Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/5Iq99HGOQym0RGozEyZTnwgi5-c.roa
File: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (raw, json)
Hash identifier: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=
Subject key identifier: E4:8A:BD:F4:71:8E:43:29:B4:44:6A:33:13:26:53:9F:08:22:E7:E7
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 0194258F9992CD29EAF4DFE7EB8766BEED22
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/5Iq99HGOQym0RGozEyZTnwgi5-c.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8637
IP address blocks: 5.180.228.0/22 maxlen: 24
5.180.228.0/24 maxlen: 24
5.180.229.0/24 maxlen: 24
2a0b:c800:1::/48 maxlen: 48
2a0b:c800:2::/48 maxlen: 48
2a0b:c800:3::/48 maxlen: 48
2a0b:c800:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:99:92:cd:29:ea:f4:df:e7:eb:87:66:be:ed:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e48abdf4718e4329b4446a331326539f0822e7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:b2:5d:c9:38:14:06:b3:cd:53:75:d2:8a:
9a:db:38:4a:7b:c2:8e:cc:9e:d8:bb:0c:59:2b:2b:
0e:8e:b4:0b:da:dc:6c:ac:db:62:18:b9:ad:07:8c:
e5:da:3d:b6:a0:33:55:5c:a5:fb:9b:7b:77:25:ea:
36:33:11:37:d1:76:26:31:b7:25:a5:0a:d8:d8:6d:
38:16:e3:28:da:88:68:80:fa:a7:19:43:ad:23:12:
c6:d9:ca:8b:54:16:f7:a2:ce:35:19:10:f5:db:41:
16:1a:57:04:57:34:55:87:f9:43:b3:55:e9:ce:8b:
59:ea:62:1a:22:79:4c:a1:2d:bf:96:60:31:f9:d2:
c3:b1:bd:1c:b3:99:37:d7:52:65:ab:f6:0a:a6:64:
40:e1:0d:44:53:00:0a:16:bb:af:e8:85:4e:48:74:
a1:6c:b8:9b:eb:13:53:d3:fa:5b:a0:84:5d:55:a4:
6d:b8:18:35:63:af:56:f3:12:07:f5:27:72:ef:42:
cd:ac:92:bb:e4:53:44:57:73:fa:96:65:68:11:0a:
9b:f4:0c:36:60:07:97:29:a9:50:5a:2d:be:91:73:
cb:a9:2b:9e:65:17:9e:60:48:72:a5:c2:a1:81:bd:
f0:61:54:46:d8:1f:21:41:79:ce:09:75:4f:dc:a4:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8A:BD:F4:71:8E:43:29:B4:44:6A:33:13:26:53:9F:08:22:E7:E7
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/5Iq99HGOQym0RGozEyZTnwgi5-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.228.0/22
IPv6:
2a0b:c800:1::-2a0b:c800:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:27:8a:fb:b5:90:2b:6e:e7:d1:63:49:24:e1:57:67:9e:3d:
81:43:0d:95:56:8d:0c:32:54:0e:13:b9:27:b1:35:6b:76:8c:
a0:34:e2:3f:eb:59:41:b4:35:9b:6d:66:c3:52:f2:15:1b:a1:
09:6f:20:fa:52:21:4a:ce:e6:cb:ba:75:4e:4c:0c:ef:aa:fa:
e8:da:5e:45:d8:63:46:af:10:e9:be:8a:92:d0:20:a1:51:44:
e9:76:92:29:25:83:22:81:ff:c4:20:7c:67:fa:85:e6:96:13:
4d:c6:7f:79:a7:45:48:22:9e:96:d4:f6:c7:54:05:23:2e:eb:
a2:08:ec:d9:59:a4:5f:e5:09:74:e1:05:2e:f7:e1:96:55:24:
a7:f4:35:b4:28:98:46:da:ab:5c:c2:08:62:80:96:b5:72:e3:
a1:27:e7:6b:33:98:28:86:84:d0:ac:0e:d1:99:2c:cd:dd:f9:
dc:f9:c5:a2:b3:b1:57:3c:7e:6f:89:0c:a1:2c:b7:af:96:7f:
33:ba:1b:60:bb:95:f6:8c:f8:00:8b:2d:fa:e0:f2:9e:fd:a9:
cc:51:93:92:5e:9c:82:04:f9:98:76:75:f1:8a:81:1c:ee:41:
ed:24:8f:bb:8b:f7:aa:96:64:65:e3:11:38:ab:23:1c:69:bf:
29:93:fc:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQlj5mSzSnq9N/n64dmvu0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2EzYzBiMTk2ZmRlMGJhNzRjMTQ4N2JkY2I5YzVmYTA1
MzY2NGIwHhcNMjUwMTAyMDU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDhhYmRmNDcxOGU0MzI5YjQ0NDZhMzMxMzI2NTM5ZjA4MjJlN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssOyXck4FAazzVN10oqa2zhKe8KO
zJ7YuwxZKysOjrQL2txsrNtiGLmtB4zl2j22oDNVXKX7m3t3Jeo2MxE30XYmMbcl
pQrY2G04FuMo2ohogPqnGUOtIxLG2cqLVBb3os41GRD120EWGlcEVzRVh/lDs1Xp
zotZ6mIaInlMoS2/lmAx+dLDsb0cs5k311Jlq/YKpmRA4Q1EUwAKFruv6IVOSHSh
bLib6xNT0/pboIRdVaRtuBg1Y69W8xIH9Sdy70LNrJK75FNEV3P6lmVoEQqb9Aw2
YAeXKalQWi2+kXPLqSueZReeYEhypcKhgb3wYVRG2B8hQXnOCXVP3KTw9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOSKvfRxjkMptERqMxMmU58IIufnMB8GA1UdIwQY
MBaAFNDKPAsZb94Lp0wUh73LnF+gU2ZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2Et
NmI2MzMzMWVmZjAyLzEvNUlxOTlIR09ReW0wUkdvekV5WlRud2dpNS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84MTAyNGYtNTE3MS00N2M0LWI1Y2EtNmI2MzMzMWVmZjAy
LzEvME1vOEN4bHYzZ3VuVEJTSHZjdWNYNkJUWmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCBbTkMBoE
AgACMBQwEgMHACoLyAAAAQMHACoLyAAABDANBgkqhkiG9w0BAQsFAAOCAQEAVCeK
+7WQK27n0WNJJOFXZ549gUMNlVaNDDJUDhO5J7E1a3aMoDTiP+tZQbQ1m21mw1Ly
FRuhCW8g+lIhSs7my7p1TkwM76r66NpeRdhjRq8Q6b6KktAgoVFE6XaSKSWDIoH/
xCB8Z/qF5pYTTcZ/eadFSCKeltT2x1QFIy7rogjs2VmkX+UJdOEFLvfhllUkp/Q1
tCiYRtqrXMIIYoCWtXLjoSfnazOYKIaE0KwO0Zkszd353PnForOxVzx+b4kMoSy3
r5Z/M7obYLuV9oz4AIst+uDynv2pzFGTkl6cggT5mHZ18YqBHO5B7SSPu4v3qpZk
ZeMROKsjHGm/KZP8Nw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:13 2025 by rpki-client