Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/xGSPn7A08_MLHs2zPxiX3bVAQn4.roa
File: xGSPn7A08_MLHs2zPxiX3bVAQn4.roa (raw, json)
Hash identifier: p7ACqVdYlfksmf912Ypcqo8PzhIHOLCv/lotF5K7VWs=
Subject key identifier: C4:64:8F:9F:B0:34:F3:F3:0B:1E:CD:B3:3F:18:97:DD:B5:40:42:7E
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01941F8C99009F065FD8EE19B8E40C04803C
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/xGSPn7A08_MLHs2zPxiX3bVAQn4.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205645
IP address blocks: 5.59.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:00:9f:06:5f:d8:ee:19:b8:e4:0c:04:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4648f9fb034f3f30b1ecdb33f1897ddb540427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:39:15:19:dd:ce:fc:e6:21:27:ac:fe:c7:
8a:a0:0e:e2:da:8b:d1:d3:d7:c6:5c:1d:8c:2d:c7:
c0:66:89:e2:45:4d:41:e0:52:8c:52:25:52:c6:a4:
83:b7:dc:61:bd:c6:55:16:a1:5f:8f:e5:99:57:1b:
6c:6b:3e:08:11:c0:c6:57:66:32:e2:e3:6e:77:f1:
6e:01:63:29:07:7f:87:cd:24:c4:ac:02:af:34:1c:
89:07:0a:f2:28:c3:4c:b3:f0:45:f4:a3:20:0e:c7:
e7:7c:ff:3c:05:68:7a:47:33:11:26:6a:78:52:92:
c8:d3:20:62:40:0f:e3:b2:f9:b1:77:01:82:50:fb:
30:7c:86:de:2f:a0:9f:83:7b:d3:46:ad:b2:50:d0:
b2:4b:d2:b5:62:6c:8a:80:6d:20:63:53:07:66:d9:
0d:fd:e0:a3:a4:04:d7:b8:2b:2a:05:d9:c0:63:5c:
31:0c:ee:c5:84:e8:a7:17:9b:88:3a:52:d1:e0:2d:
5b:6d:b0:48:af:e9:22:c8:e0:61:3a:94:4e:b2:0f:
fd:8d:df:1c:22:94:57:c1:b8:6a:41:3f:c3:ec:67:
6d:83:63:6d:17:a3:b1:de:8c:ca:8a:5c:7e:80:0f:
6d:b0:a0:77:8e:04:58:6d:f0:f4:ed:29:eb:85:12:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:8F:9F:B0:34:F3:F3:0B:1E:CD:B3:3F:18:97:DD:B5:40:42:7E
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/xGSPn7A08_MLHs2zPxiX3bVAQn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:40:17:e9:c1:f7:18:95:13:d1:34:7a:51:26:1f:35:c8:94:
a9:b1:96:70:85:fc:93:ab:3d:0e:f1:22:d2:3a:74:da:5e:42:
b0:d9:e4:c7:81:ec:24:06:ff:dc:f3:e5:79:bd:ed:39:d7:71:
53:af:fc:d5:6b:50:17:54:26:9d:a6:82:2f:3e:1e:03:0c:19:
d7:b8:6d:7a:42:98:83:cb:a2:57:1c:ac:4d:11:7c:75:a6:b6:
73:8b:0e:52:18:33:eb:24:77:db:32:b8:fd:c5:33:28:82:0d:
70:dd:e6:d3:63:6c:56:00:c7:62:b6:dd:2a:c9:a0:49:73:e0:
b2:f1:05:41:e8:43:84:ec:61:55:b2:33:d1:52:99:7a:96:e3:
1a:7a:3a:6b:1d:6f:94:40:2b:1c:1a:61:34:f5:a5:8f:28:c0:
da:ea:e1:2f:30:6e:52:aa:50:c5:2b:59:8e:4a:a1:a8:70:06:
c7:4d:46:8b:2e:d2:8f:6c:a2:c6:85:d0:f7:b6:84:fb:9a:af:
d0:af:8c:c1:b8:4c:82:c8:08:dd:53:bc:59:fe:60:bd:51:05:
7b:44:f8:20:08:12:b3:9e:1b:61:f6:bf:fd:7a:10:b5:87:fe:
52:33:22:76:ab:55:eb:d7:99:79:37:f6:a2:97:4a:f4:ee:4b:
86:49:6a:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJkAnwZf2O4ZuOQMBIA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDY0OGY5ZmIwMzRmM2YzMGIxZWNkYjMzZjE4OTdkZGI1NDA0MjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwns5FRndzvzmISes/seKoA7i2ovR
09fGXB2MLcfAZoniRU1B4FKMUiVSxqSDt9xhvcZVFqFfj+WZVxtsaz4IEcDGV2Yy
4uNud/FuAWMpB3+HzSTErAKvNByJBwryKMNMs/BF9KMgDsfnfP88BWh6RzMRJmp4
UpLI0yBiQA/jsvmxdwGCUPswfIbeL6Cfg3vTRq2yUNCyS9K1YmyKgG0gY1MHZtkN
/eCjpATXuCsqBdnAY1wxDO7FhOinF5uIOlLR4C1bbbBIr+kiyOBhOpROsg/9jd8c
IpRXwbhqQT/D7Gdtg2NtF6Ox3ozKilx+gA9tsKB3jgRYbfD07SnrhRIPWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRkj5+wNPPzCx7Nsz8Yl921QEJ+MB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEveEdTUG43QTA4X01MSHMyelB4aVgzYlZBUW40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBTtEMA0G
CSqGSIb3DQEBCwUAA4IBAQCxQBfpwfcYlRPRNHpRJh81yJSpsZZwhfyTqz0O8SLS
OnTaXkKw2eTHgewkBv/c8+V5ve0513FTr/zVa1AXVCadpoIvPh4DDBnXuG16QpiD
y6JXHKxNEXx1prZziw5SGDPrJHfbMrj9xTMogg1w3ebTY2xWAMditt0qyaBJc+Cy
8QVB6EOE7GFVsjPRUpl6luMaejprHW+UQCscGmE09aWPKMDa6uEvMG5SqlDFK1mO
SqGocAbHTUaLLtKPbKLGhdD3toT7mq/Qr4zBuEyCyAjdU7xZ/mC9UQV7RPggCBKz
nhth9r/9ehC1h/5SMyJ2q1Xr15l5N/ail0r07kuGSWoR
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:35 2025 by rpki-client