Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/clZIrkLG6qMnhbwEIW_pAKHru3U.roa
File: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (raw, json)
Hash identifier: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=
Subject key identifier: 72:56:48:AE:42:C6:EA:A3:27:85:BC:04:21:6F:E9:00:A1:EB:BB:75
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D45BF3DFB748B5665E7D91B9FD9B6
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/clZIrkLG6qMnhbwEIW_pAKHru3U.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44599
IP address blocks: 5.252.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:45:bf:3d:fb:74:8b:56:65:e7:d9:1b:9f:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=725648ae42c6eaa32785bc04216fe900a1ebbb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:81:bc:1d:07:8a:ef:0b:a6:e4:c5:fc:15:
a5:11:d7:1b:f6:45:05:d6:b8:69:22:91:d8:b7:d3:
af:f6:fc:db:13:41:32:b6:13:41:4f:b2:32:df:7f:
2c:cb:94:93:fa:31:f0:5e:83:1c:80:82:43:61:c4:
c4:f4:bb:51:fe:41:35:20:02:1b:6d:57:09:41:f3:
9e:fb:4a:72:5d:7e:6a:8f:52:3a:48:c4:7e:f9:81:
db:bb:d1:b2:db:34:7e:0a:a7:e8:40:39:65:0b:36:
4a:2d:3f:6d:f5:98:46:84:c0:86:1e:62:6a:9c:5b:
8a:4e:fe:f3:2b:ef:5e:ef:cf:a8:1a:e3:f3:f3:00:
8f:f0:b0:be:ab:3a:6b:a3:ea:98:88:31:b7:0b:8b:
19:b0:b2:31:c8:88:70:7d:42:97:8a:b1:99:d4:9b:
ba:0d:eb:aa:76:c6:28:9e:72:ec:cf:3c:aa:60:2b:
eb:b9:9d:72:65:43:a1:69:04:48:4b:1c:e1:53:fb:
b5:7f:d0:e9:2a:a8:fb:31:bb:90:be:2a:20:f3:c8:
e7:94:63:4c:fc:4b:89:02:db:45:ba:a5:b7:b2:76:
8a:51:53:5e:41:9a:44:ff:92:ef:36:c8:42:97:52:
06:08:75:74:aa:fc:0e:e9:df:70:a8:66:16:2a:a1:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:48:AE:42:C6:EA:A3:27:85:BC:04:21:6F:E9:00:A1:EB:BB:75
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/clZIrkLG6qMnhbwEIW_pAKHru3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:c2:81:3c:b5:75:68:9c:45:46:9c:17:2f:ef:1f:97:61:c6:
69:47:b4:09:2e:89:a7:f6:c6:20:4f:a6:b4:f2:26:f6:1b:bc:
24:20:8e:8c:df:8e:2b:4d:41:29:2d:4e:18:77:60:d4:65:0e:
a1:80:e9:f5:de:63:a2:d0:ce:89:f5:37:b7:36:f2:d2:c9:c9:
d3:03:c2:7a:fd:62:2f:45:78:61:e9:e5:94:4e:59:52:ec:cf:
d9:5e:fa:50:1e:5d:a0:26:84:19:37:6b:39:fc:08:41:65:8f:
cd:f8:77:df:d6:39:86:9f:96:66:c2:04:b4:7b:22:d6:3f:72:
3f:f4:48:d5:87:08:d2:1b:85:7e:7a:27:de:cc:aa:0d:d5:3e:
72:e4:a1:6a:16:09:d2:b9:25:d0:82:1f:64:57:9b:d0:c3:1c:
8d:51:25:63:dc:34:4b:a9:50:54:72:4f:a8:e7:1a:b8:43:6c:
a2:6e:87:80:4d:7a:41:f0:82:e0:b2:b2:3e:fa:bf:ef:2b:02:
e0:91:7d:ee:02:22:8c:4d:44:61:0e:1f:ef:98:00:e4:ad:9c:
66:7c:a0:78:63:b8:f4:a8:4f:c2:c6:d4:78:3d:4f:53:8c:f3:
fe:47:39:7a:1b:ae:14:49:54:54:e9:01:4a:0e:ff:01:df:0e:
8d:80:d1:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijUW/Pft0i1Zl59kbn9m2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjUwMTAxMTU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU2NDhhZTQyYzZlYWEzMjc4NWJjMDQyMTZmZTkwMGExZWJiYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb2BvB0Hiu8LpuTF/BWlEdcb9kUF
1rhpIpHYt9Ov9vzbE0EythNBT7Iy338sy5ST+jHwXoMcgIJDYcTE9LtR/kE1IAIb
bVcJQfOe+0pyXX5qj1I6SMR++YHbu9Gy2zR+CqfoQDllCzZKLT9t9ZhGhMCGHmJq
nFuKTv7zK+9e78+oGuPz8wCP8LC+qzpro+qYiDG3C4sZsLIxyIhwfUKXirGZ1Ju6
DeuqdsYonnLszzyqYCvruZ1yZUOhaQRISxzhU/u1f9DpKqj7MbuQviog88jnlGNM
/EuJAttFuqW3snaKUVNeQZpE/5LvNshCl1IGCHV0qvwO6d9wqGYWKqFNyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHJWSK5CxuqjJ4W8BCFv6QCh67t1MB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvY2xaSXJrTEc2cU1uaGJ3RUlXX3BBS0hydTNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBfzoMA0G
CSqGSIb3DQEBCwUAA4IBAQCwwoE8tXVonEVGnBcv7x+XYcZpR7QJLomn9sYgT6a0
8ib2G7wkII6M344rTUEpLU4Yd2DUZQ6hgOn13mOi0M6J9Te3NvLSycnTA8J6/WIv
RXhh6eWUTllS7M/ZXvpQHl2gJoQZN2s5/AhBZY/N+Hff1jmGn5ZmwgS0eyLWP3I/
9EjVhwjSG4V+eifezKoN1T5y5KFqFgnSuSXQgh9kV5vQwxyNUSVj3DRLqVBUck+o
5xq4Q2yiboeATXpB8ILgsrI++r/vKwLgkX3uAiKMTURhDh/vmADkrZxmfKB4Y7j0
qE/CxtR4PU9TjPP+Rzl6G64USVRU6QFKDv8B3w6NgNHy
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:22 2025 by rpki-client