Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa
File: U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa (raw, json)
Hash identifier: c6bEmKe9x58NR/VbAT8OhvrCDKKUEqAOtV7EWWPUmrc=
Subject key identifier: 53:8C:A3:43:58:A3:39:8C:51:58:E9:A1:50:6E:63:6F:91:5A:05:0E
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01942521D90FCAE59CF4DC7C615C79D7CBDE
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209259
IP address blocks: 5.102.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d9:0f:ca:e5:9c:f4:dc:7c:61:5c:79:d7:cb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=538ca34358a3398c5158e9a1506e636f915a050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:d2:43:d2:93:7b:1d:6d:91:5e:25:a2:02:
b4:05:ed:2a:b7:0c:35:5b:d0:99:58:2b:90:92:b5:
17:e5:3b:ee:b3:75:a6:1d:8c:6e:6b:05:6d:38:7e:
67:49:e8:0f:44:52:d9:10:32:94:31:cf:88:be:bb:
2d:13:7b:23:e2:d2:f7:d5:57:72:f3:b1:19:47:cd:
23:a0:b5:db:de:3c:47:47:e7:98:7c:a7:23:8d:5f:
0e:45:b6:00:c4:83:ef:27:17:7d:f9:37:81:f9:85:
ca:9b:51:26:6e:56:1d:21:1c:bf:ad:74:ed:7b:a3:
00:59:5b:c2:1e:99:69:d7:5d:57:9c:bc:e2:48:0d:
d3:01:34:dd:bf:0a:c5:c8:32:36:96:ac:8b:ad:f0:
75:0f:3c:24:3f:c5:dd:c6:cc:68:77:31:b4:69:30:
90:6d:5e:9d:c2:16:90:04:1e:f2:d4:c1:93:78:c2:
89:f1:b9:a4:d5:4a:e2:6a:06:8d:9d:aa:63:eb:9f:
3c:8d:a4:02:a9:f1:fe:84:3b:06:c1:3d:c7:6c:bd:
80:9e:7b:44:3e:84:94:9a:7c:72:c4:37:1d:75:1e:
f9:c5:61:9d:7b:40:df:55:5e:f0:92:ba:81:f5:eb:
da:e8:9e:40:c1:56:ef:9b:d6:d2:6a:f8:8e:bf:5d:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8C:A3:43:58:A3:39:8C:51:58:E9:A1:50:6E:63:6F:91:5A:05:0E
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7b:e6:e3:b5:ec:02:60:92:f9:9b:12:4d:ed:46:1e:74:dd:
63:0c:93:e4:f3:33:c3:6d:c0:df:08:01:75:c3:d0:b8:0e:dd:
0b:9b:81:46:09:03:74:80:d5:fe:43:ad:3a:04:45:6d:bf:aa:
2d:3e:d0:d7:4d:26:5e:0c:64:24:5d:8c:dc:e9:0c:ed:a2:2b:
0d:bc:a8:b9:4e:0f:30:bc:d6:17:07:be:8b:95:52:20:f2:ae:
6c:d3:2b:09:8a:d7:fc:4a:f2:f5:cf:a8:85:e2:9e:92:f3:c0:
cb:7e:ce:46:47:b4:b5:aa:1e:64:75:6a:7c:f9:aa:f1:a7:ca:
65:a7:c3:c3:e1:14:08:3e:c0:9f:f3:cd:b5:f8:cb:99:66:bd:
87:38:50:5f:ab:0f:b0:f3:ba:43:14:4d:73:a4:24:24:1b:b0:
55:fd:81:ee:58:d5:ec:22:22:93:c4:dc:ba:c7:ec:c4:d3:f2:
8c:d8:ba:ef:63:15:aa:83:f1:6f:30:bd:3c:5b:82:6b:65:bb:
e7:30:d9:14:ef:a1:2b:d2:19:48:bb:0c:db:e8:9c:90:2b:7b:
4e:32:01:fc:f0:49:4f:7c:66:63:6a:bc:54:5b:7b:d2:74:74:
52:90:36:0a:5c:1b:d2:b6:64:21:1d:5e:91:21:9d:fe:41:f6:
c9:20:45:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIdkPyuWc9Nx8YVx518veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy
MDNiNzEwHhcNMjUwMTAyMDM0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzhjYTM0MzU4YTMzOThjNTE1OGU5YTE1MDZlNjM2ZjkxNWEwNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXzSQ9KTex1tkV4logK0Be0qtww1
W9CZWCuQkrUX5Tvus3WmHYxuawVtOH5nSegPRFLZEDKUMc+IvrstE3sj4tL31Vdy
87EZR80joLXb3jxHR+eYfKcjjV8ORbYAxIPvJxd9+TeB+YXKm1EmblYdIRy/rXTt
e6MAWVvCHplp111XnLziSA3TATTdvwrFyDI2lqyLrfB1DzwkP8XdxsxodzG0aTCQ
bV6dwhaQBB7y1MGTeMKJ8bmk1UriagaNnapj6588jaQCqfH+hDsGwT3HbL2AnntE
PoSUmnxyxDcddR75xWGde0DfVV7wkrqB9eva6J5AwVbvm9bSaviOv12q0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOMo0NYozmMUVjpoVBuY2+RWgUOMB8GA1UdIwQY
MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt
NDhlZjhlMTExNGU0LzEvVTR5alExaWpPWXhSV09taFVHNWpiNUZhQlE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0
LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWaFMA0G
CSqGSIb3DQEBCwUAA4IBAQAPe+bjtewCYJL5mxJN7UYedN1jDJPk8zPDbcDfCAF1
w9C4Dt0Lm4FGCQN0gNX+Q606BEVtv6otPtDXTSZeDGQkXYzc6QztoisNvKi5Tg8w
vNYXB76LlVIg8q5s0ysJitf8SvL1z6iF4p6S88DLfs5GR7S1qh5kdWp8+arxp8pl
p8PD4RQIPsCf8821+MuZZr2HOFBfqw+w87pDFE1zpCQkG7BV/YHuWNXsIiKTxNy6
x+zE0/KM2LrvYxWqg/FvML08W4JrZbvnMNkU76Er0hlIuwzb6JyQK3tOMgH88ElP
fGZjarxUW3vSdHRSkDYKXBvStmQhHV6RIZ3+QfbJIEVv
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:02 2025 by rpki-client