Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DAowU4m__0gxfBGu-K4bAn_Bjr4.roa
File: DAowU4m__0gxfBGu-K4bAn_Bjr4.roa (raw, json)
Hash identifier: 2bs+IGhWL1d+DDVxNBDDbS53fOyuwMqLoTKE+qKqmQA=
Subject key identifier: 0C:0A:30:53:89:BF:FF:48:31:7C:11:AE:F8:AE:1B:02:7F:C1:8E:BE
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B59C8F18E0E508D330EE9D750F4927
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DAowU4m__0gxfBGu-K4bAn_Bjr4.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39047
IP address blocks: 5.101.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9c:8f:18:e0:e5:08:d3:30:ee:9d:75:0f:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c0a305389bfff48317c11aef8ae1b027fc18ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:a1:46:54:cc:76:cd:71:72:c7:66:48:62:
83:fe:ad:63:d0:13:b1:d0:f2:d9:f7:f9:e3:49:9d:
af:2b:44:20:97:50:cc:e0:51:11:f9:05:42:16:4e:
9d:16:9c:60:15:62:4e:2f:09:fa:88:6d:5d:91:58:
54:0d:61:08:67:b9:29:a9:e8:e9:b1:8d:98:aa:39:
dc:96:8f:ab:1b:fa:64:1d:a3:f5:7c:ab:89:e7:75:
71:74:aa:24:fe:19:d6:51:82:05:5d:80:8a:a4:60:
b9:31:68:f7:ae:d1:8a:5f:cf:49:d9:0f:5b:39:3f:
90:6b:1d:e6:df:1f:06:f7:28:cb:47:10:aa:e0:a1:
03:b9:b7:62:1e:ae:a7:a9:91:7d:07:65:b9:7c:60:
1f:e4:02:3e:45:7a:ee:86:3b:4d:e6:8d:a8:5d:f0:
20:9c:92:43:03:35:d5:84:18:53:72:3b:be:b2:f2:
82:d9:83:9a:1a:0d:59:35:5c:5c:cf:74:43:ed:2f:
59:90:16:b0:75:85:9e:dd:4f:e4:89:e1:43:32:68:
fe:ac:b3:2c:41:3e:12:af:42:f7:c6:ca:4e:da:1c:
ad:a7:5a:16:41:29:a2:aa:58:76:49:79:32:80:7a:
ac:bb:27:e9:f4:07:35:3e:f9:a9:ba:54:ee:25:60:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:30:53:89:BF:FF:48:31:7C:11:AE:F8:AE:1B:02:7F:C1:8E:BE
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/DAowU4m__0gxfBGu-K4bAn_Bjr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.208.0/21
Signature Algorithm: sha256WithRSAEncryption
70:52:83:46:04:8c:12:da:1d:f1:c2:c7:b2:cc:4c:5e:26:fd:
0f:63:34:30:21:a9:be:1b:9e:2c:1b:30:a7:10:ca:aa:53:b0:
11:5a:d3:f9:0c:a6:1e:30:fe:50:ca:f7:c3:73:79:a0:cf:66:
88:13:f7:59:d9:8a:2f:fa:c0:90:91:15:1f:47:23:85:cf:0f:
39:d5:73:f0:35:46:db:53:a8:a8:0e:18:d0:e0:74:49:f3:d0:
77:43:32:ea:4e:3c:fa:9f:33:29:25:4a:9c:ac:e3:bc:7e:5b:
83:b8:2e:7a:17:b6:ff:db:73:62:41:27:4d:78:eb:65:93:f7:
31:ee:3d:5b:8c:ec:74:d4:97:a9:e3:69:1c:f2:5a:c1:a8:b9:
e7:f0:03:96:d7:32:8c:7d:5e:c3:db:ed:da:92:04:70:c0:4f:
22:78:72:89:34:b0:95:ca:7c:55:2a:fe:ac:fc:38:9e:e8:0e:
e1:67:50:5b:13:ec:fb:09:c3:6f:fb:15:f5:4e:dc:ea:74:2d:
66:b4:38:97:db:43:ac:9e:1b:2e:1f:66:35:f9:bd:aa:3d:44:
a0:22:fd:64:64:6b:ef:d4:4b:df:ab:64:91:d0:6e:9b:35:aa:
e4:91:19:bf:1f:ae:a7:24:b5:de:6c:df:c9:09:bd:c1:f8:d9:
9b:ba:8a:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZyPGODlCNMw7p11D0knMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzBhMzA1Mzg5YmZmZjQ4MzE3YzExYWVmOGFlMWIwMjdmYzE4ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFWhRlTMds1xcsdmSGKD/q1j0BOx
0PLZ9/njSZ2vK0Qgl1DM4FER+QVCFk6dFpxgFWJOLwn6iG1dkVhUDWEIZ7kpqejp
sY2Yqjnclo+rG/pkHaP1fKuJ53VxdKok/hnWUYIFXYCKpGC5MWj3rtGKX89J2Q9b
OT+Qax3m3x8G9yjLRxCq4KEDubdiHq6nqZF9B2W5fGAf5AI+RXruhjtN5o2oXfAg
nJJDAzXVhBhTcju+svKC2YOaGg1ZNVxcz3RD7S9ZkBawdYWe3U/kieFDMmj+rLMs
QT4Sr0L3xspO2hytp1oWQSmiqlh2SXkygHqsuyfp9Ac1PvmpulTuJWBHjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwKMFOJv/9IMXwRrviuGwJ/wY6+MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvREFvd1U0bV9fMGd4ZkJHdS1LNGJBbl9CanI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBWXQMA0G
CSqGSIb3DQEBCwUAA4IBAQBwUoNGBIwS2h3xwseyzExeJv0PYzQwIam+G54sGzCn
EMqqU7ARWtP5DKYeMP5QyvfDc3mgz2aIE/dZ2Yov+sCQkRUfRyOFzw851XPwNUbb
U6ioDhjQ4HRJ89B3QzLqTjz6nzMpJUqcrOO8fluDuC56F7b/23NiQSdNeOtlk/cx
7j1bjOx01Jep42kc8lrBqLnn8AOW1zKMfV7D2+3akgRwwE8ieHKJNLCVynxVKv6s
/Die6A7hZ1BbE+z7CcNv+xX1TtzqdC1mtDiX20OsnhsuH2Y1+b2qPUSgIv1kZGvv
1Evfq2SR0G6bNarkkRm/H66nJLXebN/JCb3B+Nmbuoo7
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:52 2025 by rpki-client