Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/lj1e8WXjjfLw34AYjnOEaHnMRNs.roa
File: lj1e8WXjjfLw34AYjnOEaHnMRNs.roa (raw, json)
Hash identifier: loW810RRscJtK3DOKXgBzw/9lJOgZmZ1BuGbawVw1NU=
Subject key identifier: 96:3D:5E:F1:65:E3:8D:F2:F0:DF:80:18:8E:73:84:68:79:CC:44:DB
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 01941F8C0D6901C0269E340C5F5A0BDEE0EA
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/lj1e8WXjjfLw34AYjnOEaHnMRNs.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50022
IP address blocks: 213.110.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0d:69:01:c0:26:9e:34:0c:5f:5a:0b:de:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=963d5ef165e38df2f0df80188e73846879cc44db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:4e:9c:9d:78:99:75:9f:3f:6b:7f:30:a8:
a8:d3:7b:6d:23:ac:f9:ac:1a:41:56:a6:22:eb:f8:
b0:3e:66:49:1e:f3:a7:b0:84:6b:c2:3c:df:93:ea:
03:2e:98:06:dc:90:53:7d:39:c8:2f:44:a1:0e:77:
93:4a:b3:c1:1f:5b:8f:9f:09:0e:5d:1e:14:ab:34:
7a:33:b4:56:bc:83:6a:1c:2e:cf:7b:14:5f:94:ff:
2d:63:13:4e:9c:16:9c:8d:46:7a:7d:3f:db:46:97:
50:48:94:80:dc:bd:15:fa:97:cd:09:53:07:36:73:
3d:63:dc:4c:25:a1:31:c6:95:10:69:b5:cb:7a:40:
21:51:64:56:00:bd:6d:8c:37:dc:dd:7c:7c:f7:23:
d5:41:47:75:00:f8:cf:e0:3a:32:bb:02:09:a0:1e:
d4:b9:ae:ba:24:fc:49:98:b8:86:1e:4c:f2:06:04:
89:a1:06:f5:ee:00:eb:8f:13:8c:d4:c1:37:64:16:
22:0c:29:1b:78:7b:7e:76:ad:a0:61:0a:24:5a:00:
03:80:84:db:c8:46:3d:61:04:9a:37:c1:ba:e2:58:
f1:51:a9:9e:e5:fe:46:1a:f0:97:aa:c2:57:f0:7b:
4a:b4:91:51:45:8a:62:1b:5a:40:a9:47:52:29:ef:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3D:5E:F1:65:E3:8D:F2:F0:DF:80:18:8E:73:84:68:79:CC:44:DB
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/lj1e8WXjjfLw34AYjnOEaHnMRNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:92:cc:26:cb:df:0c:1a:26:1a:32:42:fe:a6:14:61:a6:04:
78:b7:60:06:7e:f8:f9:14:54:1a:4b:91:b2:b3:be:3c:fd:65:
bd:72:11:fc:7d:3d:fa:39:f1:1b:9f:2c:92:18:53:94:6d:b1:
c6:39:e8:80:8f:c5:01:54:09:3a:69:35:3b:40:92:34:2d:26:
9d:69:a4:04:da:57:f6:1d:d2:33:9b:d9:2c:dd:db:d9:6c:c7:
73:f2:ef:0c:5e:1a:e4:b0:7d:19:62:8c:05:d0:92:df:57:27:
14:38:23:64:09:c9:9a:64:77:9d:dd:b1:06:c8:a5:77:e0:61:
c4:b8:41:bf:c2:ea:63:df:d3:f0:67:29:b4:d2:4c:44:12:5a:
53:a5:d4:fe:13:8f:38:83:98:a2:58:dc:b6:40:ab:8d:30:ed:
2f:b3:72:ba:75:64:61:84:94:a5:ac:cd:f1:db:a8:bf:6f:f9:
d5:e7:11:98:6f:b3:47:32:6c:3c:db:45:0f:74:f1:8e:f8:6e:
2f:4b:03:7d:9b:c7:a2:95:fc:ca:98:5a:63:4a:57:ab:05:fe:
9e:3a:b9:cc:b0:33:72:a3:5c:be:eb:91:fb:4f:78:77:cf:19:
63:39:6a:2c:22:de:b9:63:80:c2:01:93:f1:44:82:3c:06:be:
1d:5f:56:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjA1pAcAmnjQMX1oL3uDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjE4ZGYwMDZkNTQ4ZDFkODdlZDY0MTk1NTA2NjJkYjZm
YzA2MDYwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjNkNWVmMTY1ZTM4ZGYyZjBkZjgwMTg4ZTczODQ2ODc5Y2M0NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZpOnJ14mXWfP2t/MKio03ttI6z5
rBpBVqYi6/iwPmZJHvOnsIRrwjzfk+oDLpgG3JBTfTnIL0ShDneTSrPBH1uPnwkO
XR4UqzR6M7RWvINqHC7PexRflP8tYxNOnBacjUZ6fT/bRpdQSJSA3L0V+pfNCVMH
NnM9Y9xMJaExxpUQabXLekAhUWRWAL1tjDfc3Xx89yPVQUd1APjP4DoyuwIJoB7U
ua66JPxJmLiGHkzyBgSJoQb17gDrjxOM1ME3ZBYiDCkbeHt+dq2gYQokWgADgITb
yEY9YQSaN8G64ljxUame5f5GGvCXqsJX8HtKtJFRRYpiG1pAqUdSKe/sfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJY9XvFl443y8N+AGI5zhGh5zETbMB8GA1UdIwQY
MBaAFFFhjfAG1UjR2H7WQZVQZi22/AYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEt
MzE3YzJmYjBhMzViLzEvbGoxZThXWGpqZkx3MzRBWWpuT0VhSG5NUk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEtMzE3YzJmYjBhMzVi
LzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1W7wMA0G
CSqGSIb3DQEBCwUAA4IBAQAukswmy98MGiYaMkL+phRhpgR4t2AGfvj5FFQaS5Gy
s748/WW9chH8fT36OfEbnyySGFOUbbHGOeiAj8UBVAk6aTU7QJI0LSadaaQE2lf2
HdIzm9ks3dvZbMdz8u8MXhrksH0ZYowF0JLfVycUOCNkCcmaZHed3bEGyKV34GHE
uEG/wupj39PwZym00kxEElpTpdT+E484g5iiWNy2QKuNMO0vs3K6dWRhhJSlrM3x
26i/b/nV5xGYb7NHMmw820UPdPGO+G4vSwN9m8eilfzKmFpjSlerBf6eOrnMsDNy
o1y+65H7T3h3zxljOWosIt65Y4DCAZPxRII8Br4dX1ay
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:25 2025 by rpki-client