Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/XPoYSSKEzZhU1343uDiSLZiZZw4.roa
File: XPoYSSKEzZhU1343uDiSLZiZZw4.roa (raw, json)
Hash identifier: FtF9GGR+NuEf16ZUh5BMOV0EbZt74J9BYfwZW4Ckzzk=
Subject key identifier: 5C:FA:18:49:22:84:CD:98:54:D7:7E:37:B8:38:92:2D:98:99:67:0E
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 01942068368081922B745A448FF0F70D576E
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/XPoYSSKEzZhU1343uDiSLZiZZw4.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 5.42.64.0/24 maxlen: 24
5.42.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:36:80:81:92:2b:74:5a:44:8f:f0:f7:0d:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cfa18492284cd9854d77e37b838922d9899670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:66:db:aa:32:3d:59:ba:d7:ab:0f:de:54:
24:07:ef:83:6d:17:7d:7a:c9:d5:7f:14:1c:8d:5e:
34:c8:04:0b:9a:59:d9:6b:93:14:52:b8:01:ad:e1:
22:29:33:ba:e4:36:9c:25:c7:36:69:d4:a5:72:1e:
7e:71:32:23:d8:64:78:6a:c0:08:89:9a:14:af:32:
45:bb:1e:ca:a7:1d:3e:23:4b:ed:07:5c:b7:2e:51:
fc:5e:ee:17:28:0f:d8:50:7e:9d:2a:00:4d:b5:e9:
4f:a5:c5:d9:3d:05:9d:10:de:a1:6f:c9:a9:0a:9c:
bc:6d:44:30:e7:9c:ff:c5:9c:16:9c:5d:d7:a9:f5:
c3:20:5b:56:96:22:af:35:0b:98:81:fb:85:b9:7a:
e4:dc:59:2d:b3:28:ba:9c:ef:3e:46:e5:35:f5:01:
2d:db:36:37:34:29:71:00:d5:0d:88:f9:dc:f9:cd:
0b:9f:e9:78:fb:7b:cb:e3:01:07:38:15:eb:40:a0:
60:8c:6f:26:4a:d8:77:5f:38:15:52:7f:e5:d3:a9:
fd:79:f0:bf:42:52:f4:9e:5b:ae:0b:31:91:29:04:
6d:94:60:bf:e2:04:b2:74:b9:24:78:a2:3e:66:08:
21:19:d3:c2:e0:a1:2b:a6:85:27:16:db:38:26:92:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:18:49:22:84:CD:98:54:D7:7E:37:B8:38:92:2D:98:99:67:0E
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/XPoYSSKEzZhU1343uDiSLZiZZw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.64.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:72:a1:d5:77:dc:96:56:e4:e1:11:e1:8c:85:65:42:fb:5b:
8c:17:08:90:9a:ca:7d:9c:a5:0f:f1:a6:ec:05:aa:53:b1:d5:
27:19:7e:ad:cb:93:98:58:9a:be:ab:a8:13:93:90:da:be:c8:
d4:9e:c2:51:dc:b6:f5:db:7b:cb:95:42:b0:3b:3a:f3:b4:ca:
54:6b:c1:88:80:20:aa:24:ea:81:79:28:d7:5d:96:ba:ca:9f:
b4:ab:6a:1d:a2:ea:6c:98:5d:48:bc:2b:ca:86:ff:45:dc:ff:
b3:3d:31:60:00:e4:48:50:93:61:4b:a2:92:9e:f7:bb:7c:82:
72:09:75:55:78:5e:f4:26:e9:33:0a:45:35:91:08:48:23:f7:
58:f3:b1:f2:18:4e:a2:e2:32:df:5f:3f:ad:48:46:5e:c6:b4:
2c:df:0e:b8:db:58:79:4b:51:b5:04:34:2b:c4:7d:ef:2a:c3:
e7:cb:a1:41:e1:2e:14:a2:7d:d2:1d:ee:d7:a5:29:da:05:8a:
0b:c4:5c:22:81:c6:49:ee:45:ec:f2:f0:ad:3d:ab:0e:52:7b:
a4:30:33:b7:f4:b3:9a:60:ec:a9:95:67:64:6b:69:0e:6e:f0:
9c:d0:c6:a7:c6:61:8e:7c:dd:65:bd:9d:a9:93:40:f5:90:1d:
ad:ab:8b:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDaAgZIrdFpEj/D3DVduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjUwMTAxMDU0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2ZhMTg0OTIyODRjZDk4NTRkNzdlMzdiODM4OTIyZDk4OTk2NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPZm26oyPVm616sP3lQkB++DbRd9
esnVfxQcjV40yAQLmlnZa5MUUrgBreEiKTO65DacJcc2adSlch5+cTIj2GR4asAI
iZoUrzJFux7Kpx0+I0vtB1y3LlH8Xu4XKA/YUH6dKgBNtelPpcXZPQWdEN6hb8mp
Cpy8bUQw55z/xZwWnF3XqfXDIFtWliKvNQuYgfuFuXrk3Fktsyi6nO8+RuU19QEt
2zY3NClxANUNiPnc+c0Ln+l4+3vL4wEHOBXrQKBgjG8mSth3XzgVUn/l06n9efC/
QlL0nluuCzGRKQRtlGC/4gSydLkkeKI+ZgghGdPC4KErpoUnFts4JpJk7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFz6GEkihM2YVNd+N7g4ki2YmWcOMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvWFBvWVNTS0V6WmhVMTM0M3VEaVNMWmlaWnc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBSpAMA0G
CSqGSIb3DQEBCwUAA4IBAQBscqHVd9yWVuThEeGMhWVC+1uMFwiQmsp9nKUP8abs
BapTsdUnGX6ty5OYWJq+q6gTk5DavsjUnsJR3Lb123vLlUKwOzrztMpUa8GIgCCq
JOqBeSjXXZa6yp+0q2odoupsmF1IvCvKhv9F3P+zPTFgAORIUJNhS6KSnve7fIJy
CXVVeF70JukzCkU1kQhII/dY87HyGE6i4jLfXz+tSEZexrQs3w6421h5S1G1BDQr
xH3vKsPny6FB4S4Uon3SHe7XpSnaBYoLxFwigcZJ7kXs8vCtPasOUnukMDO39LOa
YOyplWdka2kObvCc0ManxmGOfN1lvZ2pk0D1kB2tq4va
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:10 2025 by rpki-client