Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/DIInnuZdiy-zCSCwskLDS0wKfgk.roa
File: DIInnuZdiy-zCSCwskLDS0wKfgk.roa (raw, json)
Hash identifier: /2yH/VB8ROD8Ru24wKvehpojDCx4Z8f1crW4IuS7dHk=
Subject key identifier: 0C:82:27:9E:E6:5D:8B:2F:B3:09:20:B0:B2:42:C3:4B:4C:0A:7E:09
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194228D1783F124A425377F5ABAC69FECC1
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/DIInnuZdiy-zCSCwskLDS0wKfgk.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41172
IP address blocks: 5.153.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:17:83:f1:24:a4:25:37:7f:5a:ba:c6:9f:ec:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c82279ee65d8b2fb30920b0b242c34b4c0a7e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:12:ba:0e:1d:cf:65:6a:48:50:26:02:05:
a2:83:ce:51:77:3e:b6:70:da:9e:a8:1e:38:27:85:
61:3e:ad:f5:50:12:de:0e:4c:64:bc:08:55:8d:53:
65:a4:fc:0a:67:2d:78:01:98:a9:c3:8d:fb:01:eb:
20:f6:23:f8:92:8a:cc:52:e0:ae:17:57:3e:29:88:
f4:60:a5:6c:89:91:e5:20:f2:f9:65:1d:0f:39:0b:
4e:6d:95:40:ec:ef:64:71:ea:d8:07:58:b7:4a:98:
7c:43:3f:4d:db:b2:04:e8:de:a2:45:da:28:13:a1:
21:f2:e4:29:ce:34:66:40:3e:6f:f4:bd:95:7c:e0:
5b:6f:2e:7b:9a:37:98:2f:86:51:12:a4:80:c1:dc:
d5:cb:51:fb:e7:17:c3:91:59:17:e5:c6:51:f4:bc:
86:c0:1d:22:0a:eb:da:e5:11:e3:b3:1b:6b:c6:0f:
d5:31:99:80:a4:bc:88:23:6c:dd:b9:8f:46:df:f1:
1c:5d:24:f5:23:bb:d9:97:1a:d9:6f:3a:5b:07:6d:
e8:68:f6:4e:f8:ae:ef:fb:6e:74:05:0c:f3:0a:fa:
26:3b:7b:3c:83:66:2a:98:02:de:f7:6b:97:4c:9e:
fe:8c:52:bf:fd:8a:23:3a:37:8f:f5:40:c9:9c:02:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:27:9E:E6:5D:8B:2F:B3:09:20:B0:B2:42:C3:4B:4C:0A:7E:09
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/DIInnuZdiy-zCSCwskLDS0wKfgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.184.0/24
Signature Algorithm: sha256WithRSAEncryption
80:15:59:09:84:b7:47:4e:ff:bc:64:41:dc:bd:ec:19:66:61:
0d:a9:19:2e:9c:51:12:1d:35:75:e9:91:81:92:9c:9b:6a:3f:
5e:ba:1d:f7:c5:44:3b:53:21:f1:d6:9f:52:9f:25:26:28:e7:
d8:2c:2d:f2:21:01:9f:88:97:35:a8:ef:8f:59:a1:36:13:e7:
12:36:96:2e:e5:50:79:98:ee:88:47:79:d3:01:39:25:9e:58:
76:43:92:3e:0d:b2:2e:10:fc:b2:d3:71:8b:40:f1:44:ca:e7:
ff:a0:f4:4a:06:76:a9:38:c4:b5:98:17:8c:cb:c8:32:e6:9c:
e3:95:46:0d:cc:a8:46:4a:f6:e8:c2:73:1c:3b:72:0d:cf:9d:
4c:19:ad:42:3c:9d:78:07:26:33:0a:9e:10:24:25:a0:bc:57:
6a:d9:85:7e:0c:13:44:99:d8:a2:91:e0:fc:5b:b1:74:b5:e5:
d3:17:ce:69:08:ac:6c:d0:00:99:05:ac:82:10:0f:7d:e4:dd:
b4:e9:52:1a:50:81:b4:60:16:01:8f:79:e8:ab:40:38:8e:0e:
de:b4:a2:0f:2a:ae:17:55:bb:df:81:ea:c6:92:e6:c4:5d:70:
39:75:1a:52:e9:0a:30:4e:46:b2:48:68:66:4f:ad:02:b4:b6:
b0:d9:d1:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijReD8SSkJTd/WrrGn+zBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx
ZGRhMTYwHhcNMjUwMTAxMTU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzgyMjc5ZWU2NWQ4YjJmYjMwOTIwYjBiMjQyYzM0YjRjMGE3ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfgSug4dz2VqSFAmAgWig85Rdz62
cNqeqB44J4VhPq31UBLeDkxkvAhVjVNlpPwKZy14AZipw437Aesg9iP4korMUuCu
F1c+KYj0YKVsiZHlIPL5ZR0POQtObZVA7O9kcerYB1i3Sph8Qz9N27IE6N6iRdoo
E6Eh8uQpzjRmQD5v9L2VfOBbby57mjeYL4ZREqSAwdzVy1H75xfDkVkX5cZR9LyG
wB0iCuva5RHjsxtrxg/VMZmApLyII2zduY9G3/EcXST1I7vZlxrZbzpbB23oaPZO
+K7v+250BQzzCvomO3s8g2YqmALe92uXTJ7+jFK//YojOjeP9UDJnAKs+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyCJ57mXYsvswkgsLJCw0tMCn4JMB8GA1UdIwQY
MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt
ZmVlOGYzNzkwNTY3LzEvRElJbm51WmRpeS16Q1NDd3NrTERTMHdLZmdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3
LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZm4MA0G
CSqGSIb3DQEBCwUAA4IBAQCAFVkJhLdHTv+8ZEHcvewZZmENqRkunFESHTV16ZGB
kpybaj9euh33xUQ7UyHx1p9SnyUmKOfYLC3yIQGfiJc1qO+PWaE2E+cSNpYu5VB5
mO6IR3nTATklnlh2Q5I+DbIuEPyy03GLQPFEyuf/oPRKBnapOMS1mBeMy8gy5pzj
lUYNzKhGSvbownMcO3INz51MGa1CPJ14ByYzCp4QJCWgvFdq2YV+DBNEmdiikeD8
W7F0teXTF85pCKxs0ACZBayCEA995N206VIaUIG0YBYBj3noq0A4jg7etKIPKq4X
VbvfgerGkubEXXA5dRpS6QowTkaySGhmT60CtLaw2dEn
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:41:22 2025 by rpki-client