Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/pleHW6nWDcc0xfnD71P7Zj02Qrw.roa
File: pleHW6nWDcc0xfnD71P7Zj02Qrw.roa (raw, json)
Hash identifier: jUunyevGvx7qOlFlsS+9kK0/bbvq3BE2/HQ+8URjUz4=
Subject key identifier: A6:57:87:5B:A9:D6:0D:C7:34:C5:F9:C3:EF:53:FB:66:3D:36:42:BC
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 01946A274909341904E56D99D5C924D49EA8
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/pleHW6nWDcc0xfnD71P7Zj02Qrw.roa
Signing time: Wed 15 Jan 2025 13:29:07 +0000
ROA not before: Wed 15 Jan 2025 13:29:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 5.182.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:27:49:09:34:19:04:e5:6d:99:d5:c9:24:d4:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jan 15 13:29:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a657875ba9d60dc734c5f9c3ef53fb663d3642bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:ff:99:cb:8e:80:92:e0:2b:12:9d:d7:1c:
20:9b:e9:55:d7:f4:46:38:31:f4:ad:e5:49:7d:8d:
1b:a8:2f:23:bd:db:a6:b2:ed:48:14:ec:fb:2f:06:
cf:d6:85:a0:5d:90:b9:21:5c:ec:a8:1c:de:0f:a9:
7f:5a:bc:48:04:3e:b4:6a:e0:c6:60:d1:ce:97:bf:
af:77:2b:9f:9f:bf:81:89:53:ea:37:06:d4:9b:0c:
63:e5:8e:e0:41:d4:91:34:22:20:56:41:a5:d6:23:
e1:ab:a5:bf:e6:f1:62:b8:02:6f:b7:b3:2e:dc:22:
b8:54:f1:9c:03:98:b5:e2:6c:23:d8:60:4b:c8:a2:
29:3d:04:20:81:3b:9c:4f:6c:d5:54:69:30:6b:47:
37:c1:7f:7b:e9:d0:f1:f9:3d:2d:b9:7b:cd:26:f5:
f4:ea:b1:55:8d:11:f7:02:4b:18:15:35:57:ce:c3:
c1:fe:b5:86:71:06:90:50:92:00:0b:83:0f:ed:fe:
b2:32:c8:5e:e2:17:ae:1c:c2:83:83:de:60:3f:7a:
95:61:84:e9:6b:e1:12:24:3f:36:d1:b6:90:2f:18:
a2:5d:99:1e:00:0f:6e:56:ea:c3:b3:25:32:ab:e2:
b6:ad:21:d7:33:8d:06:20:4c:97:5c:ff:73:b2:62:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:87:5B:A9:D6:0D:C7:34:C5:F9:C3:EF:53:FB:66:3D:36:42:BC
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/pleHW6nWDcc0xfnD71P7Zj02Qrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e9:d9:18:38:de:6b:e7:a4:a8:c2:9c:96:6d:91:f5:1f:55:
f5:63:b2:54:75:4d:7a:cb:6f:d7:48:b1:37:5c:5a:d1:c3:ff:
bd:7b:24:94:31:c0:a6:ca:bf:c5:9b:09:d6:50:67:d8:7e:60:
58:25:42:f1:ca:ac:12:5b:ad:12:e8:6c:54:cc:d3:17:79:2e:
59:14:f0:fb:8a:84:c3:68:89:2c:f9:46:75:20:c0:f2:63:91:
0b:11:5c:a9:ff:c1:8b:bc:b3:d6:55:aa:22:dd:2a:4b:cc:d5:
4b:79:d6:80:41:02:09:a7:3e:d4:7b:8e:72:b4:b2:1c:62:37:
8e:99:45:f9:22:3c:63:be:4d:55:c1:69:da:12:89:50:66:a8:
a1:a3:31:df:2b:3b:7b:f0:4a:34:a2:c4:33:1f:47:3a:aa:79:
1b:7c:2d:23:cb:71:71:0e:ca:2c:53:25:21:52:a6:a4:c9:96:
57:a6:b5:19:ad:57:17:70:8b:21:57:c5:c0:eb:64:c8:41:7f:
1d:0d:c5:fe:bb:af:8e:8d:2e:06:0f:d1:a5:19:05:d4:d6:6e:
cb:89:38:a3:3d:ef:ea:ae:b0:2b:61:8c:38:21:16:49:bb:46:
08:07:ff:fd:68:a4:51:d0:e0:22:cc:52:c8:cc:8d:47:cb:7e:
0d:0c:fd:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRqJ0kJNBkE5W2Z1ckk1J6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzM2VlYWQ0MTNhMTcwNWZiZmNiMmFkYmU5MGM2OWYwNTVl
Mjc1ZGEwHhcNMjUwMTE1MTMyOTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjU3ODc1YmE5ZDYwZGM3MzRjNWY5YzNlZjUzZmI2NjNkMzY0MmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraz/mcuOgJLgKxKd1xwgm+lV1/RG
ODH0reVJfY0bqC8jvdumsu1IFOz7LwbP1oWgXZC5IVzsqBzeD6l/WrxIBD60auDG
YNHOl7+vdyufn7+BiVPqNwbUmwxj5Y7gQdSRNCIgVkGl1iPhq6W/5vFiuAJvt7Mu
3CK4VPGcA5i14mwj2GBLyKIpPQQggTucT2zVVGkwa0c3wX976dDx+T0tuXvNJvX0
6rFVjRH3AksYFTVXzsPB/rWGcQaQUJIAC4MP7f6yMshe4heuHMKDg95gP3qVYYTp
a+ESJD820baQLxiiXZkeAA9uVurDsyUyq+K2rSHXM40GIEyXXP9zsmKUDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZXh1up1g3HNMX5w+9T+2Y9NkK8MB8GA1UdIwQY
MBaAFFM+6tQToXBfv8sq2+kMafBV4nXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAt
ZDAxN2MxNzU5NjM5LzEvcGxlSFc2bldEY2MweGZuRDcxUDdaajAyUXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAtZDAxN2MxNzU5NjM5
LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbbwMA0G
CSqGSIb3DQEBCwUAA4IBAQAr6dkYON5r56SowpyWbZH1H1X1Y7JUdU16y2/XSLE3
XFrRw/+9eySUMcCmyr/FmwnWUGfYfmBYJULxyqwSW60S6GxUzNMXeS5ZFPD7ioTD
aIks+UZ1IMDyY5ELEVyp/8GLvLPWVaoi3SpLzNVLedaAQQIJpz7Ue45ytLIcYjeO
mUX5Ijxjvk1VwWnaEolQZqihozHfKzt78Eo0osQzH0c6qnkbfC0jy3FxDsosUyUh
UqakyZZXprUZrVcXcIshV8XA62TIQX8dDcX+u6+OjS4GD9GlGQXU1m7LiTijPe/q
rrArYYw4IRZJu0YIB//9aKRR0OAizFLIzI1Hy34NDP2Q
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:50 2025 by rpki-client