Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Rnb6ePLSOGlgFKlQ30rt0WUgyCs.roa
File: Rnb6ePLSOGlgFKlQ30rt0WUgyCs.roa (raw, json)
Hash identifier: YoVM5PEW0yie2gzkaO/g6vujSxWbofGgyG3IeQIvisg=
Subject key identifier: 46:76:FA:78:F2:D2:38:69:60:14:A9:50:DF:4A:ED:D1:65:20:C8:2B
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C99A923D106CC6E253C8634AFC218
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Rnb6ePLSOGlgFKlQ30rt0WUgyCs.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211726
IP address blocks: 5.59.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:a9:23:d1:06:cc:6e:25:3c:86:34:af:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4676fa78f2d238696014a950df4aedd16520c82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:93:4e:23:ae:7a:cb:f2:8b:ea:f3:55:d5:
8e:f7:36:4f:f9:66:bd:ea:d1:42:68:da:76:00:27:
7f:04:8e:db:05:6b:8a:52:c4:61:4b:ec:ec:ef:95:
5a:08:0b:29:32:97:55:15:0e:c1:20:5e:4d:aa:64:
58:cb:3c:d8:54:f3:a2:52:cb:b2:db:ad:39:47:aa:
99:c8:2c:a2:5c:6f:90:37:72:a3:72:36:69:36:f0:
0f:5a:97:d3:0c:be:07:40:71:4b:2e:0c:81:43:46:
a3:ad:7f:d3:b3:dc:19:42:15:8f:54:02:9b:a4:3b:
83:38:6c:b9:68:09:f0:e6:b9:40:60:5e:5b:fe:e8:
10:00:64:77:db:9b:fc:d6:d3:50:e1:1e:5a:87:39:
2f:f0:5c:79:34:a0:50:53:b0:c3:af:be:ed:c7:b1:
28:c2:af:bd:53:48:4f:49:25:e0:d1:9d:de:af:cc:
75:e5:34:5f:66:96:31:59:31:2b:03:b9:f1:2f:69:
77:02:0a:b3:04:c6:a0:1e:c7:ae:5e:76:bb:77:2f:
88:18:27:6b:8f:b8:cc:99:ad:90:35:a5:9d:1d:97:
79:06:45:16:86:a7:0a:4c:3f:fe:2c:d2:04:b5:d7:
b6:5a:b2:b9:67:45:37:82:31:4d:0c:14:1b:f4:d6:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:FA:78:F2:D2:38:69:60:14:A9:50:DF:4A:ED:D1:65:20:C8:2B
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/Rnb6ePLSOGlgFKlQ30rt0WUgyCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.180.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ee:12:53:6b:9e:8e:83:87:b8:92:fc:54:ac:8c:b3:4c:e1:
9a:a0:f0:b4:d1:57:01:81:2c:00:c2:16:dd:9e:11:9f:64:2c:
b2:b4:67:4d:14:26:19:3f:83:43:0d:ab:c3:fa:9b:d5:fe:56:
05:d5:d3:c4:34:45:ca:5d:12:f8:aa:d8:83:6c:2d:a1:9c:84:
fc:a4:75:02:03:d4:66:8f:6e:77:c5:5d:d3:69:c6:c0:e4:ce:
bd:9e:64:52:f6:ae:02:e6:29:13:ad:59:ca:91:0e:b2:48:74:
c5:cf:8b:b3:84:72:b3:5b:d8:c2:b8:5b:72:bf:84:3d:2c:0e:
49:60:f6:c2:d4:f4:f2:1c:33:23:5c:09:1c:b7:80:bd:ff:df:
54:d9:6b:17:d6:ca:e3:cf:e7:ff:20:69:04:a0:7d:12:8b:fd:
88:36:2b:65:99:d6:2c:a8:aa:c9:85:1d:f8:28:24:04:fc:12:
b9:df:42:12:cf:3b:8c:9e:ff:93:93:54:98:72:21:03:c5:05:
2a:64:6a:64:55:45:1e:8b:90:4f:e0:74:a9:7b:bc:66:09:48:
55:43:9c:7b:e9:e4:66:c7:ff:64:21:cd:85:f3:70:29:b2:fe:
90:54:1f:e1:41:ec:5b:3e:d6:01:3f:51:44:9f:b1:c3:68:71:
7c:1c:bb:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJmpI9EGzG4lPIY0r8IYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njc2ZmE3OGYyZDIzODY5NjAxNGE5NTBkZjRhZWRkMTY1MjBjODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxGTTiOuesvyi+rzVdWO9zZP+Wa9
6tFCaNp2ACd/BI7bBWuKUsRhS+zs75VaCAspMpdVFQ7BIF5NqmRYyzzYVPOiUsuy
2605R6qZyCyiXG+QN3KjcjZpNvAPWpfTDL4HQHFLLgyBQ0ajrX/Ts9wZQhWPVAKb
pDuDOGy5aAnw5rlAYF5b/ugQAGR325v81tNQ4R5ahzkv8Fx5NKBQU7DDr77tx7Eo
wq+9U0hPSSXg0Z3er8x15TRfZpYxWTErA7nxL2l3AgqzBMagHseuXna7dy+IGCdr
j7jMma2QNaWdHZd5BkUWhqcKTD/+LNIEtde2WrK5Z0U3gjFNDBQb9NYNOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZ2+njy0jhpYBSpUN9K7dFlIMgrMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvUm5iNmVQTFNPR2xnRktsUTMwcnQwV1VneUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTu0MA0G
CSqGSIb3DQEBCwUAA4IBAQBJ7hJTa56Og4e4kvxUrIyzTOGaoPC00VcBgSwAwhbd
nhGfZCyytGdNFCYZP4NDDavD+pvV/lYF1dPENEXKXRL4qtiDbC2hnIT8pHUCA9Rm
j253xV3TacbA5M69nmRS9q4C5ikTrVnKkQ6ySHTFz4uzhHKzW9jCuFtyv4Q9LA5J
YPbC1PTyHDMjXAkct4C9/99U2WsX1srjz+f/IGkEoH0Si/2INitlmdYsqKrJhR34
KCQE/BK530ISzzuMnv+Tk1SYciEDxQUqZGpkVUUei5BP4HSpe7xmCUhVQ5x76eRm
x/9kIc2F83Apsv6QVB/hQexbPtYBP1FEn7HDaHF8HLvp
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:59 2025 by rpki-client