Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa
File: UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa (raw, json)
Hash identifier: rgWrNq7qmzpWB8PQIHq/XPPdpuoL1N7tYUChf7PYf28=
Subject key identifier: 52:37:51:83:EE:18:16:3A:31:97:F8:3C:61:79:66:BD:06:C3:23:C0
Certificate issuer: /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial: 01941F8C32D77026830161941CF4C3CEE9A9
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.252.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:32:d7:70:26:83:01:61:94:1c:f4:c3:ce:e9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52375183ee18163a3197f83c617966bd06c323c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:e8:0b:ec:3b:30:28:6f:c2:ad:7e:af:7c:
32:45:c1:f5:e5:b3:35:57:b5:a1:36:a8:5b:04:80:
c2:50:53:90:56:59:4e:e4:64:2c:aa:c5:44:6c:c4:
a8:e7:fe:59:fc:c9:09:2e:0c:40:aa:fd:55:42:45:
4e:7a:d0:6b:e8:61:ee:97:b1:e2:05:30:8c:a1:46:
e4:91:b5:4a:13:3d:77:f3:da:ee:7e:9d:62:e5:e9:
3c:d2:57:af:d9:fa:91:c4:7d:92:76:25:77:a2:8d:
8f:8f:3e:a7:88:75:68:ae:60:b6:1c:00:0f:89:cf:
09:8d:7d:9c:f9:72:e8:f6:ca:ec:22:c4:2a:8e:3b:
cc:e0:3a:38:dd:1b:3b:75:da:31:91:bb:08:a3:87:
62:89:ff:c2:53:6e:ca:b4:31:ea:a6:f0:90:00:40:
39:9c:3e:b9:a2:8b:5a:89:33:22:22:b7:44:5f:e0:
f1:0a:1d:55:f4:30:58:43:ee:21:cb:b2:09:c5:04:
34:5b:4b:b4:5f:1a:83:46:db:4d:8b:3e:78:96:3c:
e4:a9:cf:2f:c0:68:77:91:d3:1c:a9:90:29:2f:61:
66:50:24:9b:be:8d:0d:05:a1:2f:b7:af:a9:b2:85:
1d:1d:b0:5c:71:33:e4:37:29:be:1a:44:16:66:c9:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:37:51:83:EE:18:16:3A:31:97:F8:3C:61:79:66:BD:06:C3:23:C0
X509v3 Authority Key Identifier:
keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.136.0/22
Signature Algorithm: sha256WithRSAEncryption
60:56:e3:f2:ba:fd:b2:85:fa:9a:92:cd:e6:f0:30:ac:1e:fb:
85:02:1b:fa:58:55:e5:69:de:ac:07:42:10:6d:8a:e2:52:d0:
3a:b7:d2:20:87:1c:47:9c:f1:5a:4b:77:33:cb:2b:93:7e:fc:
9e:d1:24:57:de:7d:35:62:09:34:da:96:bc:c1:4c:80:d5:4e:
70:b1:e1:2e:9d:b6:24:ca:7c:20:5c:63:fc:85:73:78:46:6f:
b9:f0:8e:f5:6c:d4:34:50:97:84:a6:00:77:76:06:f9:c7:f3:
1e:9c:83:68:4c:c0:24:fc:bc:8a:37:e3:b2:58:1e:4b:5f:ed:
f9:0a:9a:a5:ad:49:32:f8:4d:0f:c2:0f:68:84:0e:c8:58:23:
64:69:37:11:b6:1f:3f:b3:84:43:cb:89:7c:59:1a:d1:e4:e7:
4f:6b:77:97:cc:d0:6f:bd:83:b5:d7:89:18:e1:95:42:05:7a:
5e:5d:d3:c0:3b:eb:13:e3:54:ef:48:51:84:3f:c1:76:29:32:
7a:5a:09:e3:d9:e8:40:4b:87:38:41:b5:62:45:f2:78:03:d0:
2b:de:35:2c:08:a1:29:09:d5:a8:30:ce:00:d1:8b:56:80:98:
1f:b4:b7:f5:3f:d5:87:56:5d:65:25:be:4c:00:12:23:22:e9:
58:66:3e:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDLXcCaDAWGUHPTDzumpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjUxODBmOWI5M2FlNzU3M2MwOGE4OTRiZDQ1MmJkNzdj
ZTU2Y2QwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjM3NTE4M2VlMTgxNjNhMzE5N2Y4M2M2MTc5NjZiZDA2YzMyM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprzoC+w7MChvwq1+r3wyRcH15bM1
V7WhNqhbBIDCUFOQVllO5GQsqsVEbMSo5/5Z/MkJLgxAqv1VQkVOetBr6GHul7Hi
BTCMoUbkkbVKEz1389rufp1i5ek80lev2fqRxH2SdiV3oo2Pjz6niHVormC2HAAP
ic8JjX2c+XLo9srsIsQqjjvM4Do43Rs7ddoxkbsIo4diif/CU27KtDHqpvCQAEA5
nD65ootaiTMiIrdEX+DxCh1V9DBYQ+4hy7IJxQQ0W0u0XxqDRttNiz54ljzkqc8v
wGh3kdMcqZApL2FmUCSbvo0NBaEvt6+psoUdHbBccTPkNym+GkQWZsnOdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFI3UYPuGBY6MZf4PGF5Zr0GwyPAMB8GA1UdIwQY
MBaAFCf1GA+bk651c8CKiUvUUr13zlbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMt
MzBmZWUyN2U4NGNiLzEvVWpkUmctNFlGam94bF9nOFlYbG12UWJESThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMtMzBmZWUyN2U4NGNi
LzEvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfyIMA0G
CSqGSIb3DQEBCwUAA4IBAQBgVuPyuv2yhfqaks3m8DCsHvuFAhv6WFXlad6sB0IQ
bYriUtA6t9IghxxHnPFaS3czyyuTfvye0SRX3n01Ygk02pa8wUyA1U5wseEunbYk
ynwgXGP8hXN4Rm+58I71bNQ0UJeEpgB3dgb5x/MenINoTMAk/LyKN+OyWB5LX+35
CpqlrUky+E0Pwg9ohA7IWCNkaTcRth8/s4RDy4l8WRrR5OdPa3eXzNBvvYO114kY
4ZVCBXpeXdPAO+sT41TvSFGEP8F2KTJ6Wgnj2ehAS4c4QbViRfJ4A9Ar3jUsCKEp
CdWoMM4A0YtWgJgftLf1P9WHVl1lJb5MABIjIulYZj4l
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:34 2025 by rpki-client