Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/rS6BwZvo3GfqDYx4UHFP382Hars.roa
File: rS6BwZvo3GfqDYx4UHFP382Hars.roa (raw, json)
Hash identifier: SFt6Clcvm0ncW0QPfJN10WZH+aRfPVixy7ab3a3BU/w=
Subject key identifier: AD:2E:81:C1:9B:E8:DC:67:EA:0D:8C:78:50:71:4F:DF:CD:87:6A:BB
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 01942521D77B1652104DF2A60030A8FBDE75
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/rS6BwZvo3GfqDYx4UHFP382Hars.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199976
IP address blocks: 5.102.128.0/24 maxlen: 24
5.102.129.0/24 maxlen: 24
5.102.130.0/24 maxlen: 24
5.102.132.0/24 maxlen: 24
185.136.28.0/24 maxlen: 24
185.136.29.0/24 maxlen: 24
185.136.30.0/24 maxlen: 24
185.136.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d7:7b:16:52:10:4d:f2:a6:00:30:a8:fb:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2e81c19be8dc67ea0d8c7850714fdfcd876abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:7a:ab:18:80:37:88:57:fd:4c:bd:a9:4b:
42:2e:ed:27:ea:28:b7:7e:bb:53:e2:52:8f:2f:89:
27:32:37:18:23:df:b6:ed:fc:59:bf:41:d0:ec:fd:
51:1d:a4:12:46:53:b2:7f:ed:e0:3b:63:6c:d5:01:
1f:3b:b2:ca:df:85:37:83:ad:d6:c2:da:c1:18:4e:
01:17:58:45:2e:6d:52:b7:60:07:4b:e8:be:00:26:
9d:26:68:b4:39:2b:b2:11:db:8c:b9:59:39:ac:5b:
31:83:0d:4e:c3:33:2b:35:16:ca:7c:84:6a:d0:07:
87:22:01:a2:58:ae:b5:38:2a:8d:c3:95:1f:51:33:
22:c3:0f:a4:e9:d6:5d:6e:f3:37:74:2d:df:5f:e7:
c5:64:1c:e2:a1:ee:31:52:56:16:69:62:2e:8c:fd:
46:d0:f7:68:e5:96:46:5d:4b:11:a4:50:33:d8:c5:
ef:4e:0d:44:75:fc:3e:84:34:ff:18:4c:fb:1a:21:
14:01:64:83:ea:26:33:a6:20:4c:9e:53:cb:32:c6:
3c:44:c4:24:55:7b:10:43:c7:74:2d:46:77:ed:98:
7e:0d:3f:fd:ae:bd:d7:72:98:b1:c1:7e:8b:e2:c3:
46:63:93:8d:a7:aa:b7:14:c6:d5:8a:8c:f0:ad:ac:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:81:C1:9B:E8:DC:67:EA:0D:8C:78:50:71:4F:DF:CD:87:6A:BB
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/rS6BwZvo3GfqDYx4UHFP382Hars.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.128.0-5.102.130.255
5.102.132.0/24
185.136.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:97:22:b5:74:31:96:a8:cd:bb:fd:ea:fd:5c:0c:97:c1:ed:
cd:ae:40:97:8a:1f:0d:8d:59:d1:9a:28:46:ec:5a:3e:27:6e:
27:9e:8c:a0:a8:b3:51:10:c7:2a:b5:a5:7b:13:89:6f:e0:5b:
99:46:df:98:66:bb:59:3e:38:e3:38:e3:17:39:0e:f6:64:35:
9c:d0:f3:02:2e:c5:d8:d1:9e:03:c2:5a:6a:e4:b1:2c:f6:3b:
29:ca:9b:0f:9b:f8:9a:cc:29:c3:e1:b5:84:57:b9:0c:3c:b3:
7a:65:7a:99:20:f8:f1:98:f2:81:82:d2:37:7b:98:40:cb:6c:
b4:3a:61:e6:ca:53:a1:e6:01:e8:7a:d2:ee:5e:6b:9a:1c:2d:
98:bb:49:6e:97:4a:2f:9c:57:4a:62:02:68:43:51:dd:ae:dd:
54:2a:db:85:4e:14:e3:cb:2a:67:97:2d:75:a2:fa:c0:d2:11:
09:a6:44:c9:c9:3e:ff:b3:e1:cd:51:ba:39:36:eb:a3:ec:d3:
41:92:16:c5:28:75:e1:6e:60:0b:01:b1:92:17:c8:5c:18:05:
b4:85:85:70:04:13:14:a6:25:98:50:0d:37:a8:41:42:99:84:
68:2a:23:b7:fb:4d:89:58:a7:54:44:b5:7d:11:0d:5a:1c:97:
e7:82:79:e6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQlIdd7FlIQTfKmADCo+951MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy
MDNiNzEwHhcNMjUwMTAyMDM0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDJlODFjMTliZThkYzY3ZWEwZDhjNzg1MDcxNGZkZmNkODc2YWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sZ6qxiAN4hX/Uy9qUtCLu0n6ii3
frtT4lKPL4knMjcYI9+27fxZv0HQ7P1RHaQSRlOyf+3gO2Ns1QEfO7LK34U3g63W
wtrBGE4BF1hFLm1St2AHS+i+ACadJmi0OSuyEduMuVk5rFsxgw1OwzMrNRbKfIRq
0AeHIgGiWK61OCqNw5UfUTMiww+k6dZdbvM3dC3fX+fFZBzioe4xUlYWaWIujP1G
0Pdo5ZZGXUsRpFAz2MXvTg1Edfw+hDT/GEz7GiEUAWSD6iYzpiBMnlPLMsY8RMQk
VXsQQ8d0LUZ37Zh+DT/9rr3XcpixwX6L4sNGY5ONp6q3FMbViozwrayTjQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFK0ugcGb6Nxn6g2MeFBxT9/Nh2q7MB8GA1UdIwQY
MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt
NDhlZjhlMTExNGU0LzEvclM2Qndadm8zR2ZxRFl4NFVIRlAzODJIYXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0
LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAcFZoAD
BAAFZoIDBAAFZoQDBAK5iBwwDQYJKoZIhvcNAQELBQADggEBAD6XIrV0MZaozbv9
6v1cDJfB7c2uQJeKHw2NWdGaKEbsWj4nbieejKCos1EQxyq1pXsTiW/gW5lG35hm
u1k+OOM44xc5DvZkNZzQ8wIuxdjRngPCWmrksSz2OynKmw+b+JrMKcPhtYRXuQw8
s3plepkg+PGY8oGC0jd7mEDLbLQ6YebKU6HmAeh60u5ea5ocLZi7SW6XSi+cV0pi
AmhDUd2u3VQq24VOFOPLKmeXLXWi+sDSEQmmRMnJPv+z4c1Rujk266Ps00GSFsUo
deFuYAsBsZIXyFwYBbSFhXAEExSmJZhQDTeoQUKZhGgqI7f7TYlYp1REtX0RDVoc
l+eCeeY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:33 2025 by rpki-client