Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/hTH8TKZul7Lu0kbX-8rAkihEYv8.roa
File: hTH8TKZul7Lu0kbX-8rAkihEYv8.roa (raw, json)
Hash identifier: 9BwD14x9YhIU2sx3j5oZexxk6zRwand0w0j5fwc91/Y=
Subject key identifier: 85:31:FC:4C:A6:6E:97:B2:EE:D2:46:D7:FB:CA:C0:92:28:44:62:FF
Certificate issuer: /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial: 08E9BD34
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/hTH8TKZul7Lu0kbX-8rAkihEYv8.roa
Signing time: Sat 01 Jan 2022 14:06:16 +0000
ROA not before: Sat 01 Jan 2022 14:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 5.181.21.0/24 maxlen: 24
5.181.20.0/24 maxlen: 24
5.181.23.0/24 maxlen: 24
5.181.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149536052 (0x8e9bd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Validity
Not Before: Jan 1 14:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8531fc4ca66e97b2eed246d7fbcac092284462ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:07:ce:6a:55:c2:0f:4c:bd:40:a5:c5:e7:67:
de:d6:08:8a:ee:93:af:32:6c:70:e6:3f:8b:a6:9b:
9f:ca:42:de:56:4d:6c:5d:c7:db:89:46:0c:4b:0f:
de:42:50:17:e7:0c:b7:9a:ae:4a:0b:5c:95:41:8a:
83:16:2b:02:ad:16:78:6a:f7:7f:bd:db:1e:0a:d7:
51:b7:bf:fc:f5:b2:d1:a8:db:bd:52:38:7a:d7:19:
c9:a3:5f:7d:4a:0a:93:1e:12:3e:65:ff:6b:0e:18:
9b:c6:62:3a:1f:ef:9d:10:6c:0f:47:ef:30:40:d9:
60:32:49:18:2e:16:75:5b:04:c0:8b:47:41:c1:6d:
f2:fc:5a:29:30:2b:eb:b2:ed:02:2f:8d:9b:65:8f:
f6:e1:a0:8e:8f:03:51:35:bd:cd:17:3c:e1:10:40:
8f:f5:f0:80:f7:0f:0f:fb:42:04:9b:9d:3d:6b:be:
51:25:e7:9d:af:20:66:a3:31:f6:00:b6:8b:0c:ee:
7a:d7:e3:72:29:83:85:1e:c0:40:49:69:b7:e8:f1:
1a:62:07:55:70:d5:06:90:57:b7:52:88:6d:98:60:
30:31:32:a5:46:10:09:bc:6b:1a:c6:84:f9:68:ab:
6e:d3:9e:1c:f0:0d:c9:c4:15:03:75:39:b1:c4:11:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:FC:4C:A6:6E:97:B2:EE:D2:46:D7:FB:CA:C0:92:28:44:62:FF
X509v3 Authority Key Identifier:
keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/hTH8TKZul7Lu0kbX-8rAkihEYv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.20.0/22
Signature Algorithm: sha256WithRSAEncryption
39:4d:da:8f:91:66:07:5c:19:2a:ee:39:fa:88:d3:37:85:e7:
e1:9a:46:04:68:23:28:dc:e4:fa:96:85:d3:35:2b:93:a5:cf:
2b:3c:e1:64:60:b3:7d:4a:14:aa:e1:22:20:29:b2:f8:38:cd:
ac:7e:2c:cc:22:13:f6:06:d3:ca:b9:9c:01:3f:4d:b3:4f:7f:
6b:9d:d3:4c:59:b2:df:6a:fb:5b:e7:23:60:cf:e8:69:30:74:
c3:7b:4a:a3:46:28:a2:db:85:dc:07:39:bc:26:c4:03:05:d8:
3b:ad:78:96:aa:71:03:ee:f8:90:c0:35:58:06:12:fc:26:45:
0b:8f:15:4f:c8:70:0b:b5:d4:bb:65:bf:46:ae:cc:50:b0:b8:
25:aa:5b:99:1e:f1:e6:c2:33:e2:99:e9:d6:54:68:a5:3e:d9:
7b:ba:7e:ed:32:15:f3:1b:34:1c:23:ea:cd:2e:29:31:36:11:
f6:8e:08:f3:dc:54:87:5a:7c:23:ee:3c:86:bb:e2:0d:2f:cd:
fb:d2:33:4e:f2:18:7b:19:64:e9:aa:b8:d3:ca:63:dd:70:2e:
b2:95:eb:cd:46:cf:81:d6:fb:d6:87:99:64:75:d2:ee:41:4a:
e9:6a:9b:61:d2:28:b8:63:cd:71:9f:3d:81:14:b4:bb:65:88:
71:66:0e:36
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOm9NDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzY4MzY4YzVkMjk0MTYwZjRkMmQwY2VhZjc1MzFlNDQ3NWZhNTMzMB4XDTIyMDEw
MTE0MDYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUzMWZjNGNhNjZl
OTdiMmVlZDI0NmQ3ZmJjYWMwOTIyODQ0NjJmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOcHzmpVwg9MvUClxedn3tYIiu6TrzJscOY/i6abn8pC3lZN
bF3H24lGDEsP3kJQF+cMt5quSgtclUGKgxYrAq0WeGr3f73bHgrXUbe//PWy0ajb
vVI4etcZyaNffUoKkx4SPmX/aw4Ym8ZiOh/vnRBsD0fvMEDZYDJJGC4WdVsEwItH
QcFt8vxaKTAr67LtAi+Nm2WP9uGgjo8DUTW9zRc84RBAj/XwgPcPD/tCBJudPWu+
USXnna8gZqMx9gC2iwzuetfjcimDhR7AQElpt+jxGmIHVXDVBpBXt1KIbZhgMDEy
pUYQCbxrGsaE+WirbtOeHPANycQVA3U5scQRBSsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFMfxMpm6Xsu7SRtf7ysCSKERi/zAfBgNVHSMEGDAWgBTsaDaMXSlBYPTS
0M6vdTHkR1+lMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdHZzJqRjBwUVdEMDB0RE9yM1V4NUVkZnBUTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvN2ZiYjY0LWZmNzUtNDA4Mi05ZDFjLTUwZjU5NzA0MzY1NS8x
L2hUSDhUS1p1bDdMdTBrYlgtOHJBa2loRVl2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
N2ZiYjY0LWZmNzUtNDA4Mi05ZDFjLTUwZjU5NzA0MzY1NS8xLzdHZzJqRjBwUVdE
MDB0RE9yM1V4NUVkZnBUTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW1FDANBgkqhkiG9w0BAQsFAAOC
AQEAOU3aj5FmB1wZKu45+ojTN4Xn4ZpGBGgjKNzk+paF0zUrk6XPKzzhZGCzfUoU
quEiICmy+DjNrH4szCIT9gbTyrmcAT9Ns09/a53TTFmy32r7W+cjYM/oaTB0w3tK
o0YootuF3Ac5vCbEAwXYO614lqpxA+74kMA1WAYS/CZFC48VT8hwC7XUu2W/Rq7M
ULC4JapbmR7x5sIz4pnp1lRopT7Ze7p+7TIV8xs0HCPqzS4pMTYR9o4I89xUh1p8
I+48hrviDS/N+9IzTvIYexlk6aq408pj3XAuspXrzUbPgdb71oeZZHXS7kFK6Wqb
YdIouGPNcZ89gRS0u2WIcWYONg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:19 2025 by rpki-client