Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e0cf71-30b2-461c-b584-f079f4262365/1/5CHVRmBSHz0Y11YKZ6zQ4zQlm5Y.roa
File: 5CHVRmBSHz0Y11YKZ6zQ4zQlm5Y.roa (raw, json)
Hash identifier: 0COiCJWNFmk26bfVmfLLJNfpSbHT2/m/N2QBU03shRY=
Subject key identifier: E4:21:D5:46:60:52:1F:3D:18:D7:56:0A:67:AC:D0:E3:34:25:9B:96
Certificate issuer: /CN=8fdf335a6e72690d783376f78f7a1dba90e8d6be
Certificate serial: 015DDD75
Authority key identifier: 8F:DF:33:5A:6E:72:69:0D:78:33:76:F7:8F:7A:1D:BA:90:E8:D6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j98zWm5yaQ14M3b3j3odupDo1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e0cf71-30b2-461c-b584-f079f4262365/1/5CHVRmBSHz0Y11YKZ6zQ4zQlm5Y.roa
Signing time: Sat 01 Jan 2022 11:55:44 +0000
ROA not before: Sat 01 Jan 2022 11:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48011
IP address blocks: 5.172.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22928757 (0x15ddd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf335a6e72690d783376f78f7a1dba90e8d6be
Validity
Not Before: Jan 1 11:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e421d54660521f3d18d7560a67acd0e334259b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:c6:24:7c:ed:80:2b:85:63:ae:88:80:e7:
bd:17:e4:ef:74:3d:59:66:c3:4c:9a:fd:8e:a6:48:
17:79:3f:84:09:3f:c6:0d:d4:01:ac:af:e8:6f:84:
5c:d3:bd:47:60:83:bb:16:74:da:d8:60:c9:0e:7c:
13:8d:4b:0e:cf:8f:70:92:80:27:2d:57:7a:41:d3:
25:14:73:f2:00:a3:24:aa:3d:f5:c2:5f:fd:62:84:
c2:db:bc:10:c8:c4:81:03:32:de:f2:e3:20:b6:cd:
03:67:9d:f7:6b:52:ed:54:91:39:be:5c:fd:cc:56:
31:2d:6b:fa:ec:d0:12:93:39:af:79:16:cd:5b:01:
e6:89:d1:db:db:50:0f:80:0f:a7:f7:b4:0d:e3:cd:
05:8e:46:d9:2f:67:c4:b4:39:64:b0:78:33:e4:4f:
dc:46:d6:97:1d:64:0e:d3:2e:36:14:5c:ee:9a:25:
ba:19:b9:4c:42:47:80:85:cc:0d:2b:55:03:40:1b:
fb:b5:5e:e6:b0:98:1a:2e:00:53:31:28:64:04:3f:
f0:15:01:8b:89:4f:b3:6d:57:d1:64:11:23:a3:20:
8f:be:73:32:65:91:fd:20:74:bd:b8:7f:f6:49:1b:
4f:a4:4f:84:e0:28:69:a4:1b:2b:be:a4:a4:ff:f8:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:D5:46:60:52:1F:3D:18:D7:56:0A:67:AC:D0:E3:34:25:9B:96
X509v3 Authority Key Identifier:
keyid:8F:DF:33:5A:6E:72:69:0D:78:33:76:F7:8F:7A:1D:BA:90:E8:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j98zWm5yaQ14M3b3j3odupDo1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e0cf71-30b2-461c-b584-f079f4262365/1/5CHVRmBSHz0Y11YKZ6zQ4zQlm5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e0cf71-30b2-461c-b584-f079f4262365/1/j98zWm5yaQ14M3b3j3odupDo1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:cf:1b:21:f5:af:9f:5e:c2:eb:ae:c1:ab:79:f9:ca:c5:88:
1d:ac:cb:d2:ed:fb:32:1e:6b:3a:de:13:34:7a:81:74:bd:e3:
e6:0e:80:fc:85:08:0d:4c:58:16:ed:49:22:82:1e:3f:21:e6:
10:5c:f7:c8:1c:13:da:c3:e6:92:bc:4c:b3:1d:86:59:33:2b:
78:24:2e:27:23:8d:ef:6b:d0:b5:22:b6:13:fe:d5:c6:6d:36:
03:6b:7b:2f:21:92:90:0d:70:6e:34:5f:f7:37:4e:49:e7:19:
3b:95:ef:62:ee:f9:01:dd:d1:67:34:78:84:4f:7e:c9:51:5d:
a7:35:4f:6f:b9:5f:6c:8b:eb:1a:08:f1:f4:c1:cb:80:fd:00:
be:7e:44:9f:6d:29:58:5b:e5:b5:93:50:9e:ff:3a:ab:21:fa:
0f:9a:c9:82:27:65:63:03:4b:c1:26:c2:32:18:de:a4:e3:77:
1e:55:57:62:1e:97:6a:8f:9e:67:5a:5a:6c:da:95:35:5b:8f:
28:8d:94:6e:85:0e:dc:14:9c:0f:ee:4d:ef:ed:0c:ed:f7:e5:
00:a5:31:e5:48:2a:c2:27:58:7b:ed:33:0a:0a:c3:1e:36:14:
17:54:f3:d8:ee:d3:93:27:a8:b8:be:b5:81:10:f3:bc:92:cc:
42:69:30:86
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAV3ddTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZmRmMzM1YTZlNzI2OTBkNzgzMzc2Zjc4ZjdhMWRiYTkwZThkNmJlMB4XDTIyMDEw
MTExNTU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTQyMWQ1NDY2MDUy
MWYzZDE4ZDc1NjBhNjdhY2QwZTMzNDI1OWI5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONuxiR87YArhWOuiIDnvRfk73Q9WWbDTJr9jqZIF3k/hAk/
xg3UAayv6G+EXNO9R2CDuxZ02thgyQ58E41LDs+PcJKAJy1XekHTJRRz8gCjJKo9
9cJf/WKEwtu8EMjEgQMy3vLjILbNA2ed92tS7VSROb5c/cxWMS1r+uzQEpM5r3kW
zVsB5onR29tQD4APp/e0DePNBY5G2S9nxLQ5ZLB4M+RP3EbWlx1kDtMuNhRc7pol
uhm5TEJHgIXMDStVA0Ab+7Ve5rCYGi4AUzEoZAQ/8BUBi4lPs21X0WQRI6Mgj75z
MmWR/SB0vbh/9kkbT6RPhOAoaaQbK76kpP/4Ni8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTkIdVGYFIfPRjXVgpnrNDjNCWbljAfBgNVHSMEGDAWgBSP3zNabnJpDXgz
dvePeh26kOjWvjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2o5OHpXbTV5YVExNE0zYjNqM29kdXBEbzFyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGIvZTBjZjcxLTMwYjItNDYxYy1iNTg0LWYwNzlmNDI2MjM2NS8x
LzVDSFZSbUJTSHowWTExWUtaNnpRNHpRbG01WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIv
ZTBjZjcxLTMwYjItNDYxYy1iNTg0LWYwNzlmNDI2MjM2NS8xL2o5OHpXbTV5YVEx
NE0zYjNqM29kdXBEbzFyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAWssTANBgkqhkiG9w0BAQsFAAOC
AQEAjs8bIfWvn17C667Bq3n5ysWIHazL0u37Mh5rOt4TNHqBdL3j5g6A/IUIDUxY
Fu1JIoIePyHmEFz3yBwT2sPmkrxMsx2GWTMreCQuJyON72vQtSK2E/7Vxm02A2t7
LyGSkA1wbjRf9zdOSecZO5XvYu75Ad3RZzR4hE9+yVFdpzVPb7lfbIvrGgjx9MHL
gP0Avn5En20pWFvltZNQnv86qyH6D5rJgidlYwNLwSbCMhjepON3HlVXYh6Xao+e
Z1pabNqVNVuPKI2UboUO3BScD+5N7+0M7fflAKUx5UgqwidYe+0zCgrDHjYUF1Tz
2O7TkyeouL61gRDzvJLMQmkwhg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:38 2025 by rpki-client