Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/p3WBjzteYXQZYIX5zj87ra338og.roa
File: p3WBjzteYXQZYIX5zj87ra338og.roa (raw, json)
Hash identifier: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=
Subject key identifier: A7:75:81:8F:3B:5E:61:74:19:60:85:F9:CE:3F:3B:AD:AD:F7:F2:88
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019427B61BBF96297895662D22E2DF0FDAA7
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/p3WBjzteYXQZYIX5zj87ra338og.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29100
IP address blocks: 212.99.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1b:bf:96:29:78:95:66:2d:22:e2:df:0f:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a775818f3b5e6174196085f9ce3f3badadf7f288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:4c:eb:e9:36:aa:93:28:a9:26:cc:5a:f8:
a8:62:f8:ac:b3:54:d8:18:db:37:08:a2:51:45:73:
1d:62:77:67:f1:2c:60:6e:43:8d:3d:65:11:90:72:
0a:ac:c8:33:b8:71:32:5a:7b:37:3f:9a:14:71:f7:
6d:ff:cc:eb:be:4f:19:7f:e7:e5:5f:63:af:c3:e3:
7d:64:cd:d8:76:9b:83:2b:4a:3f:5f:93:13:a5:be:
6e:51:c0:dc:1f:73:22:eb:07:9c:05:8f:93:19:ad:
9a:45:99:7b:42:bc:27:ea:fe:c4:0a:6c:a9:c3:87:
74:33:81:ad:aa:f7:c4:0f:25:64:71:9c:f9:aa:74:
b5:ca:7c:8c:e6:61:ae:81:3e:ba:ec:36:48:0f:22:
c0:2f:02:b7:e9:75:cc:a6:a8:28:a7:b2:24:43:7c:
cb:c9:46:3f:fd:36:82:9a:70:8e:3c:bd:b0:09:89:
f9:fa:5c:6f:f9:c8:4e:05:ee:93:56:17:3d:9f:e3:
13:55:5f:17:64:e1:3a:ea:9a:87:ef:c0:37:ab:63:
a3:7a:cd:21:f6:63:91:e2:58:8e:b9:ee:21:ed:87:
2d:3b:0f:25:12:2d:5d:e0:d2:ec:04:df:f6:78:b6:
90:41:14:4c:be:d0:b6:5d:54:ed:ad:21:82:81:7f:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:81:8F:3B:5E:61:74:19:60:85:F9:CE:3F:3B:AD:AD:F7:F2:88
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/p3WBjzteYXQZYIX5zj87ra338og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.99.224.0/19
Signature Algorithm: sha256WithRSAEncryption
93:60:22:a3:ad:d3:52:1a:c0:1f:36:ec:34:1b:39:2d:63:66:
c8:d3:2e:ea:24:f0:d7:05:f6:f2:12:4a:f9:37:e3:8c:c9:b3:
4f:15:4e:33:46:db:fd:32:d1:6c:06:70:e6:ae:61:5c:3c:3b:
8f:3c:74:91:78:c1:ad:62:b0:f1:07:6a:d7:02:de:78:1e:d5:
d0:eb:b7:5d:a0:60:3d:89:7a:c2:a7:16:bb:57:c8:5d:44:9e:
21:b9:44:04:bc:2e:c9:97:a7:bd:2e:e4:f5:6a:68:a1:2f:2e:
9a:e9:11:d4:b8:26:bb:cd:15:02:46:64:37:62:6b:1a:db:fc:
85:74:6f:09:c1:f6:92:84:c2:6a:6e:a0:41:f1:9d:f8:3b:d6:
59:f5:87:3e:95:81:96:a0:3d:1a:c3:44:3e:63:fc:c9:68:0a:
d4:0b:ee:66:bb:8b:41:ef:1e:6c:cb:e6:35:fa:97:6e:14:b1:
d1:b2:5c:bb:a9:58:e4:e2:87:cf:4a:10:3e:e8:04:2c:b0:44:
46:d9:6f:8a:2e:ec:f2:62:d2:4e:33:fe:22:a5:15:ed:a7:7d:
b0:bc:37:d3:16:57:e9:c2:2a:71:8b:17:6b:99:5b:7c:8b:45:
18:20:dd:50:c7:5a:c7:c0:bf:8c:41:42:a2:65:75:89:9c:f0:
2a:ab:27:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnthu/lil4lWYtIuLfD9qnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjUwMTAyMTU1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzc1ODE4ZjNiNWU2MTc0MTk2MDg1ZjljZTNmM2JhZGFkZjdmMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgdM6+k2qpMoqSbMWvioYviss1TY
GNs3CKJRRXMdYndn8SxgbkONPWURkHIKrMgzuHEyWns3P5oUcfdt/8zrvk8Zf+fl
X2Ovw+N9ZM3YdpuDK0o/X5MTpb5uUcDcH3Mi6wecBY+TGa2aRZl7Qrwn6v7ECmyp
w4d0M4GtqvfEDyVkcZz5qnS1ynyM5mGugT667DZIDyLALwK36XXMpqgop7IkQ3zL
yUY//TaCmnCOPL2wCYn5+lxv+chOBe6TVhc9n+MTVV8XZOE66pqH78A3q2Ojes0h
9mOR4liOue4h7YctOw8lEi1d4NLsBN/2eLaQQRRMvtC2XVTtrSGCgX8umwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKd1gY87XmF0GWCF+c4/O62t9/KIMB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvcDNXQmp6dGVZWFFaWUlYNXpqODdyYTMzOG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1GPgMA0G
CSqGSIb3DQEBCwUAA4IBAQCTYCKjrdNSGsAfNuw0GzktY2bI0y7qJPDXBfbyEkr5
N+OMybNPFU4zRtv9MtFsBnDmrmFcPDuPPHSReMGtYrDxB2rXAt54HtXQ67ddoGA9
iXrCpxa7V8hdRJ4huUQEvC7Jl6e9LuT1amihLy6a6RHUuCa7zRUCRmQ3Ymsa2/yF
dG8JwfaShMJqbqBB8Z34O9ZZ9Yc+lYGWoD0aw0Q+Y/zJaArUC+5mu4tB7x5sy+Y1
+pduFLHRsly7qVjk4ofPShA+6AQssERG2W+KLuzyYtJOM/4ipRXtp32wvDfTFlfp
wipxixdrmVt8i0UYIN1Qx1rHwL+MQUKiZXWJnPAqqyfb
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:32 2025 by rpki-client