Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/d10u-uDwxzCO1ATs2RUc0qyrQbA.roa
File: d10u-uDwxzCO1ATs2RUc0qyrQbA.roa (raw, json)
Hash identifier: m3ajmbYacZUtKP1FwdP4sQzFhrAYqo+DMogwBusGYrY=
Subject key identifier: 77:5D:2E:FA:E0:F0:C7:30:8E:D4:04:EC:D9:15:1C:D2:AC:AB:41:B0
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 01941FFA325024C1C4DA8489709934F0A193
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/d10u-uDwxzCO1ATs2RUc0qyrQbA.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41849
IP address blocks: 5.252.44.0/22 maxlen: 22
91.102.128.0/22 maxlen: 22
91.102.130.0/24 maxlen: 24
91.102.134.0/23 maxlen: 23
91.102.134.0/24 maxlen: 24
91.102.135.0/24 maxlen: 24
2a01:7140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:50:24:c1:c4:da:84:89:70:99:34:f0:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=775d2efae0f0c7308ed404ecd9151cd2acab41b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:8f:96:57:c5:9b:fe:7c:d6:a5:c8:18:1e:
4e:d4:d1:cf:8b:1b:46:20:9e:b2:a5:8e:0d:7b:5e:
18:55:cc:dc:5c:1f:f9:0c:02:f2:92:28:79:af:fd:
77:c0:9f:46:8b:2e:ee:c2:28:b1:59:78:41:4d:08:
d1:47:b5:1a:07:e4:7a:cf:f7:95:87:a6:b8:a2:26:
2d:55:ba:9e:33:1c:59:91:d5:fb:9a:3b:76:8a:41:
d8:eb:04:4d:85:ce:45:31:51:20:3f:b6:82:e7:f1:
b0:f4:4d:55:21:a5:b2:f2:d0:dc:f2:c6:1c:2c:2e:
cc:9c:8e:f3:0b:60:bb:b0:d2:6b:ac:af:c4:a7:67:
5e:af:91:3c:97:ae:88:40:aa:97:e2:9e:9a:9d:b5:
89:ab:56:29:27:4d:0d:98:27:a7:4b:f7:b9:87:91:
9a:ce:43:83:72:65:47:24:b0:9e:fc:22:7f:6b:00:
c9:bf:3f:30:bd:3c:98:eb:46:d8:3b:87:e8:9c:22:
47:e5:88:5f:cd:16:1d:e1:d3:cb:c1:02:c5:da:d8:
6c:ee:f5:41:9c:8a:1e:1d:6e:db:2c:45:11:21:8c:
3e:9a:fb:e1:e6:2f:56:27:24:cc:ab:8d:31:b7:cf:
9a:78:43:f7:da:72:54:62:9e:0f:dd:be:f2:6f:b8:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:2E:FA:E0:F0:C7:30:8E:D4:04:EC:D9:15:1C:D2:AC:AB:41:B0
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/d10u-uDwxzCO1ATs2RUc0qyrQbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.44.0/22
91.102.128.0/22
91.102.134.0/23
IPv6:
2a01:7140::/32
Signature Algorithm: sha256WithRSAEncryption
7f:03:6c:a2:57:7b:73:2f:e1:a3:c6:c6:a4:e3:4f:a5:54:79:
47:a8:85:95:80:d1:0b:42:a6:8a:c6:58:82:11:00:9e:90:28:
ee:a6:74:22:4f:13:19:c0:a3:de:78:13:a1:13:1a:96:a4:d9:
ac:63:ae:9c:72:19:20:6b:55:b4:18:f7:99:91:a9:2d:6b:3a:
6f:d9:29:27:19:9b:0f:22:c0:93:1d:54:1f:03:09:20:35:43:
3a:5a:3d:dd:5b:d9:d8:ee:c1:d9:05:78:38:bb:d1:9c:c8:31:
cc:49:b8:d4:00:c0:c4:19:dc:7b:c2:2d:bc:bb:c1:d8:8e:de:
f9:cd:55:f4:63:bb:a7:d5:93:0f:b7:0b:ce:29:d6:8b:78:4d:
18:93:e6:03:e7:4a:eb:e3:31:32:68:dc:9c:90:a8:d4:c6:ca:
1f:b5:17:3f:3a:68:ea:bc:59:d7:e2:49:ea:f0:4c:b5:a4:53:
af:22:4a:1c:54:06:6d:86:fa:dd:f9:15:bf:b5:dc:77:0e:49:
d0:e1:bd:12:57:b6:64:52:e9:0c:b4:02:22:17:22:33:b0:33:
93:6a:8d:fb:49:1d:89:d8:7c:ea:51:c6:32:18:7b:b5:fa:7d:
66:87:6d:d4:54:bf:32:be:21:6f:bb:13:5b:27:5e:12:96:be:
a2:b6:b3:d1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQf+jJQJMHE2oSJcJk08KGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl
NjAzMDYwHhcNMjUwMTAxMDM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzVkMmVmYWUwZjBjNzMwOGVkNDA0ZWNkOTE1MWNkMmFjYWI0MWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsISPllfFm/581qXIGB5O1NHPixtG
IJ6ypY4Ne14YVczcXB/5DALykih5r/13wJ9Giy7uwiixWXhBTQjRR7UaB+R6z/eV
h6a4oiYtVbqeMxxZkdX7mjt2ikHY6wRNhc5FMVEgP7aC5/Gw9E1VIaWy8tDc8sYc
LC7MnI7zC2C7sNJrrK/Ep2der5E8l66IQKqX4p6anbWJq1YpJ00NmCenS/e5h5Ga
zkODcmVHJLCe/CJ/awDJvz8wvTyY60bYO4fonCJH5YhfzRYd4dPLwQLF2ths7vVB
nIoeHW7bLEURIYw+mvvh5i9WJyTMq40xt8+aeEP32nJUYp4P3b7yb7jC4wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHddLvrg8McwjtQE7NkVHNKsq0GwMB8GA1UdIwQY
MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt
NDc2MzJjYjViODU0LzEvZDEwdS11RHd4ekNPMUFUczJSVWMwcXlyUWJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0
LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBfwsAwQC
W2aAAwQBW2aGMA0EAgACMAcDBQAqAXFAMA0GCSqGSIb3DQEBCwUAA4IBAQB/A2yi
V3tzL+Gjxsak40+lVHlHqIWVgNELQqaKxliCEQCekCjupnQiTxMZwKPeeBOhExqW
pNmsY66cchkga1W0GPeZkaktazpv2SknGZsPIsCTHVQfAwkgNUM6Wj3dW9nY7sHZ
BXg4u9GcyDHMSbjUAMDEGdx7wi28u8HYjt75zVX0Y7un1ZMPtwvOKdaLeE0Yk+YD
50rr4zEyaNyckKjUxsoftRc/OmjqvFnX4knq8Ey1pFOvIkocVAZthvrd+RW/tdx3
DknQ4b0SV7ZkUukMtAIiFyIzsDOTao37SR2J2HzqUcYyGHu1+n1mh23UVL8yviFv
uxNbJ14Slr6itrPR
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:45 2025 by rpki-client