Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/5jsqetOrWlW5bqrToUkjo4NjpBE.roa
File: 5jsqetOrWlW5bqrToUkjo4NjpBE.roa (raw, json)
Hash identifier: HbdVO66oASToCDSwUokFcykrlhXffq9VRlSVMfgSZxk=
Subject key identifier: E6:3B:2A:7A:D3:AB:5A:55:B9:6E:AA:D3:A1:49:23:A3:83:63:A4:11
Certificate issuer: /CN=60eea357508922b49bdb83de6827202955d7db8d
Certificate serial: 04B6F5ED
Authority key identifier: 60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/5jsqetOrWlW5bqrToUkjo4NjpBE.roa
Signing time: Sat 01 Jan 2022 08:53:16 +0000
ROA not before: Sat 01 Jan 2022 08:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212001
IP address blocks: 45.144.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79099373 (0x4b6f5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60eea357508922b49bdb83de6827202955d7db8d
Validity
Not Before: Jan 1 08:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e63b2a7ad3ab5a55b96eaad3a14923a38363a411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:9b:ef:ff:e0:74:04:cc:c7:c3:2b:8e:2f:
ed:ee:78:1e:fa:33:18:47:3c:21:8c:fe:b2:cc:a2:
a7:b3:f2:9f:c4:dd:6f:f5:0a:c4:f6:f3:31:b2:d8:
3f:0c:9a:c3:d3:30:3d:bd:2b:57:4d:8a:5a:c3:cc:
ca:44:f7:83:b8:23:68:35:6f:e7:ff:44:34:bc:37:
87:ea:9c:77:cd:6d:0c:3d:8b:b9:dc:92:86:98:3f:
c7:07:6e:4a:30:c8:f8:d2:a5:0a:96:76:ae:c5:e2:
fb:3c:18:e4:07:a5:f2:17:36:c6:59:08:cd:c7:e4:
85:68:91:6f:1a:cc:1b:3f:cc:a7:12:3f:06:fb:10:
f8:cb:bd:ba:cf:9b:fe:a6:a7:78:fa:7f:a8:b5:c9:
1a:4e:be:ae:b5:fd:f7:d8:2d:b1:17:6a:6e:98:ee:
1c:df:70:e5:fc:71:a0:5a:23:47:8b:92:12:f1:e0:
67:d5:cf:7f:e4:86:54:24:63:ce:02:82:94:ed:fa:
df:cb:38:5b:b0:c4:f4:39:89:3c:f5:5f:db:ff:fb:
cc:93:e5:ed:63:5b:3a:3e:15:66:c5:c8:8d:0a:a9:
c3:98:86:e8:ad:b9:d1:76:da:9a:29:cd:c2:9b:d6:
3c:01:77:8e:69:fb:3c:fc:64:15:58:c0:a6:74:f1:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:2A:7A:D3:AB:5A:55:B9:6E:AA:D3:A1:49:23:A3:83:63:A4:11
X509v3 Authority Key Identifier:
keyid:60:EE:A3:57:50:89:22:B4:9B:DB:83:DE:68:27:20:29:55:D7:DB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO6jV1CJIrSb24PeaCcgKVXX240.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/5jsqetOrWlW5bqrToUkjo4NjpBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9e65e5-4ca5-4a24-a3e4-533227649593/1/YO6jV1CJIrSb24PeaCcgKVXX240.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c7:c3:a0:24:f2:a4:c6:91:54:c9:86:3f:5c:eb:a7:5e:9e:
ed:79:b8:c9:4e:e1:31:82:27:f8:40:05:3f:7a:04:00:08:e5:
0d:ad:d7:3d:5c:72:1a:ed:b7:17:e3:48:61:1c:89:c8:df:7a:
1f:bd:ec:e2:0b:e7:ab:87:a0:e5:54:b6:65:52:18:35:8a:c6:
f8:35:dd:12:7d:68:5f:96:10:83:fc:21:c5:3b:b7:c3:f6:2b:
bc:28:89:ab:9b:b3:33:c0:48:c8:b0:33:1f:6d:9a:de:46:23:
a1:48:4d:98:9e:4b:32:16:b7:49:09:32:6e:69:79:1b:ff:c1:
8d:0e:0d:d7:4f:19:b5:76:23:bb:7e:7c:81:a9:11:f9:fb:fc:
22:4a:fc:84:60:75:64:b2:da:db:f4:c3:f2:6e:58:27:93:10:
bf:7c:d3:fa:ea:eb:ab:4a:06:3c:07:21:ce:dc:51:2a:fb:2a:
e4:4e:96:b4:2c:7f:af:04:6c:fe:15:3d:08:cc:05:5a:84:db:
4f:de:33:47:d5:2f:5a:d6:72:44:d3:a8:3b:84:68:42:0a:e7:
a2:df:44:66:51:82:0d:c7:1d:91:76:96:d3:b7:f6:c1:95:b4:
15:34:3c:9b:3e:44:3e:09:a1:04:6d:b4:9f:82:f9:50:05:76:
9b:7f:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:46:10 2025 by rpki-client