Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/doBhekM8aFF3EwT9nBpp7PBBEtM.roa
File: doBhekM8aFF3EwT9nBpp7PBBEtM.roa (raw, json)
Hash identifier: 8AS3WZF4CEeIHK95vN0bApNh0sSrpFI4vRHurghHWXI=
Subject key identifier: 76:80:61:7A:43:3C:68:51:77:13:04:FD:9C:1A:69:EC:F0:41:12:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200E517BDADE7A358B0FFAF2D10DEE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/doBhekM8aFF3EwT9nBpp7PBBEtM.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209193
IP address blocks: 5.175.144.0/20 maxlen: 32
5.175.160.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:51:7b:da:de:7a:35:8b:0f:fa:f2:d1:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7680617a433c6851771304fd9c1a69ecf04112d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:78:33:2b:10:73:9a:9a:ec:cb:b9:f3:5c:
65:fa:a7:4b:4e:3a:df:6a:8d:8b:85:4d:70:09:07:
3f:17:00:e1:39:9c:38:02:2f:70:67:8a:e4:9d:6c:
2d:8e:26:c9:ce:0f:fd:83:4e:9c:3e:75:b6:10:22:
53:92:23:d1:8e:1d:25:9c:f8:54:5e:46:7e:eb:8a:
f5:eb:1a:9a:ac:6e:e5:c2:0d:44:38:85:66:29:2b:
b7:b2:6f:e8:d5:ad:c1:6f:39:3c:5c:68:02:f4:12:
f5:55:53:a4:34:1c:b8:82:10:bb:de:83:d8:34:7c:
e3:75:dc:71:15:a9:59:66:5f:89:05:82:c3:d5:7d:
02:cd:5c:20:cb:6a:c5:dd:93:28:37:fe:60:33:02:
e6:6f:c7:ef:d1:80:ae:2e:ab:eb:01:75:43:b8:de:
24:c0:d3:c0:78:20:aa:0d:8d:86:7d:f0:6f:f3:63:
c8:4e:f0:46:4c:b8:42:a1:30:85:42:c9:af:cb:22:
8b:19:87:24:4a:a8:e1:d7:78:76:e4:2c:15:69:7f:
e8:68:db:0d:41:1f:a9:29:c2:d8:08:22:b3:72:68:
ad:67:12:24:7e:c5:b4:06:b4:72:7f:0d:89:69:63:
fc:83:96:04:9f:d2:bb:91:18:65:d1:a5:3c:e2:33:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:80:61:7A:43:3C:68:51:77:13:04:FD:9C:1A:69:EC:F0:41:12:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/doBhekM8aFF3EwT9nBpp7PBBEtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.144.0-5.175.191.255
Signature Algorithm: sha256WithRSAEncryption
59:9b:10:7c:e5:71:66:8b:46:f4:cd:e7:31:b5:ff:c9:f8:45:
ef:1e:37:47:66:3d:14:bc:b2:fc:e3:15:4c:27:24:d1:95:9f:
bc:ab:2a:5b:79:e6:e9:68:2a:30:1d:43:bc:c9:01:e2:7b:7e:
58:35:ef:dd:94:01:dd:2b:fc:70:27:4f:7f:b4:f7:38:fb:53:
7a:ee:c3:2e:78:13:46:9d:8f:b2:17:c5:8f:31:26:c0:26:5b:
20:9e:04:b5:84:9c:58:ca:b1:b3:05:b1:5e:7a:ee:cd:68:21:
18:ae:e9:27:19:0c:15:0b:44:88:88:31:c8:d2:c7:47:9e:a5:
5f:6a:b8:64:aa:5f:2a:35:87:7f:a8:de:54:44:a9:5f:8a:02:
d3:d0:bf:d3:ca:ab:79:01:fb:5f:de:f2:1d:b2:f8:c6:f7:c5:
85:fa:4f:f4:f8:e5:61:bc:6f:17:22:34:d5:cb:e5:3d:5a:d7:
4b:09:f2:67:44:57:ce:ec:70:21:1d:08:4f:fb:29:e5:98:2a:
aa:d4:59:84:79:ac:b0:5a:aa:30:6f:2a:fd:09:f6:63:01:70:
16:41:3a:84:7b:51:3f:b4:6c:9a:a5:30:08:77:fb:f4:8c:5d:
12:69:31:6c:ef:42:45:eb:24:89:de:2f:f4:67:cd:9d:4e:98:
3f:2a:eb:08
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiIA5Re9reejWLD/ry0Q3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjgwNjE3YTQzM2M2ODUxNzcxMzA0ZmQ5YzFhNjllY2YwNDExMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjt4MysQc5qa7Mu581xl+qdLTjrf
ao2LhU1wCQc/FwDhOZw4Ai9wZ4rknWwtjibJzg/9g06cPnW2ECJTkiPRjh0lnPhU
XkZ+64r16xqarG7lwg1EOIVmKSu3sm/o1a3Bbzk8XGgC9BL1VVOkNBy4ghC73oPY
NHzjddxxFalZZl+JBYLD1X0CzVwgy2rF3ZMoN/5gMwLmb8fv0YCuLqvrAXVDuN4k
wNPAeCCqDY2GffBv82PITvBGTLhCoTCFQsmvyyKLGYckSqjh13h25CwVaX/oaNsN
QR+pKcLYCCKzcmitZxIkfsW0BrRyfw2JaWP8g5YEn9K7kRhl0aU84jMmXwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHaAYXpDPGhRdxME/ZwaaezwQRLTMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZG9CaGVrTThhRkYzRXdUOW5CcHA3UEJCRXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQFr5AD
BAYFr4AwDQYJKoZIhvcNAQELBQADggEBAFmbEHzlcWaLRvTN5zG1/8n4Re8eN0dm
PRS8svzjFUwnJNGVn7yrKlt55uloKjAdQ7zJAeJ7flg1792UAd0r/HAnT3+09zj7
U3ruwy54E0adj7IXxY8xJsAmWyCeBLWEnFjKsbMFsV567s1oIRiu6ScZDBULRIiI
McjSx0eepV9quGSqXyo1h3+o3lREqV+KAtPQv9PKq3kB+1/e8h2y+Mb3xYX6T/T4
5WG8bxciNNXL5T1a10sJ8mdEV87scCEdCE/7KeWYKqrUWYR5rLBaqjBvKv0J9mMB
cBZBOoR7UT+0bJqlMAh3+/SMXRJpMWzvQkXrJIneL/RnzZ1OmD8q6wg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:33:03 2025 by rpki-client