Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/xp3iD33_2hioYkeHRGLdfrHV7Ko.roa
File: xp3iD33_2hioYkeHRGLdfrHV7Ko.roa (raw, json)
Hash identifier: QvyK/CgnKXx/iTypZn+pnfs+lybW6uzz8gUTSiUyjdo=
Subject key identifier: C6:9D:E2:0F:7D:FF:DA:18:A8:62:47:87:44:62:DD:7E:B1:D5:EC:AA
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018570D52CCFCBD41BA62A62F387AB415018
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/xp3iD33_2hioYkeHRGLdfrHV7Ko.roa
Signing time: Mon 02 Jan 2023 04:54:56 +0000
ROA not before: Mon 02 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58349
IP address blocks: 5.44.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:2c:cf:cb:d4:1b:a6:2a:62:f3:87:ab:41:50:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Jan 2 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c69de20f7dffda18a86247874462dd7eb1d5ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:a9:b8:64:53:7c:32:46:ef:04:5b:93:54:
43:58:c5:12:a3:b0:ba:ad:bb:98:6d:65:9b:44:dd:
a0:18:25:70:eb:96:3a:b3:98:5f:40:27:75:61:f7:
8e:9d:01:0c:a0:92:fc:cc:37:1e:0c:a1:55:b4:b6:
70:0c:a3:1c:fc:c8:c3:c8:b9:51:20:39:72:45:4c:
b6:f7:34:ad:8f:06:d8:d7:ac:75:65:c1:94:03:e2:
87:15:46:13:58:20:6f:55:0b:7b:70:4f:5b:97:95:
26:fc:93:9e:e3:d7:4a:22:5d:cb:25:2b:98:81:8c:
b9:ae:17:fa:ff:d0:85:56:0c:f5:e4:c8:3a:20:f5:
25:a5:c7:8e:ce:a2:0c:d8:a5:22:90:77:97:1f:9f:
04:47:69:24:97:47:8c:67:c6:19:07:09:f6:08:c6:
ee:9f:d1:12:56:68:4e:7a:6f:b0:b9:e3:1d:a2:59:
8a:07:b5:81:81:27:14:84:8d:7f:9a:e5:b3:af:4e:
86:0a:18:b1:f1:43:d5:b3:a8:0f:bf:09:00:51:eb:
8a:92:1c:11:9d:28:9d:e2:41:15:b9:cb:6c:1f:01:
22:16:03:e1:38:0a:eb:dd:c3:f5:7a:7f:d8:90:1a:
eb:15:96:fb:6d:56:22:c8:3e:f3:74:6a:0c:27:c3:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:E2:0F:7D:FF:DA:18:A8:62:47:87:44:62:DD:7E:B1:D5:EC:AA
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/xp3iD33_2hioYkeHRGLdfrHV7Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.253.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fc:07:59:21:45:4e:01:c4:b0:bb:0a:d7:af:cb:95:f3:de:
ac:97:a7:27:5e:29:0d:21:e8:85:3d:ab:a4:10:f3:e7:3f:63:
9b:26:cf:90:2f:1f:fe:17:19:0b:6c:8b:91:88:e9:47:f6:a5:
4e:71:f1:54:62:1d:85:20:65:75:37:da:a2:8c:2c:86:49:d2:
aa:78:e7:0e:f7:37:85:01:4f:8e:69:70:f8:71:c9:77:61:73:
a3:5f:13:4c:29:88:64:3a:af:c2:9e:07:30:42:9d:3d:42:8a:
b3:f6:b3:ee:30:bc:6a:d7:bd:e4:2a:b3:1d:3d:47:92:c8:09:
45:5a:d9:79:c8:04:a8:1a:28:97:ef:00:2b:eb:6f:48:ff:2e:
67:a8:e9:4a:2e:94:19:ce:28:c6:54:ca:01:cf:35:6c:2e:e9:
db:73:34:74:d2:d9:c9:3a:f6:1d:41:42:c2:b4:f0:e0:7c:a0:
10:6f:5c:bf:fb:48:e4:ab:13:59:16:0f:00:3b:8e:07:0b:82:
7b:52:6a:2d:a6:9b:b1:b4:9b:0a:8e:2a:cb:5a:1b:a5:97:4b:
02:66:7c:d8:eb:39:1b:7c:05:ca:28:1d:06:96:9e:4f:39:b6:
3e:5f:3f:6e:bd:03:39:07:fb:6d:22:eb:8a:cb:47:4b:43:32:
59:29:8d:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1SzPy9Qbpipi84erQVAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODU2OTUyMGUwZGE3ZDg3YWE2ODIxMjRhMjc3NGQ2MzY2
NmI1ZTgwHhcNMjMwMTAyMDQ1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjlkZTIwZjdkZmZkYTE4YTg2MjQ3ODc0NDYyZGQ3ZWIxZDVlY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSCpuGRTfDJG7wRbk1RDWMUSo7C6
rbuYbWWbRN2gGCVw65Y6s5hfQCd1YfeOnQEMoJL8zDceDKFVtLZwDKMc/MjDyLlR
IDlyRUy29zStjwbY16x1ZcGUA+KHFUYTWCBvVQt7cE9bl5Um/JOe49dKIl3LJSuY
gYy5rhf6/9CFVgz15Mg6IPUlpceOzqIM2KUikHeXH58ER2kkl0eMZ8YZBwn2CMbu
n9ESVmhOem+wueMdolmKB7WBgScUhI1/muWzr06GChix8UPVs6gPvwkAUeuKkhwR
nSid4kEVuctsHwEiFgPhOArr3cP1en/YkBrrFZb7bVYiyD7zdGoMJ8PgqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMad4g99/9oYqGJHh0Ri3X6x1eyqMB8GA1UdIwQY
MBaAFPyFaVIODafYeqaCEkondNY2ZrXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lWcFVnNE5wOWg2cG9JU1NpZDAxalptdGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYjEzMTMtNzJlMi00YzQ1LTg1Njgt
YmEyZDFhMGFjNDJkLzEveHAzaUQzM18yaGlvWWtlSFJHTGRmckhWN0tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zYjEzMTMtNzJlMi00YzQ1LTg1NjgtYmEyZDFhMGFjNDJk
LzEvX0lWcFVnNE5wOWg2cG9JU1NpZDAxalptdGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSz9MA0G
CSqGSIb3DQEBCwUAA4IBAQBl/AdZIUVOAcSwuwrXr8uV896sl6cnXikNIeiFPauk
EPPnP2ObJs+QLx/+FxkLbIuRiOlH9qVOcfFUYh2FIGV1N9qijCyGSdKqeOcO9zeF
AU+OaXD4ccl3YXOjXxNMKYhkOq/CngcwQp09Qoqz9rPuMLxq173kKrMdPUeSyAlF
Wtl5yASoGiiX7wAr629I/y5nqOlKLpQZzijGVMoBzzVsLunbczR00tnJOvYdQULC
tPDgfKAQb1y/+0jkqxNZFg8AO44HC4J7UmotppuxtJsKjirLWhull0sCZnzY6zkb
fAXKKB0Glp5PObY+Xz9uvQM5B/ttIuuKy0dLQzJZKY2e
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:39 2025 by rpki-client