Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/0ullyIWp7EpGBQCcCiGR5TxPcqg.roa
File: 0ullyIWp7EpGBQCcCiGR5TxPcqg.roa (raw, json)
Hash identifier: UAfsyLbL4xBCq1a1j/3SJSYRTBP/yK7xgpCpe5svJow=
Subject key identifier: D2:E9:65:C8:85:A9:EC:4A:46:05:00:9C:0A:21:91:E5:3C:4F:72:A8
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0194206838B16E556C1765D269E50299A8B2
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/0ullyIWp7EpGBQCcCiGR5TxPcqg.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216334
IP address blocks: 5.42.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:38:b1:6e:55:6c:17:65:d2:69:e5:02:99:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e965c885a9ec4a4605009c0a2191e53c4f72a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:af:a9:2d:f8:d5:74:93:44:30:20:c5:bf:
7f:a4:77:cc:2f:b3:03:ea:cc:d9:cd:24:be:84:03:
28:01:c9:11:b6:df:50:1f:cc:77:63:cc:4e:bc:93:
2b:77:ff:50:c8:2a:b2:43:68:25:3c:bf:f3:43:51:
f8:41:0c:f3:e2:07:e9:71:c7:4e:6c:62:5b:5f:22:
c8:33:60:89:6c:2f:12:97:c4:c0:e9:46:89:5c:d7:
a5:9f:f9:bb:6a:47:84:34:98:ee:e9:a4:8d:41:94:
5b:f7:d2:44:7c:ca:ad:90:b6:8f:56:ba:72:70:f0:
99:ba:0b:d6:9a:35:84:73:33:08:2c:32:dd:aa:40:
d0:15:e8:26:3f:b8:90:42:88:18:0d:4d:64:d2:29:
42:f6:5f:5f:70:75:2e:ec:c5:e8:65:d2:33:89:00:
df:67:65:e3:14:69:07:81:0c:22:23:c0:5f:19:e1:
c0:eb:94:e0:a9:33:00:58:67:5e:91:4d:bb:11:dd:
a5:72:f0:b6:6a:1e:25:1a:82:77:90:dc:3e:cd:75:
61:20:66:98:77:c0:4a:fe:ad:1c:e6:2a:e7:a0:10:
34:e6:f5:ae:d0:80:6f:00:0e:e8:71:b1:15:f5:0e:
a9:93:4d:77:02:a2:be:4b:f2:16:3d:b0:50:f4:2d:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:65:C8:85:A9:EC:4A:46:05:00:9C:0A:21:91:E5:3C:4F:72:A8
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/0ullyIWp7EpGBQCcCiGR5TxPcqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.98.0/24
Signature Algorithm: sha256WithRSAEncryption
30:03:da:6a:91:f9:79:c5:ca:9b:95:e6:96:78:46:b8:16:32:
f8:90:02:3d:13:52:70:9e:16:1e:ab:67:dc:7a:ad:f6:41:07:
e5:36:f4:b1:08:5e:d8:1f:60:87:34:f2:ce:20:21:21:4e:20:
05:d9:ca:4b:c2:74:f0:8c:74:9a:64:4f:5f:ef:19:96:3d:17:
98:34:76:7c:df:91:c9:01:d5:3b:4e:2b:0c:c1:c4:89:24:b7:
38:da:f7:87:2f:cf:c4:d7:a2:96:dd:77:0b:77:76:01:f2:f3:
48:3b:0c:f9:69:86:3d:77:a3:a3:c5:c8:84:a2:97:58:e9:74:
16:2c:29:1e:d4:68:63:f8:1e:6b:72:3c:81:1e:b5:36:f9:c4:
a7:53:61:b2:a3:68:b2:6b:f8:ac:8a:11:c5:55:80:ed:65:72:
48:ea:d7:e2:bd:a7:35:71:83:e8:84:96:ad:a4:21:7a:c3:2a:
3d:dc:eb:09:9b:92:38:a6:2f:d9:60:97:7c:1d:80:19:ce:8e:
94:e2:44:cd:a0:64:4c:73:53:90:47:90:cb:46:db:90:4f:de:
05:43:92:9a:f4:5d:4c:39:f2:39:29:9f:53:0c:d8:f6:6a:0c:
90:38:be:0c:4a:e0:8c:04:8a:a9:be:50:0b:14:29:69:fe:3c:
32:51:db:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDixblVsF2XSaeUCmaiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjUwMTAxMDU0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmU5NjVjODg1YTllYzRhNDYwNTAwOWMwYTIxOTFlNTNjNGY3MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx36vqS341XSTRDAgxb9/pHfML7MD
6szZzSS+hAMoAckRtt9QH8x3Y8xOvJMrd/9QyCqyQ2glPL/zQ1H4QQzz4gfpccdO
bGJbXyLIM2CJbC8Sl8TA6UaJXNeln/m7akeENJju6aSNQZRb99JEfMqtkLaPVrpy
cPCZugvWmjWEczMILDLdqkDQFegmP7iQQogYDU1k0ilC9l9fcHUu7MXoZdIziQDf
Z2XjFGkHgQwiI8BfGeHA65TgqTMAWGdekU27Ed2lcvC2ah4lGoJ3kNw+zXVhIGaY
d8BK/q0c5irnoBA05vWu0IBvAA7ocbEV9Q6pk013AqK+S/IWPbBQ9C2+CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLpZciFqexKRgUAnAohkeU8T3KoMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvMHVsbHlJV3A3RXBHQlFDY0NpR1I1VHhQY3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSpiMA0G
CSqGSIb3DQEBCwUAA4IBAQAwA9pqkfl5xcqbleaWeEa4FjL4kAI9E1JwnhYeq2fc
eq32QQflNvSxCF7YH2CHNPLOICEhTiAF2cpLwnTwjHSaZE9f7xmWPReYNHZ835HJ
AdU7TisMwcSJJLc42veHL8/E16KW3XcLd3YB8vNIOwz5aYY9d6OjxciEopdY6XQW
LCke1Ghj+B5rcjyBHrU2+cSnU2Gyo2iya/isihHFVYDtZXJI6tfivac1cYPohJat
pCF6wyo93OsJm5I4pi/ZYJd8HYAZzo6U4kTNoGRMc1OQR5DLRtuQT94FQ5Ka9F1M
OfI5KZ9TDNj2agyQOL4MSuCMBIqpvlALFClp/jwyUdup
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:41 2025 by rpki-client