Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/i62O_MmJVxX5stilBM6ekxXZTcc.roa
File: i62O_MmJVxX5stilBM6ekxXZTcc.roa (raw, json)
Hash identifier: HXOpWXYvRGkSwta1UdGK/gBWcC7bHQK2/modb5CXFXc=
Subject key identifier: 8B:AD:8E:FC:C9:89:57:15:F9:B2:D8:A5:04:CE:9E:93:15:D9:4D:C7
Certificate issuer: /CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Certificate serial: 0182CC1EA16E97812499E6ED664D27884A7D
Authority key identifier: 5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/i62O_MmJVxX5stilBM6ekxXZTcc.roa
Signing time: Tue 23 Aug 2022 19:12:15 +0000
ROA not before: Tue 23 Aug 2022 19:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202496
IP address blocks: 5.42.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cc:1e:a1:6e:97:81:24:99:e6:ed:66:4d:27:88:4a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Validity
Not Before: Aug 23 19:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bad8efcc9895715f9b2d8a504ce9e9315d94dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:25:be:d5:10:32:50:4b:5d:1a:a0:81:c0:
e7:59:29:ac:11:77:27:cb:6f:f8:e9:8c:b8:32:bf:
45:ce:ca:08:10:0f:25:a1:c6:33:fe:0f:53:9e:cd:
9c:c8:02:c6:7a:16:07:c8:24:54:ad:99:3f:63:f6:
86:2a:47:c1:54:b6:59:c7:1c:01:59:35:b7:1f:21:
1c:94:ba:ea:d1:47:45:b5:82:1c:07:39:9a:1d:29:
a2:5b:94:34:6e:42:e1:bc:a6:56:83:87:98:a8:c7:
6a:0b:1e:67:6b:f6:23:18:5e:38:b3:01:35:b0:c6:
7a:8c:39:7c:ce:1f:80:f3:04:e1:62:f5:72:73:82:
47:80:b9:22:c3:e6:ce:22:26:6d:ea:36:42:a5:91:
8e:c9:e8:d6:14:a7:84:cf:6f:ad:43:86:da:7d:fa:
01:2d:d2:1a:cf:6f:3a:3e:6c:61:02:8e:f1:7d:e8:
bf:de:b4:05:fd:68:de:dd:6f:da:20:0f:a5:8a:d1:
07:05:9d:e2:1d:fe:5c:23:b8:ae:e8:4f:d3:b0:f4:
4b:42:a1:88:9e:f7:53:8c:70:d8:3d:8c:45:c4:17:
8d:a5:4d:76:34:93:d6:e5:61:ca:c3:73:3f:14:95:
23:eb:66:66:32:df:8a:d2:0c:9b:dc:19:d5:e9:2e:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:8E:FC:C9:89:57:15:F9:B2:D8:A5:04:CE:9E:93:15:D9:4D:C7
X509v3 Authority Key Identifier:
keyid:5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/i62O_MmJVxX5stilBM6ekxXZTcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:74:65:da:d9:d4:79:7e:3a:1d:83:a6:0c:6d:c8:7f:05:4a:
3a:9e:16:50:2a:df:2f:f1:a0:b3:eb:13:4b:d1:9d:1b:2a:2f:
58:12:d1:a8:c7:4c:e0:db:a8:cc:c5:7e:18:c7:7e:4b:13:d6:
10:84:ee:03:c3:be:85:d1:c8:28:c1:b5:b8:48:34:25:72:4f:
7e:cb:f0:02:d0:f1:d7:a8:f6:b0:65:6e:b8:8c:d6:0c:31:be:
8c:a8:27:00:32:25:8a:a9:47:1c:d5:fa:82:04:2c:f8:a7:ad:
8a:47:89:16:eb:fb:ee:46:1c:74:63:8e:27:80:d4:16:b1:a8:
e6:a6:d6:35:90:51:29:90:ee:f7:ba:a7:d0:3d:94:44:ee:0d:
fa:c9:d5:ea:5a:2a:b5:17:bc:c3:ac:b5:b9:82:74:94:3d:5c:
bc:54:0a:ed:50:4a:b0:05:e3:a7:37:ad:a7:2e:7e:a1:90:da:
21:f6:ee:fd:89:26:40:7e:07:e3:1e:8a:5e:fd:48:a7:2e:ce:
92:32:4f:d7:54:29:9d:07:e1:bb:41:0f:bc:90:a2:8b:7c:b9:
69:68:ed:51:bc:67:78:23:02:3d:e3:c0:09:da:e2:ce:a2:d6:
bb:95:d3:86:d0:54:34:8d:46:f8:1e:9a:13:f6:5e:0e:56:1a:
31:99:df:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLMHqFul4EkmebtZk0niEp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWNjMDdjZmE0ZjBkNjVlNjhhOTUwMTljMjU2ZmQ3ZWRi
NjZmNDQwHhcNMjIwODIzMTkxMjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmFkOGVmY2M5ODk1NzE1ZjliMmQ4YTUwNGNlOWU5MzE1ZDk0ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mMlvtUQMlBLXRqggcDnWSmsEXcn
y2/46Yy4Mr9FzsoIEA8locYz/g9Tns2cyALGehYHyCRUrZk/Y/aGKkfBVLZZxxwB
WTW3HyEclLrq0UdFtYIcBzmaHSmiW5Q0bkLhvKZWg4eYqMdqCx5na/YjGF44swE1
sMZ6jDl8zh+A8wThYvVyc4JHgLkiw+bOIiZt6jZCpZGOyejWFKeEz2+tQ4baffoB
LdIaz286PmxhAo7xfei/3rQF/Wje3W/aIA+litEHBZ3iHf5cI7iu6E/TsPRLQqGI
nvdTjHDYPYxFxBeNpU12NJPW5WHKw3M/FJUj62ZmMt+K0gyb3BnV6S7QXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIutjvzJiVcV+bLYpQTOnpMV2U3HMB8GA1UdIwQY
MBaAFFxcwHz6Tw1l5oqVAZwlb9fttm9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZ6QWZQcFBEV1htaXBVQm5DVnYxLTIyYjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZjk1YTQtOTc4NS00NTZhLTk5OWIt
MGIyMmM3ODBjYjhkLzEvaTYyT19NbUpWeFg1c3RpbEJNNmVreFhaVGNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wZjk1YTQtOTc4NS00NTZhLTk5OWItMGIyMmM3ODBjYjhk
LzEvWEZ6QWZQcFBEV1htaXBVQm5DVnYxLTIyYjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrQMA0G
CSqGSIb3DQEBCwUAA4IBAQA8dGXa2dR5fjodg6YMbch/BUo6nhZQKt8v8aCz6xNL
0Z0bKi9YEtGox0zg26jMxX4Yx35LE9YQhO4Dw76F0cgowbW4SDQlck9+y/AC0PHX
qPawZW64jNYMMb6MqCcAMiWKqUcc1fqCBCz4p62KR4kW6/vuRhx0Y44ngNQWsajm
ptY1kFEpkO73uqfQPZRE7g36ydXqWiq1F7zDrLW5gnSUPVy8VArtUEqwBeOnN62n
Ln6hkNoh9u79iSZAfgfjHope/UinLs6SMk/XVCmdB+G7QQ+8kKKLfLlpaO1RvGd4
IwI948AJ2uLOota7ldOG0FQ0jUb4HpoT9l4OVhoxmd95
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:08 2025 by rpki-client