Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/w4HlqPi1OFmgM8LH-X3G7-isDzc.roa
File: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (raw, json)
Hash identifier: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=
Subject key identifier: C3:81:E5:A8:F8:B5:38:59:A0:33:C2:C7:F9:7D:C6:EF:E8:AC:0F:37
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0194206804AC5C5D53EF03FDA0F33EF214CD
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/w4HlqPi1OFmgM8LH-X3G7-isDzc.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2635
IP address blocks: 5.100.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:04:ac:5c:5d:53:ef:03:fd:a0:f3:3e:f2:14:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c381e5a8f8b53859a033c2c7f97dc6efe8ac0f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:d7:86:53:b6:56:a0:52:8d:d6:e1:89:ed:
18:84:95:cf:71:69:b0:cd:76:8f:26:30:9f:73:c3:
84:37:a4:2c:2b:4e:db:5e:bd:4c:de:2e:0c:64:16:
c4:2c:fd:df:0c:72:94:dd:d9:46:a6:fc:ca:6f:7b:
cf:31:22:37:14:59:39:ed:ea:25:94:8f:a9:1e:96:
ca:af:2b:8b:d5:6a:5c:7c:87:c4:06:10:2d:05:c7:
97:fd:58:52:a1:62:76:ae:02:2c:54:a1:67:50:da:
b5:4b:bb:df:db:eb:ad:15:1b:ff:7a:4e:b4:73:0a:
07:0d:be:79:0d:fe:83:96:84:b3:71:e3:f3:30:35:
bf:af:e8:24:56:47:63:73:ee:ec:ed:d4:84:e6:08:
c6:d9:bb:28:40:0e:f4:a7:af:03:8e:ad:1d:85:f5:
2b:5d:8f:9c:83:3a:02:17:f8:53:c5:9e:08:eb:50:
b9:b1:ec:cb:1b:09:20:0e:fb:44:03:78:b0:f1:1c:
18:44:3d:92:0f:b0:3d:e2:ff:a1:42:0b:c8:38:5e:
bf:b7:0b:e3:cc:4c:c7:d6:93:7a:f9:87:c8:52:58:
cf:f0:ff:0b:ee:fa:a4:ca:71:8b:b4:7b:ee:3b:f3:
d3:6d:b4:94:e0:c9:1e:af:67:1c:ec:03:2d:cc:38:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:E5:A8:F8:B5:38:59:A0:33:C2:C7:F9:7D:C6:EF:E8:AC:0F:37
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/w4HlqPi1OFmgM8LH-X3G7-isDzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:63:1c:58:33:39:02:e7:50:1c:55:3e:77:ad:be:ec:b0:2f:
bc:76:f5:63:c6:68:4c:95:6b:74:ac:c3:22:d9:f3:f9:24:af:
ca:98:a3:2c:f4:be:37:1c:05:53:f8:1d:48:a8:fc:b9:ac:ca:
13:fd:b1:42:86:94:d0:77:9c:69:c7:fa:b4:99:c4:4e:ab:3b:
a0:94:69:05:4d:52:67:4d:6a:e0:f7:6e:6a:b6:45:08:ee:df:
6d:c1:07:49:18:b8:14:0b:df:68:f0:e2:d2:64:18:51:98:46:
9e:4e:cb:99:ce:7f:09:0d:ee:69:a1:9e:30:8e:8c:7a:c4:ef:
d5:2c:08:90:56:72:bd:e4:6a:8e:47:61:96:1d:ac:03:da:49:
fa:d9:80:26:dd:3e:cf:3d:d4:79:7b:87:4d:b6:05:72:2b:7a:
b0:4e:76:60:41:e1:31:8c:d8:ff:6d:a3:ae:5a:b4:b8:34:e2:
0c:33:05:0a:e8:13:10:45:62:18:48:c0:21:c9:d8:20:11:28:
54:4f:2b:07:cd:d9:ce:a7:7f:49:32:05:99:d0:98:8c:1f:2b:
89:7c:41:87:8b:ce:91:08:6b:dd:f1:3b:9c:56:ff:4f:f3:97:
64:64:72:c3:d6:56:b4:50:04:d1:ee:ec:7f:a6:ee:02:a5:d2:
a8:c7:39:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaASsXF1T7wP9oPM+8hTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm
MGU4OWUwHhcNMjUwMTAxMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzgxZTVhOGY4YjUzODU5YTAzM2MyYzdmOTdkYzZlZmU4YWMwZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzXhlO2VqBSjdbhie0YhJXPcWmw
zXaPJjCfc8OEN6QsK07bXr1M3i4MZBbELP3fDHKU3dlGpvzKb3vPMSI3FFk57eol
lI+pHpbKryuL1WpcfIfEBhAtBceX/VhSoWJ2rgIsVKFnUNq1S7vf2+utFRv/ek60
cwoHDb55Df6DloSzcePzMDW/r+gkVkdjc+7s7dSE5gjG2bsoQA70p68Djq0dhfUr
XY+cgzoCF/hTxZ4I61C5sezLGwkgDvtEA3iw8RwYRD2SD7A94v+hQgvIOF6/twvj
zEzH1pN6+YfIUljP8P8L7vqkynGLtHvuO/PTbbSU4Mker2cc7AMtzDiX6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOB5aj4tThZoDPCx/l9xu/orA83MB8GA1UdIwQY
MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt
ZmRhNGU4YTViNDZlLzEvdzRIbHFQaTFPRm1nTThMSC1YM0c3LWlzRHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl
LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWScMA0G
CSqGSIb3DQEBCwUAA4IBAQCiYxxYMzkC51AcVT53rb7ssC+8dvVjxmhMlWt0rMMi
2fP5JK/KmKMs9L43HAVT+B1IqPy5rMoT/bFChpTQd5xpx/q0mcROqzuglGkFTVJn
TWrg925qtkUI7t9twQdJGLgUC99o8OLSZBhRmEaeTsuZzn8JDe5poZ4wjox6xO/V
LAiQVnK95GqOR2GWHawD2kn62YAm3T7PPdR5e4dNtgVyK3qwTnZgQeExjNj/baOu
WrS4NOIMMwUK6BMQRWIYSMAhydggEShUTysHzdnOp39JMgWZ0JiMHyuJfEGHi86R
CGvd8TucVv9P85dkZHLD1la0UATR7ux/pu4CpdKoxzmf
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:26 2025 by rpki-client