Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/u5mSTTnn8vaZ9oDmX1M4y9pbokw.roa
File: u5mSTTnn8vaZ9oDmX1M4y9pbokw.roa (raw, json)
Hash identifier: bm6IXsniPMR0Yp86gTjutL2MzGTdYe9BdVGuHS0Cr/Q=
Subject key identifier: BB:99:92:4D:39:E7:F2:F6:99:F6:80:E6:5F:53:38:CB:DA:5B:A2:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222005E050CC1C7A8758C282943E1D06
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/u5mSTTnn8vaZ9oDmX1M4y9pbokw.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62880
IP address blocks: 5.175.236.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:e0:50:cc:1c:7a:87:58:c2:82:94:3e:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb99924d39e7f2f699f680e65f5338cbda5ba24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:4c:0d:b8:64:8a:37:3b:c2:e8:ca:a0:16:
b7:99:69:d1:d7:6b:3d:75:74:f1:d0:57:2e:3a:c4:
dc:b0:17:02:55:95:05:56:6e:98:e3:95:3a:d0:f6:
90:f7:98:cb:1d:36:bf:52:a8:d3:fe:6b:4a:8b:af:
30:7e:8c:e9:23:1d:72:bb:e7:c2:93:fd:a1:cc:96:
57:f0:e0:c6:04:c3:64:44:d5:2f:93:33:45:54:0a:
41:64:8c:ec:bf:b1:1f:2f:97:2d:43:4a:72:71:aa:
1c:32:3d:75:36:d7:68:19:34:31:b9:4d:11:bc:49:
4a:3c:78:c7:9c:f7:34:eb:2b:f4:16:f6:1a:ed:e4:
f5:ba:58:85:c0:b0:d3:27:f9:2e:ee:4c:a2:b5:b1:
2c:60:e7:6b:e7:bf:57:2e:bf:8a:e4:a3:87:22:8b:
ec:6f:8f:4a:8d:a5:dd:1a:ab:6a:e1:32:09:b4:32:
a7:32:ab:c6:79:6d:c4:33:25:15:36:eb:fe:83:42:
8d:11:b5:71:27:7a:64:ea:62:65:28:b7:18:ec:c6:
ae:8e:63:45:61:43:1f:b6:88:11:9b:93:e7:53:9b:
92:25:68:4a:3a:ed:d5:db:17:8a:43:95:f5:45:7f:
25:a4:a7:2f:55:b3:b1:88:a6:e6:74:e9:e7:e9:eb:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:92:4D:39:E7:F2:F6:99:F6:80:E6:5F:53:38:CB:DA:5B:A2:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/u5mSTTnn8vaZ9oDmX1M4y9pbokw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0-5.175.238.255
Signature Algorithm: sha256WithRSAEncryption
ae:c1:1d:09:09:28:cc:c0:cc:39:91:f5:04:57:11:c4:e3:aa:
11:62:f1:e6:82:be:10:a1:fe:71:40:d4:de:27:10:d4:8a:fb:
5e:cc:cf:58:bd:56:d5:ff:e9:72:57:e6:65:83:1d:c7:0b:0c:
86:37:d3:fe:a4:51:47:d5:ce:10:e3:0b:b0:a3:cc:78:ca:03:
3f:5c:21:83:70:b2:8d:5e:7e:17:be:45:3f:10:70:c6:54:69:
2f:57:11:c4:48:c7:22:df:86:6e:e4:4a:54:3f:14:77:7f:4c:
63:87:9c:f9:ff:0e:05:9e:e0:4f:df:76:1d:36:6e:ac:df:30:
24:ec:f3:a8:f5:6f:46:58:eb:52:32:93:ba:22:e2:ec:b1:ae:
cb:64:c6:f3:4e:1c:78:74:35:02:b9:87:6d:17:43:be:12:80:
b7:dd:bb:e3:8f:7d:65:71:de:e8:36:88:cf:06:07:32:a0:d6:
17:e6:cf:97:20:1b:6c:c2:72:a4:f0:91:9d:2e:46:ca:01:c0:
f4:7e:a6:4f:e1:96:4f:0b:22:05:58:f9:5c:a4:3f:c1:c2:94:
94:f4:8c:e1:f7:3c:ae:4b:24:8f:93:2b:ff:98:89:3b:35:cd:
c4:9b:7c:66:97:f2:7a:8b:0d:d2:c7:d9:a8:57:1c:de:d2:d4:
07:1b:98:65
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiIAXgUMwceodYwoKUPh0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjk5OTI0ZDM5ZTdmMmY2OTlmNjgwZTY1ZjUzMzhjYmRhNWJhMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYRMDbhkijc7wujKoBa3mWnR12s9
dXTx0FcuOsTcsBcCVZUFVm6Y45U60PaQ95jLHTa/UqjT/mtKi68wfozpIx1yu+fC
k/2hzJZX8ODGBMNkRNUvkzNFVApBZIzsv7EfL5ctQ0pycaocMj11NtdoGTQxuU0R
vElKPHjHnPc06yv0FvYa7eT1uliFwLDTJ/ku7kyitbEsYOdr579XLr+K5KOHIovs
b49KjaXdGqtq4TIJtDKnMqvGeW3EMyUVNuv+g0KNEbVxJ3pk6mJlKLcY7MaujmNF
YUMftogRm5PnU5uSJWhKOu3V2xeKQ5X1RX8lpKcvVbOxiKbmdOnn6esIxQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLuZkk055/L2mfaA5l9TOMvaW6JMMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdTVtU1RUbm44dmFaOW9EbVgxTTR5OXBib2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFr+wD
BAAFr+4wDQYJKoZIhvcNAQELBQADggEBAK7BHQkJKMzAzDmR9QRXEcTjqhFi8eaC
vhCh/nFA1N4nENSK+17Mz1i9VtX/6XJX5mWDHccLDIY30/6kUUfVzhDjC7CjzHjK
Az9cIYNwso1efhe+RT8QcMZUaS9XEcRIxyLfhm7kSlQ/FHd/TGOHnPn/DgWe4E/f
dh02bqzfMCTs86j1b0ZY61Iyk7oi4uyxrstkxvNOHHh0NQK5h20XQ74SgLfdu+OP
fWVx3ug2iM8GBzKg1hfmz5cgG2zCcqTwkZ0uRsoBwPR+pk/hlk8LIgVY+VykP8HC
lJT0jOH3PK5LJI+TK/+YiTs1zcSbfGaX8nqLDdLH2ahXHN7S1AcbmGU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:59 2025 by rpki-client