Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/w9mrK6ESDJwpym_K-Qa2QNXA43E.roa
File: w9mrK6ESDJwpym_K-Qa2QNXA43E.roa (raw, json)
Hash identifier: +yt7bCTqlyZuNq+4OR5yDFNzNMXTPfCP45oFKBuczEc=
Subject key identifier: C3:D9:AB:2B:A1:12:0C:9C:29:CA:6F:CA:F9:06:B6:40:D5:C0:E3:71
Certificate issuer: /CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Certificate serial: 0181F6495526706516E9001B249F7C587B3F
Authority key identifier: B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/w9mrK6ESDJwpym_K-Qa2QNXA43E.roa
Signing time: Wed 13 Jul 2022 06:40:09 +0000
ROA not before: Wed 13 Jul 2022 06:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 5.253.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:49:55:26:70:65:16:e9:00:1b:24:9f:7c:58:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ddd07ccd9da3ad3e80a2a7ac34ac9666d7d3dd
Validity
Not Before: Jul 13 06:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d9ab2ba1120c9c29ca6fcaf906b640d5c0e371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:8c:73:3b:6c:a0:ff:f5:f4:0a:fa:a4:e6:
f4:fb:63:36:ec:40:3a:ff:59:7b:51:b2:83:b9:0a:
68:6f:ae:b3:d4:76:d3:0a:ef:ec:62:7f:76:4c:32:
dd:c3:22:b0:84:fd:f6:82:64:7e:bc:52:8a:03:f0:
50:4f:0f:d9:19:db:6e:e8:69:ed:60:4e:ca:36:b3:
ac:cf:f3:94:6c:a0:37:f5:91:00:32:6a:05:ba:9e:
6a:84:3e:d0:6c:bb:a4:30:b1:05:24:75:98:29:0d:
6c:60:51:ff:2c:5a:6d:60:dd:d1:8f:c7:75:fb:32:
50:0f:c1:b7:b3:81:f8:8f:de:14:3b:52:08:05:d1:
b3:34:f8:30:b7:b5:86:97:aa:c2:c0:bb:a8:33:b1:
df:1c:e3:c1:e8:c7:87:32:bf:3e:49:38:6b:5d:04:
5c:98:88:53:80:9e:6b:0b:ad:6d:66:70:3d:2e:ae:
fa:e9:50:69:22:40:ed:9e:3e:a6:51:b9:b0:0f:ef:
4a:31:27:64:e2:11:2f:d6:2e:40:97:db:37:96:f4:
2e:fc:fc:a5:94:62:2c:17:f7:ff:40:08:27:4a:c0:
c7:55:9b:cc:bc:6e:35:9a:3c:bb:9f:d9:f7:53:07:
64:08:1e:4c:4e:d5:ef:3e:ed:2e:1a:3d:7e:c5:44:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:AB:2B:A1:12:0C:9C:29:CA:6F:CA:F9:06:B6:40:D5:C0:E3:71
X509v3 Authority Key Identifier:
keyid:B2:DD:D0:7C:CD:9D:A3:AD:3E:80:A2:A7:AC:34:AC:96:66:D7:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st3QfM2do60-gKKnrDSslmbX090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/w9mrK6ESDJwpym_K-Qa2QNXA43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7dc9ce-9862-4277-823f-5e090a30f4dc/1/st3QfM2do60-gKKnrDSslmbX090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.158.0/24
Signature Algorithm: sha256WithRSAEncryption
80:08:dc:0d:1e:a1:dc:c3:44:e5:9c:66:9b:7e:f1:c3:17:c7:
d3:53:e2:d8:8b:4d:17:1a:f9:7d:0f:67:24:ee:48:c4:1e:a9:
60:f8:38:b7:a9:d9:20:47:f0:56:77:6e:e7:4b:d8:87:fd:18:
0a:fe:d6:c8:62:a5:3c:c7:0a:21:94:e7:6d:9c:d6:ed:4e:37:
94:05:ab:e5:e1:b1:c4:39:c1:68:15:08:a2:e8:1b:98:47:33:
f3:ec:cc:b7:78:f1:b7:72:d2:ca:e2:8c:a4:55:68:e9:6d:dd:
2f:61:96:95:ae:87:08:a1:9f:56:f2:88:d0:95:af:ce:23:13:
be:58:20:fb:ba:d7:df:42:89:f4:61:3b:25:09:a5:2b:07:a7:
55:84:1f:4b:df:81:65:84:79:74:f4:12:39:c9:09:6d:6d:40:
2e:6a:a3:17:09:f3:c0:cc:43:c6:d3:fe:73:a1:b0:19:b8:08:
83:ad:f4:15:fe:bc:c6:29:a2:fd:f2:7b:5c:21:0f:a1:93:84:
73:2a:39:b0:88:28:83:cf:0c:84:61:da:26:61:9a:c5:2f:66:
c9:96:ca:3f:e6:90:9e:7c:07:27:6b:51:b7:ed:70:63:45:e3:
48:5f:ad:27:65:be:ad:da:60:f5:33:2f:2f:e6:ae:01:32:5b:
ac:d9:35:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH2SVUmcGUW6QAbJJ98WHs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGRkMDdjY2Q5ZGEzYWQzZTgwYTJhN2FjMzRhYzk2NjZk
N2QzZGQwHhcNMjIwNzEzMDY0MDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Q5YWIyYmExMTIwYzljMjljYTZmY2FmOTA2YjY0MGQ1YzBlMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p+McztsoP/19Ar6pOb0+2M27EA6
/1l7UbKDuQpob66z1HbTCu/sYn92TDLdwyKwhP32gmR+vFKKA/BQTw/ZGdtu6Gnt
YE7KNrOsz/OUbKA39ZEAMmoFup5qhD7QbLukMLEFJHWYKQ1sYFH/LFptYN3Rj8d1
+zJQD8G3s4H4j94UO1IIBdGzNPgwt7WGl6rCwLuoM7HfHOPB6MeHMr8+SThrXQRc
mIhTgJ5rC61tZnA9Lq766VBpIkDtnj6mUbmwD+9KMSdk4hEv1i5Al9s3lvQu/Pyl
lGIsF/f/QAgnSsDHVZvMvG41mjy7n9n3UwdkCB5MTtXvPu0uGj1+xUSmAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPZqyuhEgycKcpvyvkGtkDVwONxMB8GA1UdIwQY
MBaAFLLd0HzNnaOtPoCip6w0rJZm19PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3QzUWZNMmRvNjAtZ0tLbnJEU3NsbWJYMDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83ZGM5Y2UtOTg2Mi00Mjc3LTgyM2Yt
NWUwOTBhMzBmNGRjLzEvdzltcks2RVNESndweW1fSy1RYTJRTlhBNDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83ZGM5Y2UtOTg2Mi00Mjc3LTgyM2YtNWUwOTBhMzBmNGRj
LzEvc3QzUWZNMmRvNjAtZ0tLbnJEU3NsbWJYMDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf2eMA0G
CSqGSIb3DQEBCwUAA4IBAQCACNwNHqHcw0TlnGabfvHDF8fTU+LYi00XGvl9D2ck
7kjEHqlg+Di3qdkgR/BWd27nS9iH/RgK/tbIYqU8xwohlOdtnNbtTjeUBavl4bHE
OcFoFQii6BuYRzPz7My3ePG3ctLK4oykVWjpbd0vYZaVrocIoZ9W8ojQla/OIxO+
WCD7utffQon0YTslCaUrB6dVhB9L34FlhHl09BI5yQltbUAuaqMXCfPAzEPG0/5z
obAZuAiDrfQV/rzGKaL98ntcIQ+hk4RzKjmwiCiDzwyEYdomYZrFL2bJlso/5pCe
fAcna1G37XBjReNIX60nZb6t2mD1My8v5q4BMlus2TVn
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:15:12 2025 by rpki-client