Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5jE-VSN-Nu61B6ynLkQWsSPDljw.roa
File: 5jE-VSN-Nu61B6ynLkQWsSPDljw.roa (raw, json)
Hash identifier: Pv9+hZ2OR+8PDBH7BbyE7yv24FCsk0ry0sYnWGXwUhI=
Subject key identifier: E6:31:3E:55:23:7E:36:EE:B5:07:AC:A7:2E:44:16:B1:23:C3:96:3C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274852C1A408428320A2C5455558A781
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5jE-VSN-Nu61B6ynLkQWsSPDljw.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272368
IP address blocks: 141.136.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:c1:a4:08:42:83:20:a2:c5:45:55:58:a7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6313e55237e36eeb507aca72e4416b123c3963c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:84:7b:21:b9:03:70:b3:a0:b4:2f:4e:ba:
96:bf:c5:1a:c8:56:c8:66:cd:04:60:4d:1d:36:d2:
67:18:51:a4:15:70:eb:ba:30:d1:a3:77:ea:b9:e5:
e2:d0:bd:3d:49:2c:84:0c:85:89:84:35:06:2f:c4:
6d:36:0b:1b:92:fb:bc:f3:23:7a:7e:2a:d9:bc:dc:
81:a3:cf:df:93:7f:e1:b8:70:9c:42:dd:cf:1a:07:
81:44:4e:8d:26:04:96:b3:b7:77:78:f2:43:d2:f6:
5f:b5:4e:f1:73:57:9b:84:74:76:15:ca:24:fe:ab:
67:24:93:96:e4:26:6e:d1:6b:8e:df:20:25:74:e4:
a2:36:0d:60:6f:80:0f:8b:d7:32:e1:c3:85:b7:82:
de:07:2b:46:fd:f3:a9:e4:98:d4:7e:d1:2b:2f:f9:
64:6f:21:55:c7:00:bb:f8:8d:14:2b:29:2e:c8:14:
0c:94:1a:35:1e:0a:b6:ba:32:d8:6e:d5:da:1e:f6:
ad:c7:fb:fc:17:3b:0c:61:6f:f0:fd:e3:1e:71:c1:
36:c6:4b:ce:80:23:d7:f7:5f:94:b6:dd:b7:e5:ab:
d4:90:d7:23:68:b5:80:c7:62:ef:77:01:84:f5:cc:
b4:f3:70:17:60:b2:2d:54:77:a2:70:2a:d1:3e:50:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:3E:55:23:7E:36:EE:B5:07:AC:A7:2E:44:16:B1:23:C3:96:3C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5jE-VSN-Nu61B6ynLkQWsSPDljw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.62.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b8:0e:66:c9:0a:ba:fc:ce:01:1b:1b:75:28:9b:8c:34:0d:
66:f2:f5:ae:52:f4:44:62:3f:4b:c9:ff:df:5f:74:95:6e:9f:
63:c3:af:48:7f:ed:bb:62:01:4a:e1:b5:eb:71:39:f4:01:24:
8b:de:4d:dd:60:ed:0e:22:a4:b5:71:f6:b8:db:14:87:0b:9c:
77:4a:d6:df:42:2f:90:99:c7:3f:36:10:1d:e9:f8:68:0d:a3:
81:23:dd:05:81:52:e1:c9:8c:9b:cf:e6:cc:a2:97:39:2e:93:
0c:62:0d:0f:95:a4:fa:74:9a:45:d3:db:95:1f:42:d8:ab:2c:
90:5a:ce:a8:f8:61:da:15:db:44:26:77:f1:b9:4f:c9:53:3e:
11:c3:f1:57:f5:8c:12:76:a9:fb:1e:49:2c:bf:5d:d6:33:be:
93:fb:36:7f:d1:d4:da:ae:db:ee:55:cc:6d:77:68:ce:de:74:
81:29:5c:cf:5a:d7:f6:02:8a:80:7b:38:e8:97:0c:6b:bc:52:
19:0d:8c:f6:7a:c4:f1:aa:37:9b:08:a2:9f:fa:6b:fc:1c:0f:
d2:8f:6c:57:38:f1:f3:82:40:43:e4:cc:75:66:c2:98:e7:f9:
52:84:6e:4f:c8:1a:dc:b7:5c:7d:04:65:d4:25:68:28:03:c8:
5a:ee:35:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFLBpAhCgyCixUVVWKeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMTAyMTM1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjMxM2U1NTIzN2UzNmVlYjUwN2FjYTcyZTQ0MTZiMTIzYzM5NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2SEeyG5A3CzoLQvTrqWv8UayFbI
Zs0EYE0dNtJnGFGkFXDrujDRo3fqueXi0L09SSyEDIWJhDUGL8RtNgsbkvu88yN6
firZvNyBo8/fk3/huHCcQt3PGgeBRE6NJgSWs7d3ePJD0vZftU7xc1ebhHR2Fcok
/qtnJJOW5CZu0WuO3yAldOSiNg1gb4APi9cy4cOFt4LeBytG/fOp5JjUftErL/lk
byFVxwC7+I0UKykuyBQMlBo1Hgq2ujLYbtXaHvatx/v8FzsMYW/w/eMeccE2xkvO
gCPX91+Utt235avUkNcjaLWAx2LvdwGE9cy083AXYLItVHeicCrRPlCG6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYxPlUjfjbutQespy5EFrEjw5Y8MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvNWpFLVZTTi1OdTYxQjZ5bkxrUVdzU1BEbGp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYg+MA0G
CSqGSIb3DQEBCwUAA4IBAQB5uA5myQq6/M4BGxt1KJuMNA1m8vWuUvREYj9Lyf/f
X3SVbp9jw69If+27YgFK4bXrcTn0ASSL3k3dYO0OIqS1cfa42xSHC5x3StbfQi+Q
mcc/NhAd6fhoDaOBI90FgVLhyYybz+bMopc5LpMMYg0PlaT6dJpF09uVH0LYqyyQ
Ws6o+GHaFdtEJnfxuU/JUz4Rw/FX9YwSdqn7Hkksv13WM76T+zZ/0dTartvuVcxt
d2jO3nSBKVzPWtf2AoqAezjolwxrvFIZDYz2esTxqjebCKKf+mv8HA/Sj2xXOPHz
gkBD5Mx1ZsKY5/lShG5PyBrct1x9BGXUJWgoA8ha7jXd
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:13 2025 by rpki-client