb:65:
5e:69:03:3c:3f:04:25:b8:b7:66:f6:e1:e8:5f:ed:ee:21:b4:
98:6d:d4:21:e0:c5:e8:02:71:d9:30:e6:91:34:03:ea:07:e9:
f4:89:ba:2d:27:f8:28:56:d7:20:dd:2d:0b:03:48:50:bb:a5:
19:b7:a5:3a:e4:d6:1d:f2:bc:27:03:23:9b:d6:9d:ea:a3:ac:
68:d2:0d:aa:df:f4:89:8f:dd:15:00:64:43:97:d6:89:b1:a7:
25:9e:8c:58:19:02:ca:17:3f:b6:0b:81:ee:fd:63:5e:fd:79:
04:53:c0:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma5w6jlwjPSShKNxEaHZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjAwYmVkNTEzOGZjOGY4ZDZkMGM2YjAzMWRkZTY2MDIzZDk3OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT6ux66F9AebrapGLWizflH+xUZv
ShZYQN4Em8wTKxHM25LRJb9j7SnUvmJ6OpYOTf+wqc8k+OlTujVPXXkM2d6d0GVE
HMyIZ5kF/SbDpI4BZAfxjdH8av/CkccQppXDAuL4GAn55I2xnrxc+3ZvexrtoGEv
UP9rsBtzM9nGbDzhyyUr2ZS6qViXgnVkZm/UxBChYP1YUIlrYZGhFkOjsA6hoqvv
D2hKwL92eR9yFtHROxlKBnSdC/8cE4Xl9JQJ1BLhDUgwT+LlKkQzhAwnTA5wM4dS
enMXHMczlBjUV7R3uUsLtTFB6/aaBiUimkbDYEvxyPRjOMc6E5PDyXEuNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8AvtUTj8j41tDGsDHd5mAj2XnUMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvX3dDLTFST1B5UGpXME1hd01kM21ZQ1BaZWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZpLMA0G
CSqGSIb3DQEBCwUAA4IBAQBsPWGfB3hGg0Kk6MBeH+qB1Bb93ruyuN4lfw7t6uBf
QQmy8Kw2YAYo2+cp/3u3M9PikFEOwcDugIZl6nWk1jsIYNgrPypfRb6gF2IqnNH6
RofmUJKzDlnEupxNsoyzJkFbed2IpVINPWamQ1UjnykLICO+hfk2v2NlU5piB0dE
EVgD3xyt78WAV16CYzok62VeaQM8PwQluLdm9uHoX+3uIbSYbdQh4MXoAnHZMOaR
NAPqB+n0ibotJ/goVtcg3S0LA0hQu6UZt6U65NYd8rwnAyOb1p3qo6xo0g2q3/SJ
j90VAGRDl9aJsaclnoxYGQLKFz+2C4Hu/WNe/XkEU8AR
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:28 2025 by rpki-client