Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/vs4P1-6sjJ-T_pH4qIhOr9voZS4.roa
File: vs4P1-6sjJ-T_pH4qIhOr9voZS4.roa (raw, json)
Hash identifier: hNaBtTpbSvXunK483ow2mcFg4CJwrKh2ZYFQATxJ7oc=
Subject key identifier: BE:CE:0F:D7:EE:AC:8C:9F:93:FE:91:F8:A8:88:4E:AF:DB:E8:65:2E
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 019424B3F42079C4EAE0D1B98C1AE73C9F4C
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/vs4P1-6sjJ-T_pH4qIhOr9voZS4.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44725
IP address blocks: 5.250.192.0/19 maxlen: 19
37.114.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f4:20:79:c4:ea:e0:d1:b9:8c:1a:e7:3c:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bece0fd7eeac8c9f93fe91f8a8884eafdbe8652e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:b8:f7:93:0d:0b:87:5d:79:45:9e:4a:a7:
f4:c6:10:b9:84:53:1b:80:06:bb:54:74:e3:ff:a4:
83:df:b8:b7:b4:e6:5c:14:da:74:62:c3:53:68:9b:
12:cc:c6:2d:f6:58:87:f7:aa:c9:a2:3b:14:43:bd:
0d:f8:7d:af:6c:cd:27:ea:1f:be:62:f6:39:7a:de:
a3:4f:77:5c:9e:4f:0c:ed:c3:f9:f9:1b:30:0f:19:
ea:6d:43:bb:1f:6a:a2:e7:54:d7:7d:be:ff:d1:3a:
6b:a0:5e:47:e5:94:ba:cf:f5:04:07:52:a8:1f:14:
88:d5:c3:93:f5:79:c7:26:48:74:27:c8:4a:dd:ed:
12:96:18:21:71:08:f5:0f:a7:10:3a:ed:ec:ae:e8:
f2:8e:b7:02:05:53:17:f5:a4:5c:2c:d8:41:36:24:
d5:97:98:38:d1:e1:44:bd:72:3e:6a:ae:07:e7:c1:
f6:83:f2:c9:24:57:8a:a9:e6:a8:fb:3f:b6:a2:cf:
c4:0f:4b:e5:48:c0:9c:a0:72:f9:7e:5a:e2:71:3a:
94:0c:2e:be:de:29:00:63:16:cf:01:a9:34:3a:06:
e4:ba:d3:7d:ca:5e:48:c9:e2:89:4e:53:86:96:7f:
45:31:6d:d1:37:9e:c6:ac:50:69:e6:d8:b2:ee:65:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:0F:D7:EE:AC:8C:9F:93:FE:91:F8:A8:88:4E:AF:DB:E8:65:2E
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/vs4P1-6sjJ-T_pH4qIhOr9voZS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.192.0/19
37.114.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:ab:e7:ef:8c:1c:7d:01:87:61:6c:68:5f:9d:87:7c:77:d7:
d8:33:75:75:be:e3:ca:58:ad:ab:c2:8f:5c:8b:5d:1c:d7:75:
31:ef:27:7d:eb:bd:0b:f8:fd:80:d1:7c:8f:8f:e6:d6:5e:c1:
03:fd:14:63:57:fe:08:3e:0d:d3:4e:32:97:da:58:aa:89:3a:
40:9a:02:1d:ce:84:23:26:aa:4d:51:c0:24:e1:a3:80:9f:41:
0d:ab:25:ca:16:41:79:4f:8f:1e:83:f0:21:80:27:8f:75:74:
1b:df:67:41:02:c7:62:f1:8f:d3:f3:dd:34:e3:f1:4c:66:56:
b6:10:39:7d:20:94:82:ba:92:06:2a:85:10:9f:a8:8d:fb:53:
e8:92:67:b0:28:c2:ff:a2:ec:7f:73:28:e9:30:e9:5d:d9:e9:
eb:3d:70:6a:00:c4:d0:be:ac:2d:ed:c5:3b:db:a5:2d:3c:6a:
1b:54:71:53:7f:fd:d7:d0:52:d9:c6:b8:8b:49:76:e9:b7:9f:
9f:f1:3a:e2:d2:6f:31:1c:e7:87:e6:b0:cb:09:86:2c:8e:a0:
e2:13:e4:dc:4b:27:d3:52:a1:99:e2:2f:f9:da:0f:cd:9f:0f:
ac:11:35:63:99:d2:b6:b3:98:19:02:cd:2d:35:47:16:82:6a:
5e:34:cc:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQks/QgecTq4NG5jBrnPJ9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjUwMTAyMDE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWNlMGZkN2VlYWM4YzlmOTNmZTkxZjhhODg4NGVhZmRiZTg2NTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKu495MNC4ddeUWeSqf0xhC5hFMb
gAa7VHTj/6SD37i3tOZcFNp0YsNTaJsSzMYt9liH96rJojsUQ70N+H2vbM0n6h++
YvY5et6jT3dcnk8M7cP5+RswDxnqbUO7H2qi51TXfb7/0TproF5H5ZS6z/UEB1Ko
HxSI1cOT9XnHJkh0J8hK3e0SlhghcQj1D6cQOu3srujyjrcCBVMX9aRcLNhBNiTV
l5g40eFEvXI+aq4H58H2g/LJJFeKqeao+z+2os/ED0vlSMCcoHL5flricTqUDC6+
3ikAYxbPAak0OgbkutN9yl5IyeKJTlOGln9FMW3RN57GrFBp5tiy7mXMIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL7OD9furIyfk/6R+KiITq/b6GUuMB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvdnM0UDEtNnNqSi1UX3BINHFJaE9yOXZvWlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFBfrAAwQF
JXKAMA0GCSqGSIb3DQEBCwUAA4IBAQBsq+fvjBx9AYdhbGhfnYd8d9fYM3V1vuPK
WK2rwo9ci10c13Ux7yd9670L+P2A0XyPj+bWXsED/RRjV/4IPg3TTjKX2liqiTpA
mgIdzoQjJqpNUcAk4aOAn0ENqyXKFkF5T48eg/AhgCePdXQb32dBAsdi8Y/T8900
4/FMZla2EDl9IJSCupIGKoUQn6iN+1PokmewKML/oux/cyjpMOld2enrPXBqAMTQ
vqwt7cU726UtPGobVHFTf/3X0FLZxriLSXbpt5+f8Tri0m8xHOeH5rDLCYYsjqDi
E+TcSyfTUqGZ4i/52g/Nnw+sETVjmdK2s5gZAs0tNUcWgmpeNMyr
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:58 2025 by rpki-client