Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/REJSEHBqBmUbahN6hVMSYy6LHI0.roa
File: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (raw, json)
Hash identifier: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=
Subject key identifier: 44:42:52:10:70:6A:06:65:1B:6A:13:7A:85:53:12:63:2E:8B:1C:8D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019425FC25DB84370620BD6A20F0D2C1BEAE
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/REJSEHBqBmUbahN6hVMSYy6LHI0.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:25:db:84:37:06:20:bd:6a:20:f0:d2:c1:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44425210706a06651b6a137a855312632e8b1c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:28:4b:5f:67:63:9f:41:fe:11:c1:ab:a3:
c8:9c:eb:56:58:11:47:53:08:cb:63:da:97:50:47:
cc:6b:ac:30:c7:d1:5e:b0:c6:62:3c:71:cd:a9:72:
6f:12:ec:ad:50:84:7c:6d:98:0b:a6:1a:4b:46:5e:
a7:3d:1f:12:e6:b7:c4:c5:9d:b7:48:ab:40:7c:a7:
d4:86:ed:ac:35:b6:69:30:b2:64:30:79:6a:22:1c:
7b:77:4d:74:0e:de:47:73:29:f0:c3:6a:19:bd:81:
b0:0c:81:12:61:28:04:71:89:13:ab:5c:31:13:7e:
de:5e:d8:a2:b1:32:ea:81:b8:92:12:9e:fd:b2:1d:
e7:08:74:28:30:75:d7:96:ea:87:88:c3:a8:24:26:
a4:86:98:37:2a:3d:18:f5:87:80:c4:81:73:bc:c7:
90:36:0d:64:ea:f7:c0:1a:8e:70:ac:1b:4a:83:cd:
96:9e:94:73:ec:88:59:ea:79:ee:85:15:27:7c:a6:
8f:4e:b8:15:80:39:25:61:14:9b:82:1b:da:9c:b6:
b7:a5:4a:57:3f:ed:40:9d:1c:5b:8c:63:7b:58:b9:
03:10:86:5f:99:04:9c:34:df:a8:67:4e:e7:b9:62:
50:9b:43:13:7c:c8:a3:bb:84:02:cf:48:44:5c:7a:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:52:10:70:6A:06:65:1B:6A:13:7A:85:53:12:63:2E:8B:1C:8D
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/REJSEHBqBmUbahN6hVMSYy6LHI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
79:8a:75:51:e3:ee:b6:e4:6c:3e:6a:6b:2d:ea:8a:e5:d7:2b:
7a:15:5b:90:19:00:b5:b9:e4:07:60:10:1b:46:1b:59:81:f7:
cf:aa:6c:91:44:e8:c6:32:00:9c:dc:5a:76:44:f2:31:56:af:
60:56:58:ad:5b:ef:ec:22:96:89:2c:43:dc:a6:3a:39:5a:9e:
a6:0d:50:71:45:e4:8b:3d:63:39:ae:c2:b5:07:65:75:d0:6d:
38:f0:60:c3:8a:48:08:46:3a:56:e2:c6:1a:53:c0:c1:53:c8:
f6:05:4a:fa:49:71:8d:e3:63:3e:84:04:9e:a6:e4:2a:b0:fe:
56:a9:d7:f2:03:08:71:af:40:da:65:51:d7:78:94:a6:cb:68:
3f:00:f5:3a:3e:3a:f6:dc:e5:af:3c:b1:a2:35:40:5f:33:75:
64:f4:c8:70:b8:0e:fe:f1:73:e4:aa:df:36:08:d8:0b:36:91:
c0:45:8e:a5:eb:1e:69:30:73:f8:4d:d2:7f:96:e7:62:cd:91:
8d:09:66:8a:fc:b2:83:10:7d:6f:78:2d:a2:25:9a:67:84:3b:
c7:30:72:3d:cb:bf:1c:f1:1c:f5:6a:50:e3:e4:2e:ba:e1:c4:
ff:12:f1:f1:3e:a5:28:59:5c:60:9b:39:af:25:91:ab:10:21:
91:98:f8:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/CXbhDcGIL1qIPDSwb6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyNjczMmMyZjAxOTNiYzNkZTRlOGQzYWJjMTVmNGJh
ZWQ2MmQwHhcNMjUwMTAyMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQyNTIxMDcwNmEwNjY1MWI2YTEzN2E4NTUzMTI2MzJlOGIxYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOMoS19nY59B/hHBq6PInOtWWBFH
UwjLY9qXUEfMa6wwx9FesMZiPHHNqXJvEuytUIR8bZgLphpLRl6nPR8S5rfExZ23
SKtAfKfUhu2sNbZpMLJkMHlqIhx7d010Dt5Hcynww2oZvYGwDIESYSgEcYkTq1wx
E37eXtiisTLqgbiSEp79sh3nCHQoMHXXluqHiMOoJCakhpg3Kj0Y9YeAxIFzvMeQ
Ng1k6vfAGo5wrBtKg82WnpRz7IhZ6nnuhRUnfKaPTrgVgDklYRSbghvanLa3pUpX
P+1AnRxbjGN7WLkDEIZfmQScNN+oZ07nuWJQm0MTfMiju4QCz0hEXHr7UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERCUhBwagZlG2oTeoVTEmMuixyNMB8GA1UdIwQY
MBaAFHyRJnMsLwGTvD3k6NOrwV9LrtYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2Qt
ZDZiNzMwMjY2ZTc2LzEvUkVKU0VIQnFCbVViYWhONmhWTVNZeTZMSEkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85NDYzMmUtOTlkMy00YzIxLWI2N2QtZDZiNzMwMjY2ZTc2
LzEvZkpFbWN5d3ZBWk84UGVUbzA2dkJYMHV1MWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfwIMA0G
CSqGSIb3DQEBCwUAA4IBAQB5inVR4+625Gw+amst6orl1yt6FVuQGQC1ueQHYBAb
RhtZgffPqmyRROjGMgCc3Fp2RPIxVq9gVlitW+/sIpaJLEPcpjo5Wp6mDVBxReSL
PWM5rsK1B2V10G048GDDikgIRjpW4sYaU8DBU8j2BUr6SXGN42M+hASepuQqsP5W
qdfyAwhxr0DaZVHXeJSmy2g/APU6Pjr23OWvPLGiNUBfM3Vk9MhwuA7+8XPkqt82
CNgLNpHARY6l6x5pMHP4TdJ/ludizZGNCWaK/LKDEH1veC2iJZpnhDvHMHI9y78c
8Rz1alDj5C664cT/EvHxPqUoWVxgmzmvJZGrECGRmPhu
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:06 2025 by rpki-client