Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/UZiFFztRfeKmfRhqu-DMXiBHSwY.roa
File: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (raw, json)
Hash identifier: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=
Subject key identifier: 51:98:85:17:3B:51:7D:E2:A6:7D:18:6A:BB:E0:CC:5E:20:47:4B:06
Certificate issuer: /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial: 019428267C36A0FF60A417E0C1593AB0EA73
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/UZiFFztRfeKmfRhqu-DMXiBHSwY.roa
Signing time: Thu 02 Jan 2025 17:53:18 +0000
ROA not before: Thu 02 Jan 2025 17:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 5.45.16.0/23 maxlen: 23
5.45.18.0/24 maxlen: 24
2a01:6c8:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:7c:36:a0:ff:60:a4:17:e0:c1:59:3a:b0:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
Validity
Not Before: Jan 2 17:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=519885173b517de2a67d186abbe0cc5e20474b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:bf:c9:38:ce:b4:47:e7:8f:d2:76:53:e3:
ca:cc:fe:46:d4:d2:17:13:72:8c:cb:0f:b6:71:51:
33:a4:f3:95:6d:e7:29:db:60:90:cb:22:ea:08:09:
07:69:d9:53:64:42:d4:5a:e8:7d:2a:9c:78:29:22:
04:83:be:c9:5c:6d:75:66:f7:61:23:03:86:26:6b:
98:8e:14:a3:9e:2b:84:1d:90:c9:dc:3d:0b:de:62:
5b:14:9d:50:73:29:33:af:f7:80:b5:6f:6b:a0:19:
70:a5:53:23:b3:97:37:f2:a0:91:2b:8d:4c:4f:3f:
1a:f1:23:f5:9f:69:a9:05:68:14:6c:2d:e5:60:3e:
dd:a9:7e:08:c2:f4:c0:34:0e:96:a9:3b:26:30:c8:
25:82:2f:f3:0d:c3:40:0d:ed:21:68:99:96:ec:2b:
36:5a:f1:c7:80:09:76:3b:cb:44:c2:f1:07:6d:ec:
62:53:9b:81:af:d6:9a:40:12:c1:fc:b5:8e:a2:32:
01:22:bd:05:6a:de:23:83:26:ba:9b:22:2f:8c:06:
0a:3b:ee:3a:e9:6d:29:bb:df:d3:30:3a:af:25:c0:
44:f8:8b:1a:b0:7f:3f:27:c5:42:fd:d6:fb:e3:8c:
99:65:b3:25:fd:b5:90:44:1b:be:2d:f4:11:5a:03:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:85:17:3B:51:7D:E2:A6:7D:18:6A:BB:E0:CC:5E:20:47:4B:06
X509v3 Authority Key Identifier:
keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/UZiFFztRfeKmfRhqu-DMXiBHSwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.16.0-5.45.18.255
IPv6:
2a01:6c8:2000::/36
Signature Algorithm: sha256WithRSAEncryption
86:0c:b8:79:ed:e0:50:b4:36:77:da:7e:8b:cc:19:6d:0d:f0:
c2:19:d0:bf:45:3e:b5:a7:a1:21:b0:49:28:2a:7e:cc:1b:97:
15:71:3e:aa:52:3b:1e:82:0b:3a:6a:7f:bc:56:a9:8d:e8:17:
cb:2a:73:5a:f9:3c:bf:dc:75:09:fa:42:74:e5:c4:ef:65:81:
d8:e7:9f:2b:f1:a9:f3:4b:17:a0:e1:e9:a7:c4:5d:04:53:7a:
b5:a7:5f:c5:03:2d:6f:3d:39:b3:aa:3f:cd:fb:ca:3a:9b:a9:
a7:c1:34:62:b0:61:3b:fa:e9:a4:e1:03:1e:4c:ff:44:8a:cd:
fa:a6:74:96:2b:60:a5:69:a0:7b:91:50:c0:42:0b:f8:7b:62:
51:7d:7d:ba:c5:5b:c2:ec:f1:c1:0e:9f:08:65:dd:4f:d9:ae:
77:86:28:00:e0:33:de:6d:f2:7c:17:78:df:1f:6c:66:ab:54:
31:a9:c0:87:e4:e0:f0:ba:87:6e:d4:aa:74:5b:a6:02:38:85:
45:0e:9a:68:23:cf:bd:de:d8:f8:c5:d4:d7:0a:cc:aa:8c:b8:
1d:27:5d:21:f5:25:3a:e2:b3:de:ff:50:8c:b0:c1:f1:26:ad:
40:77:98:18:6f:a9:e3:dd:05:3f:00:e2:ef:32:0d:7d:c1:c4:
8f:de:93:46
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQoJnw2oP9gpBfgwVk6sOpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTI0MWEwMDM0ODMxNWMwMmMwZTJhOTE1MGI4NjMwODdk
MWM4NTcwHhcNMjUwMTAyMTc1MzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTk4ODUxNzNiNTE3ZGUyYTY3ZDE4NmFiYmUwY2M1ZTIwNDc0YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6/yTjOtEfnj9J2U+PKzP5G1NIX
E3KMyw+2cVEzpPOVbecp22CQyyLqCAkHadlTZELUWuh9Kpx4KSIEg77JXG11Zvdh
IwOGJmuYjhSjniuEHZDJ3D0L3mJbFJ1Qcykzr/eAtW9roBlwpVMjs5c38qCRK41M
Tz8a8SP1n2mpBWgUbC3lYD7dqX4IwvTANA6WqTsmMMglgi/zDcNADe0haJmW7Cs2
WvHHgAl2O8tEwvEHbexiU5uBr9aaQBLB/LWOojIBIr0Fat4jgya6myIvjAYKO+46
6W0pu9/TMDqvJcBE+IsasH8/J8VC/db744yZZbMl/bWQRBu+LfQRWgO6xQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFGYhRc7UX3ipn0YarvgzF4gR0sGMB8GA1UdIwQY
MBaAFImSQaADSDFcAsDiqRULhjCH0chXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzIt
OTllNzgwYmYzYjk4LzEvVVppRkZ6dFJmZUttZlJocXUtRE1YaUJIU3dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lNzliODctZDUxYi00ZjE1LThhMzItOTllNzgwYmYzYjk4
LzEvaVpKQm9BTklNVndDd09LcEZRdUdNSWZSeUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAQFLRAD
BAAFLRIwDgQCAAIwCAMGBCoBBsggMA0GCSqGSIb3DQEBCwUAA4IBAQCGDLh57eBQ
tDZ32n6LzBltDfDCGdC/RT61p6EhsEkoKn7MG5cVcT6qUjseggs6an+8VqmN6BfL
KnNa+Ty/3HUJ+kJ05cTvZYHY558r8anzSxeg4emnxF0EU3q1p1/FAy1vPTmzqj/N
+8o6m6mnwTRisGE7+umk4QMeTP9Eis36pnSWK2ClaaB7kVDAQgv4e2JRfX26xVvC
7PHBDp8IZd1P2a53higA4DPebfJ8F3jfH2xmq1QxqcCH5ODwuodu1Kp0W6YCOIVF
DppoI8+93tj4xdTXCsyqjLgdJ10h9SU64rPe/1CMsMHxJq1Ad5gYb6nj3QU/AOLv
Mg19wcSP3pNG
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:59 2025 by rpki-client