Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PdOfFIG2R3Wn_U9cVDg6lejsL2s.roa
File: PdOfFIG2R3Wn_U9cVDg6lejsL2s.roa (raw, json)
Hash identifier: oiXobR0j/RWSj0/+zaRgEWXn75dSHHhGlQ0GdKCBBzM=
Subject key identifier: 3D:D3:9F:14:81:B6:47:75:A7:FD:4F:5C:54:38:3A:95:E8:EC:2F:6B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019436F4C789CA3CCED6A1C77ED2B0536BBC
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PdOfFIG2R3Wn_U9cVDg6lejsL2s.roa
Signing time: Sun 05 Jan 2025 14:53:19 +0000
ROA not before: Sun 05 Jan 2025 14:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 5.133.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:f4:c7:89:ca:3c:ce:d6:a1:c7:7e:d2:b0:53:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 5 14:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd39f1481b64775a7fd4f5c54383a95e8ec2f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:17:7d:10:5e:12:ec:dd:98:6d:59:3d:78:
74:0d:27:64:61:24:1e:ea:72:35:20:f9:77:6c:f9:
55:76:a8:91:88:07:af:5e:54:c1:9d:44:d4:05:29:
52:a2:85:9f:84:b7:aa:fa:af:68:c6:1a:c5:dc:8d:
72:5d:cd:43:63:3e:02:10:64:cf:72:ad:d5:73:53:
50:af:70:69:85:2a:cb:bc:e7:16:8d:2e:23:02:85:
cf:3a:db:68:d3:9e:f4:70:02:f6:d3:b9:e7:d4:d1:
11:2b:3c:14:3e:88:23:f1:19:c2:c3:7e:3e:6c:8c:
02:d5:ca:12:24:4d:23:6b:7e:45:10:f5:ec:b4:af:
64:77:3f:3a:12:1b:21:3b:38:bc:98:75:14:36:58:
35:09:81:cb:4a:8c:90:86:ee:78:bc:82:9a:91:45:
ed:45:ae:7f:29:65:f5:6c:ea:ca:83:30:33:8a:1e:
ba:9c:2f:55:ec:52:80:3a:8e:d8:f6:01:9f:2a:5e:
55:bf:05:8c:5f:eb:f0:e5:94:9b:95:60:cd:14:a2:
c7:50:7c:0e:2e:11:37:d5:9b:bc:75:37:5f:68:20:
43:d1:ae:d5:da:0f:12:fe:38:95:ea:2d:5f:44:ba:
c5:a5:b9:d1:7b:ed:cc:67:aa:a9:fa:69:c8:e1:0e:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:9F:14:81:B6:47:75:A7:FD:4F:5C:54:38:3A:95:E8:EC:2F:6B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PdOfFIG2R3Wn_U9cVDg6lejsL2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0/24
Signature Algorithm: sha256WithRSAEncryption
67:04:80:e1:0b:03:bc:8c:af:41:8d:af:76:c3:e7:fe:a5:21:
fd:09:13:b7:a4:b1:c6:dc:bb:70:dc:80:98:cc:c3:07:95:f3:
3a:3c:b4:1d:6c:b5:df:11:55:18:c9:32:16:61:70:06:40:0f:
d2:8e:96:48:16:59:69:88:2a:fb:18:8a:73:f2:49:18:1e:9b:
95:73:8a:05:8d:4b:b1:70:a6:56:8b:60:5b:04:04:0f:47:85:
8e:ea:a6:7a:4b:cf:0b:4f:f2:b8:ff:0a:19:5d:d1:c4:1d:34:
c4:e2:0a:a8:98:df:56:ce:b6:f5:a7:1b:2e:6f:09:62:43:29:
f2:c8:fe:32:05:6d:22:00:94:8c:88:2b:5c:fc:8b:72:10:ba:
6c:2f:55:e5:3b:a9:f8:dc:62:a3:ee:60:cc:3e:31:04:6d:18:
37:4f:1b:90:3f:94:25:c1:2d:ab:26:04:2b:7c:b5:9b:aa:5e:
ea:ce:61:4d:61:7c:54:01:3f:e1:96:96:b7:c7:28:b8:07:b1:
3f:24:77:77:68:21:23:47:b8:e9:27:2a:b2:43:30:d1:2a:c0:
2c:ec:13:8c:bd:30:dd:da:bf:28:91:b5:96:6d:9c:0c:4c:81:
4c:87:69:d2:4d:c4:43:9e:7b:10:4b:e2:28:53:1f:81:8b:a4:
19:7b:3b:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQ29MeJyjzO1qHHftKwU2u8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjUwMTA1MTQ1MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQzOWYxNDgxYjY0Nzc1YTdmZDRmNWM1NDM4M2E5NWU4ZWMyZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb0XfRBeEuzdmG1ZPXh0DSdkYSQe
6nI1IPl3bPlVdqiRiAevXlTBnUTUBSlSooWfhLeq+q9oxhrF3I1yXc1DYz4CEGTP
cq3Vc1NQr3BphSrLvOcWjS4jAoXPOtto0570cAL207nn1NERKzwUPogj8RnCw34+
bIwC1coSJE0ja35FEPXstK9kdz86EhshOzi8mHUUNlg1CYHLSoyQhu54vIKakUXt
Ra5/KWX1bOrKgzAzih66nC9V7FKAOo7Y9gGfKl5VvwWMX+vw5ZSblWDNFKLHUHwO
LhE31Zu8dTdfaCBD0a7V2g8S/jiV6i1fRLrFpbnRe+3MZ6qp+mnI4Q6xKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3TnxSBtkd1p/1PXFQ4OpXo7C9rMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvUGRPZkZJRzJSM1duX1U5Y1ZEZzZsZWpzTDJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYVlMA0G
CSqGSIb3DQEBCwUAA4IBAQBnBIDhCwO8jK9Bja92w+f+pSH9CRO3pLHG3Ltw3ICY
zMMHlfM6PLQdbLXfEVUYyTIWYXAGQA/SjpZIFllpiCr7GIpz8kkYHpuVc4oFjUux
cKZWi2BbBAQPR4WO6qZ6S88LT/K4/woZXdHEHTTE4gqomN9Wzrb1pxsubwliQyny
yP4yBW0iAJSMiCtc/ItyELpsL1XlO6n43GKj7mDMPjEEbRg3TxuQP5QlwS2rJgQr
fLWbql7qzmFNYXxUAT/hlpa3xyi4B7E/JHd3aCEjR7jpJyqyQzDRKsAs7BOMvTDd
2r8okbWWbZwMTIFMh2nSTcRDnnsQS+IoUx+Bi6QZezvz
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:51 2025 by rpki-client