Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vCEzDqMZqIRrLM0zN5dSidyaTzc.roa
File: vCEzDqMZqIRrLM0zN5dSidyaTzc.roa (raw, json)
Hash identifier: wNijxAcGjXEBMgvwgCWkSBZWgxkDvttL562Sv14kFp8=
Subject key identifier: BC:21:33:0E:A3:19:A8:84:6B:2C:CD:33:37:97:52:89:DC:9A:4F:37
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942CAD8E492A53BF839F1BB9A0C8779429
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vCEzDqMZqIRrLM0zN5dSidyaTzc.roa
Signing time: Fri 03 Jan 2025 14:59:19 +0000
ROA not before: Fri 03 Jan 2025 14:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31530
IP address blocks: 5.83.156.0/24 maxlen: 24
5.231.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:ad:8e:49:2a:53:bf:83:9f:1b:b9:a0:c8:77:94:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 3 14:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc21330ea319a8846b2ccd3337975289dc9a4f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:d5:ad:02:db:1f:43:44:9b:f9:17:b5:eb:
69:79:a3:89:3e:2f:36:9c:b4:4f:f4:7f:97:fe:fd:
57:ad:6a:de:78:31:77:6a:b8:6e:e9:ba:a0:0e:05:
f8:70:90:d8:05:5c:46:0e:58:32:ea:9c:d5:87:6e:
8d:44:84:1f:fe:50:c5:71:64:cd:64:b7:05:45:81:
65:d8:d6:6e:59:de:99:9e:08:11:07:0c:e8:02:6d:
6f:77:22:7b:61:a4:e9:aa:a7:ba:23:dc:2a:4d:a7:
18:2c:88:8a:15:ac:0f:95:a7:39:4e:4d:7a:4d:8e:
81:ed:0f:bf:e9:0d:b3:62:97:ec:ae:62:09:17:a9:
7b:85:8b:b9:25:13:82:71:e7:54:14:6a:e6:59:30:
15:d4:8c:07:77:e8:06:1c:bb:df:ce:0c:c7:7d:a3:
fa:f9:cc:77:06:64:75:fc:44:fe:a1:ea:39:83:26:
4a:1e:fe:f9:50:5a:1f:6b:27:4d:06:ca:7f:d6:54:
04:82:9a:b0:22:10:1b:a2:c1:5c:3b:21:c2:15:c4:
81:ab:37:7f:49:d8:6a:8c:73:2e:f1:fe:d5:bd:35:
17:b9:1a:55:4d:88:d9:c8:c3:c6:fb:09:d6:09:1b:
b7:7a:20:c1:4a:d3:26:a0:c8:e2:43:b2:1b:6e:f3:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:33:0E:A3:19:A8:84:6B:2C:CD:33:37:97:52:89:DC:9A:4F:37
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vCEzDqMZqIRrLM0zN5dSidyaTzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.156.0/24
5.231.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6e:f5:56:c3:1a:03:4c:86:bd:74:c4:7b:95:03:e3:84:e5:
3e:d1:f9:ac:70:1a:27:b8:49:ed:86:76:ae:93:e3:4d:34:bb:
5d:0e:bf:11:a3:b2:f3:54:71:1f:ce:9d:85:7a:9b:82:8b:a2:
2f:f8:e2:f9:f5:47:9f:2a:2d:75:51:a7:77:a8:35:25:ca:a8:
46:a4:33:b1:47:6a:82:7f:df:7b:3c:28:f0:3f:82:24:4c:51:
5d:34:9b:13:c4:c5:56:d7:e1:38:2b:30:ca:d2:83:09:0b:93:
06:a7:44:fd:c0:a2:4f:22:be:d2:c7:b4:0c:f6:1c:db:f2:77:
b2:b5:d3:dd:98:ff:e8:06:5e:93:8e:2b:5c:70:b1:5b:34:0f:
c7:62:e6:66:61:58:e0:3f:2d:43:3c:dd:53:11:5a:7e:e2:5f:
19:28:30:18:0f:89:1d:31:11:02:94:ac:1b:aa:a2:2e:f4:f7:
8d:82:ae:13:69:48:fd:eb:d1:99:32:a8:a4:5f:6a:3f:23:8f:
50:db:7c:9d:32:0f:ff:23:32:8d:c9:d4:4f:d9:11:97:e5:88:
43:25:54:82:05:01:b4:5b:72:f0:fc:c0:d5:ad:f3:05:ff:fe:
7f:dd:67:d9:25:c4:b4:a8:06:3f:b9:a9:5c:10:fb:be:bf:3d:
ca:73:b0:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQsrY5JKlO/g58buaDId5QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAzMTQ1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzIxMzMwZWEzMTlhODg0NmIyY2NkMzMzNzk3NTI4OWRjOWE0ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRfVrQLbH0NEm/kXtetpeaOJPi82
nLRP9H+X/v1XrWreeDF3arhu6bqgDgX4cJDYBVxGDlgy6pzVh26NRIQf/lDFcWTN
ZLcFRYFl2NZuWd6ZnggRBwzoAm1vdyJ7YaTpqqe6I9wqTacYLIiKFawPlac5Tk16
TY6B7Q+/6Q2zYpfsrmIJF6l7hYu5JROCcedUFGrmWTAV1IwHd+gGHLvfzgzHfaP6
+cx3BmR1/ET+oeo5gyZKHv75UFofaydNBsp/1lQEgpqwIhAbosFcOyHCFcSBqzd/
SdhqjHMu8f7VvTUXuRpVTYjZyMPG+wnWCRu3eiDBStMmoMjiQ7IbbvO3UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLwhMw6jGaiEayzNMzeXUoncmk83MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdkNFekRxTVpxSVJyTE0wek41ZFNpZHlhVHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOcAwQA
BeclMA0GCSqGSIb3DQEBCwUAA4IBAQCNbvVWwxoDTIa9dMR7lQPjhOU+0fmscBon
uEnthnauk+NNNLtdDr8Ro7LzVHEfzp2FepuCi6Iv+OL59UefKi11Uad3qDUlyqhG
pDOxR2qCf997PCjwP4IkTFFdNJsTxMVW1+E4KzDK0oMJC5MGp0T9wKJPIr7Sx7QM
9hzb8neytdPdmP/oBl6TjitccLFbNA/HYuZmYVjgPy1DPN1TEVp+4l8ZKDAYD4kd
MREClKwbqqIu9PeNgq4TaUj969GZMqikX2o/I49Q23ydMg//IzKNydRP2RGX5YhD
JVSCBQG0W3Lw/MDVrfMF//5/3WfZJcS0qAY/ualcEPu+vz3Kc7C3
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:50 2025 by rpki-client