Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UpPIm65Sa3dqMwTBhN73QhnpZe8.roa
File: UpPIm65Sa3dqMwTBhN73QhnpZe8.roa (raw, json)
Hash identifier: yqggnFUSL/pzbJQWf9xkt5F2nSl+MKjVnUlRXDKp2M4=
Subject key identifier: 52:93:C8:9B:AE:52:6B:77:6A:33:04:C1:84:DE:F7:42:19:E9:65:EF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D34AF45B3749C259394E0EEE4663
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UpPIm65Sa3dqMwTBhN73QhnpZe8.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 5.183.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d3:4a:f4:5b:37:49:c2:59:39:4e:0e:ee:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5293c89bae526b776a3304c184def74219e965ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:f3:de:2f:3c:87:2e:fd:da:b4:71:bc:dd:
5c:97:c9:8d:2d:be:10:22:00:e6:82:b2:3d:e7:18:
45:f6:58:28:87:f7:9b:c1:aa:ac:4c:69:ca:35:ee:
20:3c:81:39:4d:24:24:f1:45:6d:87:3e:c3:b8:3b:
96:43:26:6d:3e:45:34:90:f9:97:19:c0:87:4e:6b:
20:6a:91:96:10:5e:12:cc:a1:92:1e:01:54:4b:e0:
30:45:61:09:66:45:e0:c9:3f:a8:69:58:aa:fa:84:
57:c7:dd:d1:ff:3d:39:f4:95:a9:64:b8:11:1b:74:
da:0f:17:ab:e9:a3:31:97:91:9d:a3:d2:77:b2:24:
72:54:64:75:43:2c:b7:49:b4:a3:ec:e4:4f:7d:4e:
20:e4:92:ad:af:4f:5a:1d:fa:64:ae:11:ef:df:ef:
39:e0:12:1c:ec:90:14:30:d9:a1:37:bf:99:75:f7:
85:0e:4f:a6:fd:21:e7:d1:85:d2:da:07:56:3c:06:
87:26:1b:2d:1c:57:e2:d3:20:ac:ea:cf:8b:3b:46:
6f:00:09:e0:b0:20:21:a0:c7:bf:e2:e1:3a:32:1e:
30:18:35:df:84:f9:c8:9f:a5:cc:96:1a:b6:99:27:
f0:ba:41:18:d8:fe:53:7e:e9:04:cb:80:f1:c2:52:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:C8:9B:AE:52:6B:77:6A:33:04:C1:84:DE:F7:42:19:E9:65:EF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UpPIm65Sa3dqMwTBhN73QhnpZe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.153.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9a:4b:48:8a:4f:13:84:97:39:a8:16:4e:4e:ca:10:43:fe:
92:a5:32:02:12:79:71:dd:f6:39:93:07:8e:5a:c3:73:89:c6:
77:23:d3:9b:9c:e0:11:63:22:fa:0b:be:ef:a1:65:eb:cf:a4:
e9:d9:7e:0f:82:9a:6b:44:78:73:74:60:34:a5:15:c3:a3:10:
57:bd:cb:fa:d2:42:f0:80:59:ae:6a:c8:23:f3:fe:d6:2c:d4:
39:05:3e:7c:da:98:ed:46:9e:37:14:8a:87:51:95:5d:b3:31:
9c:83:6a:19:de:34:43:41:cf:2b:fc:af:f2:2b:a2:53:17:6c:
06:a6:7a:5a:1a:7a:e5:d5:6f:5c:a5:8e:9c:41:f7:c7:97:8e:
8b:56:84:de:e8:73:0c:ec:ba:a5:c0:c7:9b:94:2a:26:04:26:
11:c7:67:69:f6:55:08:f6:b3:52:66:37:c1:c6:a6:7d:4b:9e:
1f:e5:61:c8:70:da:9a:d5:31:62:ac:25:3a:91:0c:20:a6:94:
7f:67:4b:f8:86:9a:65:eb:8e:c6:f2:3d:80:70:61:ad:90:11:
02:99:24:e8:92:3c:ed:65:b0:46:10:d8:03:1c:16:21:b8:f8:
37:59:94:0d:39:98:0a:50:33:ae:18:72:b7:b2:90:9f:24:b5:
85:4c:70:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadNK9Fs3ScJZOU4O7kZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjkzYzg5YmFlNTI2Yjc3NmEzMzA0YzE4NGRlZjc0MjE5ZTk2NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GDz3i88hy792rRxvN1cl8mNLb4Q
IgDmgrI95xhF9lgoh/ebwaqsTGnKNe4gPIE5TSQk8UVthz7DuDuWQyZtPkU0kPmX
GcCHTmsgapGWEF4SzKGSHgFUS+AwRWEJZkXgyT+oaViq+oRXx93R/z059JWpZLgR
G3TaDxer6aMxl5Gdo9J3siRyVGR1Qyy3SbSj7ORPfU4g5JKtr09aHfpkrhHv3+85
4BIc7JAUMNmhN7+ZdfeFDk+m/SHn0YXS2gdWPAaHJhstHFfi0yCs6s+LO0ZvAAng
sCAhoMe/4uE6Mh4wGDXfhPnIn6XMlhq2mSfwukEY2P5TfukEy4DxwlKXnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFKTyJuuUmt3ajMEwYTe90IZ6WXvMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvVXBQSW02NVNhM2RxTXdUQmhONzNRaG5wWmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbeZMA0G
CSqGSIb3DQEBCwUAA4IBAQAWmktIik8ThJc5qBZOTsoQQ/6SpTICEnlx3fY5kweO
WsNzicZ3I9ObnOARYyL6C77voWXrz6Tp2X4PgpprRHhzdGA0pRXDoxBXvcv60kLw
gFmuasgj8/7WLNQ5BT582pjtRp43FIqHUZVdszGcg2oZ3jRDQc8r/K/yK6JTF2wG
pnpaGnrl1W9cpY6cQffHl46LVoTe6HMM7LqlwMeblComBCYRx2dp9lUI9rNSZjfB
xqZ9S54f5WHIcNqa1TFirCU6kQwgppR/Z0v4hppl647G8j2AcGGtkBECmSTokjzt
ZbBGENgDHBYhuPg3WZQNOZgKUDOuGHK3spCfJLWFTHCL
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:32:07 2025 by rpki-client