Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/kPBy-28puZ8CFn-NDbUpDdz83-A.roa
File: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (raw, json)
Hash identifier: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=
Subject key identifier: 90:F0:72:FB:6F:29:B9:9F:02:16:7F:8D:0D:B5:29:0D:DC:FC:DF:E0
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0194252234B710CF1C53E2AB93CD36C4D1C1
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/kPBy-28puZ8CFn-NDbUpDdz83-A.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210272
IP address blocks: 5.102.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:34:b7:10:cf:1c:53:e2:ab:93:cd:36:c4:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90f072fb6f29b99f02167f8d0db5290ddcfcdfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:69:6d:e3:ea:f1:9d:c9:75:db:d1:34:ed:
93:63:18:57:b4:c1:1f:9c:b9:b8:08:3f:b9:27:e0:
67:93:20:71:a3:78:05:6e:a0:bb:92:8e:17:55:24:
83:e7:e8:51:00:60:4f:1e:8b:5b:b9:f3:bd:06:1e:
dd:f7:ea:8e:e8:9c:08:64:e8:cf:8c:01:c1:66:30:
e3:25:fc:8f:f1:39:e3:26:a5:8f:a5:ad:d6:db:8e:
e6:05:a3:a3:55:4e:ee:e1:88:b0:ea:20:2f:c3:1c:
8b:52:bb:36:5a:c0:e4:19:b6:26:47:16:cc:92:f5:
36:bd:61:7c:94:a4:5d:6e:33:fa:3b:70:9a:7f:c7:
e2:5e:0b:ab:db:0e:66:25:cd:c0:8a:01:91:a6:9f:
28:01:36:61:17:0b:68:a2:45:2c:58:cc:3d:c4:87:
34:c1:82:86:7f:97:da:b8:7d:98:5b:ef:5a:f1:d2:
4e:1b:d4:42:d5:3e:2a:2a:4d:52:c0:73:83:7e:c5:
f3:0d:01:92:cd:d4:37:cb:cf:6f:df:75:0e:f9:dd:
df:d6:90:cc:38:91:45:dc:96:f2:fe:72:d6:21:8e:
16:67:42:a9:66:3a:ab:4e:8f:5d:ca:5e:5c:7b:de:
73:be:6a:52:e7:b5:75:9f:d3:67:12:08:44:63:74:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:72:FB:6F:29:B9:9F:02:16:7F:8D:0D:B5:29:0D:DC:FC:DF:E0
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/kPBy-28puZ8CFn-NDbUpDdz83-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.45.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c5:8b:30:48:0b:40:81:72:1e:cf:82:e8:d3:62:66:28:9e:
fc:c4:ea:9b:88:6c:04:a5:a8:fe:e4:17:d4:9c:e1:79:a6:3b:
9d:3f:97:a3:0c:3f:4a:5c:ec:d3:d4:59:50:a0:84:6f:2d:9f:
71:10:20:6c:b6:4f:8d:f0:de:c9:52:aa:ad:03:82:0b:8e:b9:
56:2e:b6:e7:53:e4:56:14:d9:1b:47:f8:bc:3a:a7:b1:95:54:
10:7d:87:91:f3:90:6d:ca:3d:ac:98:a5:4d:fc:1d:e5:b0:a5:
dd:4d:5f:5a:b5:31:73:ac:53:b3:db:cf:b1:59:38:a3:b9:0c:
d9:8f:0b:14:2c:8f:5c:7c:2d:57:2a:14:d4:cf:77:67:10:3b:
9a:2c:6c:6c:df:59:5d:38:40:0e:e8:3e:97:af:71:a1:ac:8a:
92:23:83:ea:85:08:0e:25:80:4f:cc:b9:0f:c3:35:89:f1:c4:
76:79:0a:cd:d0:6a:f3:8f:00:55:4b:9b:7c:0e:a7:a5:7a:b2:
35:db:a8:81:03:d3:b2:a3:2d:1b:90:02:0f:e1:84:c4:26:39:
f4:cb:71:08:6b:2e:16:49:23:19:58:06:6d:ff:45:78:d9:0f:
95:a6:68:de:13:1a:e5:cb:1a:58:b9:45:d7:ff:11:a1:a6:89:
ed:6d:65:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIjS3EM8cU+Krk802xNHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2
OTRmZGEwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGYwNzJmYjZmMjliOTlmMDIxNjdmOGQwZGI1MjkwZGRjZmNkZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zBpbePq8Z3JddvRNO2TYxhXtMEf
nLm4CD+5J+BnkyBxo3gFbqC7ko4XVSSD5+hRAGBPHotbufO9Bh7d9+qO6JwIZOjP
jAHBZjDjJfyP8TnjJqWPpa3W247mBaOjVU7u4Yiw6iAvwxyLUrs2WsDkGbYmRxbM
kvU2vWF8lKRdbjP6O3Caf8fiXgur2w5mJc3AigGRpp8oATZhFwtookUsWMw9xIc0
wYKGf5fauH2YW+9a8dJOG9RC1T4qKk1SwHODfsXzDQGSzdQ3y89v33UO+d3f1pDM
OJFF3Jby/nLWIY4WZ0KpZjqrTo9dyl5ce95zvmpS57V1n9NnEghEY3Q1bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDwcvtvKbmfAhZ/jQ21KQ3c/N/gMB8GA1UdIwQY
MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt
ZjM1MzczZGE3ZGViLzEva1BCeS0yOHB1WjhDRm4tTkRiVXBEZHo4My1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi
LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYtMA0G
CSqGSIb3DQEBCwUAA4IBAQAixYswSAtAgXIez4Lo02JmKJ78xOqbiGwEpaj+5BfU
nOF5pjudP5ejDD9KXOzT1FlQoIRvLZ9xECBstk+N8N7JUqqtA4ILjrlWLrbnU+RW
FNkbR/i8OqexlVQQfYeR85Btyj2smKVN/B3lsKXdTV9atTFzrFOz28+xWTijuQzZ
jwsULI9cfC1XKhTUz3dnEDuaLGxs31ldOEAO6D6Xr3GhrIqSI4PqhQgOJYBPzLkP
wzWJ8cR2eQrN0GrzjwBVS5t8DqelerI126iBA9Oyoy0bkAIP4YTEJjn0y3EIay4W
SSMZWAZt/0V42Q+VpmjeExrlyxpYuUXX/xGhpontbWXa
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:53 2025 by rpki-client