Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/SAV39gTAMXrfyUL8wQWnwMuliLE.roa
File: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (raw, json)
Hash identifier: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=
Subject key identifier: 48:05:77:F6:04:C0:31:7A:DF:C9:42:FC:C1:05:A7:C0:CB:A5:88:B1
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194228D16EAAC640FA5E790F4D5CEF72FB4
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/SAV39gTAMXrfyUL8wQWnwMuliLE.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8274
IP address blocks: 5.153.180.0/24 maxlen: 24
5.153.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:16:ea:ac:64:0f:a5:e7:90:f4:d5:ce:f7:2f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480577f604c0317adfc942fcc105a7c0cba588b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:c4:66:ea:d1:65:5a:85:a9:73:04:7a:b8:
b1:8a:d5:ed:af:75:8b:c9:14:dd:ad:9e:5d:9d:3d:
f3:70:37:c3:9c:7c:78:33:09:7b:53:ed:7d:ed:ab:
68:d8:23:3e:68:b3:c4:18:bb:cf:1e:00:46:0d:ce:
c5:e7:c7:ba:90:ca:f4:60:80:f6:97:1a:09:73:ad:
d4:f0:9a:f6:24:e4:6b:b6:2c:36:cf:71:9f:a5:b4:
8e:6f:6c:d7:81:7d:a8:71:a0:3c:ef:20:6b:1d:e3:
8b:a2:cf:61:6a:1e:34:f9:cb:b2:cf:8c:12:d3:4a:
f5:d3:2f:da:f6:2b:48:4f:0f:70:6b:1f:fb:ef:c3:
4c:87:26:ac:34:19:d6:64:1d:d4:1c:1c:5c:2e:3f:
bb:33:d4:ee:b8:14:dd:ad:5f:f2:4c:fe:f6:e6:82:
c0:23:06:14:f5:90:ee:34:70:d2:2c:e2:4f:7b:15:
dd:88:67:5b:e1:7c:f5:0b:c0:82:84:4f:f7:31:25:
5b:fa:ce:a4:6e:05:1d:50:89:4a:b2:b7:f3:9e:e3:
bc:cb:12:fd:7b:9d:47:d5:e8:ae:c6:ec:28:ff:dc:
f3:91:45:bd:0b:c8:38:8e:72:66:36:50:55:8a:06:
9c:ce:9d:b8:ba:17:6a:3d:70:22:d1:cb:6b:6d:28:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:05:77:F6:04:C0:31:7A:DF:C9:42:FC:C1:05:A7:C0:CB:A5:88:B1
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/SAV39gTAMXrfyUL8wQWnwMuliLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.180.0/24
5.153.189.0/24
Signature Algorithm: sha256WithRSAEncryption
70:31:f1:34:1f:b9:09:be:47:e5:1b:c8:78:0d:8a:0b:59:e8:
5d:98:34:98:95:8a:65:e3:30:ab:4c:01:4c:1e:b4:6e:c9:ee:
2e:e2:7e:6d:ff:02:d5:f5:82:cb:44:43:5a:ae:54:d1:e3:7d:
1f:1b:d5:f2:53:fd:10:38:c8:35:96:c3:05:9c:d1:e2:d9:69:
1c:7c:a5:41:9f:4a:20:ab:c7:e2:09:59:14:db:ff:7f:f5:5b:
b3:66:a4:a8:de:d9:6f:d8:05:54:8d:65:63:7b:29:82:e2:f4:
2b:40:88:b2:21:27:c5:a3:11:a9:af:52:70:1e:89:59:32:00:
99:28:fa:ea:3e:2d:cc:a6:84:ee:35:f5:b8:c5:b9:57:82:fd:
fa:f9:99:85:a5:68:e6:1c:9f:c5:c8:a9:15:0a:cc:2b:0e:2b:
29:41:c5:0d:88:c9:e8:a7:2e:a9:03:99:bc:13:64:da:34:77:
63:9d:1b:00:a6:dc:da:02:5e:d5:7d:2c:6e:77:e3:0e:e2:06:
30:7a:77:86:67:94:75:ef:4d:0a:32:d6:ad:02:50:5b:64:8b:
65:cd:81:de:1f:fd:0c:1f:50:e4:72:14:ee:d3:12:de:2f:fd:
8c:92:bb:17:a7:79:ed:de:35:4c:e1:3d:ed:a5:b9:4e:65:66:
47:28:21:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijRbqrGQPpeeQ9NXO9y+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx
ZGRhMTYwHhcNMjUwMTAxMTU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODA1NzdmNjA0YzAzMTdhZGZjOTQyZmNjMTA1YTdjMGNiYTU4OGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFDEZurRZVqFqXMEerixitXtr3WL
yRTdrZ5dnT3zcDfDnHx4Mwl7U+197ato2CM+aLPEGLvPHgBGDc7F58e6kMr0YID2
lxoJc63U8Jr2JORrtiw2z3GfpbSOb2zXgX2ocaA87yBrHeOLos9hah40+cuyz4wS
00r10y/a9itITw9wax/778NMhyasNBnWZB3UHBxcLj+7M9TuuBTdrV/yTP725oLA
IwYU9ZDuNHDSLOJPexXdiGdb4Xz1C8CChE/3MSVb+s6kbgUdUIlKsrfznuO8yxL9
e51H1eiuxuwo/9zzkUW9C8g4jnJmNlBVigaczp24uhdqPXAi0ctrbSj8MQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEgFd/YEwDF638lC/MEFp8DLpYixMB8GA1UdIwQY
MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt
ZmVlOGYzNzkwNTY3LzEvU0FWMzlnVEFNWHJmeVVMOHdRV253TXVsaUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3
LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZm0AwQA
BZm9MA0GCSqGSIb3DQEBCwUAA4IBAQBwMfE0H7kJvkflG8h4DYoLWehdmDSYlYpl
4zCrTAFMHrRuye4u4n5t/wLV9YLLRENarlTR430fG9XyU/0QOMg1lsMFnNHi2Wkc
fKVBn0ogq8fiCVkU2/9/9VuzZqSo3tlv2AVUjWVjeymC4vQrQIiyISfFoxGpr1Jw
HolZMgCZKPrqPi3MpoTuNfW4xblXgv36+ZmFpWjmHJ/FyKkVCswrDispQcUNiMno
py6pA5m8E2TaNHdjnRsAptzaAl7VfSxud+MO4gYweneGZ5R1700KMtatAlBbZItl
zYHeH/0MH1DkchTu0xLeL/2MkrsXp3nt3jVM4T3tpblOZWZHKCGA
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:27 2025 by rpki-client