Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/D2lTuKkaihmC2cT7NERa5qSvcd4.roa
File: D2lTuKkaihmC2cT7NERa5qSvcd4.roa (raw, json)
Hash identifier: RpB2FyxyA/hsoWo7OmImdgwSwJYzZl/vHUqeUb6pNT4=
Subject key identifier: 0F:69:53:B8:A9:1A:8A:19:82:D9:C4:FB:34:44:5A:E6:A4:AF:71:DE
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195CDA35C33399EF7EAAA4943EDD71911A5
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/D2lTuKkaihmC2cT7NERa5qSvcd4.roa
Signing time: Tue 25 Mar 2025 14:09:49 +0000
ROA not before: Tue 25 Mar 2025 14:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 5.56.28.0/24 maxlen: 24
5.56.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:a3:5c:33:39:9e:f7:ea:aa:49:43:ed:d7:19:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 25 14:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f6953b8a91a8a1982d9c4fb34445ae6a4af71de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:08:9c:6d:2e:d4:1f:d0:5c:ae:33:10:3c:
2e:7d:f2:39:ca:8e:50:68:af:f2:8a:7d:00:3d:15:
ac:8d:9e:a4:5f:e4:d7:0d:59:95:61:a5:fe:94:11:
d2:1b:e3:b3:dd:16:66:ab:a0:f5:8a:b1:32:96:cd:
c9:82:fa:df:2a:68:85:2c:2c:a1:c1:d1:28:62:b2:
54:f8:fb:20:b7:1b:97:50:60:e6:76:19:05:58:ff:
57:39:28:a2:1c:eb:12:cd:ef:09:a4:d3:e5:e0:40:
c2:68:46:7a:2d:cc:34:20:e8:0d:75:83:37:c2:ab:
8a:ad:b6:cf:17:47:15:19:28:61:81:53:2e:26:7f:
16:43:b4:3e:a0:47:40:26:58:a7:2a:c6:54:28:8e:
c4:df:3e:30:87:07:4d:c1:7e:71:d5:fa:89:7a:0e:
36:f7:39:14:b8:03:08:27:e6:31:bf:52:da:79:25:
99:0f:7a:bc:6b:62:8c:25:bf:d4:1a:cd:c0:57:86:
40:af:d6:ec:e8:2d:99:c7:bb:8b:2d:b6:fb:ce:ee:
2a:3d:e8:30:17:6f:3f:cc:56:a0:04:67:e1:03:9d:
ae:08:73:80:d3:d0:b9:b5:53:98:30:44:ce:6f:d7:
ac:b4:f4:86:5a:f1:59:1b:64:c3:c2:7c:fa:96:2b:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:69:53:B8:A9:1A:8A:19:82:D9:C4:FB:34:44:5A:E6:A4:AF:71:DE
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/D2lTuKkaihmC2cT7NERa5qSvcd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.28.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:d7:68:05:da:dd:e6:3a:38:74:7c:ef:35:48:89:93:ad:93:
58:72:aa:cb:49:8e:dc:de:6f:94:20:5b:6f:2e:bb:19:40:2f:
1d:22:2f:23:fe:4b:e1:6f:8d:ab:84:4d:02:bf:5e:99:e2:af:
07:67:de:e7:1c:f6:b3:51:fd:7e:e7:ef:f4:08:59:df:bf:38:
b8:b3:5d:76:5a:a6:ca:df:74:5d:5f:30:77:0c:3f:85:a9:9c:
67:88:ff:c9:6f:f1:23:c0:99:2b:6a:bc:de:67:97:30:98:03:
37:43:32:7d:a2:93:cc:ca:ff:7e:01:30:16:9a:64:5b:38:7e:
ed:7a:b9:39:0c:23:aa:f5:46:76:de:a2:d4:e4:95:f3:2a:8e:
e6:73:f4:64:df:01:eb:6c:f6:60:3b:e1:74:86:35:d8:7b:42:
24:6b:07:4a:19:7a:47:2c:bc:84:97:e3:83:81:1e:27:a1:9d:
74:e0:47:fe:77:49:c5:93:e1:04:27:f6:6e:48:0f:80:00:e6:
29:23:2e:c3:53:57:8d:b3:60:f7:aa:a3:f6:46:d8:ed:f9:69:
20:d0:c5:82:f5:dd:fd:20:70:57:78:7d:2b:be:7d:b1:5e:09:
f5:9d:3b:af:8b:0f:7f:9c:de:a3:e4:02:72:53:2f:c8:93:9f:
47:2e:81:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXNo1wzOZ736qpJQ+3XGRGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwMzI1MTQwOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjY5NTNiOGE5MWE4YTE5ODJkOWM0ZmIzNDQ0NWFlNmE0YWY3MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu80InG0u1B/QXK4zEDwuffI5yo5Q
aK/yin0APRWsjZ6kX+TXDVmVYaX+lBHSG+Oz3RZmq6D1irEyls3JgvrfKmiFLCyh
wdEoYrJU+PsgtxuXUGDmdhkFWP9XOSiiHOsSze8JpNPl4EDCaEZ6Lcw0IOgNdYM3
wquKrbbPF0cVGShhgVMuJn8WQ7Q+oEdAJlinKsZUKI7E3z4whwdNwX5x1fqJeg42
9zkUuAMIJ+Yxv1LaeSWZD3q8a2KMJb/UGs3AV4ZAr9bs6C2Zx7uLLbb7zu4qPegw
F28/zFagBGfhA52uCHOA09C5tVOYMETOb9estPSGWvFZG2TDwnz6lissPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA9pU7ipGooZgtnE+zREWuakr3HeMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvRDJsVHVLa2FpaG1DMmNUN05FUmE1cVN2Y2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTgcMA0G
CSqGSIb3DQEBCwUAA4IBAQAt12gF2t3mOjh0fO81SImTrZNYcqrLSY7c3m+UIFtv
LrsZQC8dIi8j/kvhb42rhE0Cv16Z4q8HZ97nHPazUf1+5+/0CFnfvzi4s112WqbK
33RdXzB3DD+FqZxniP/Jb/EjwJkrarzeZ5cwmAM3QzJ9opPMyv9+ATAWmmRbOH7t
erk5DCOq9UZ23qLU5JXzKo7mc/Rk3wHrbPZgO+F0hjXYe0IkawdKGXpHLLyEl+OD
gR4noZ104Ef+d0nFk+EEJ/ZuSA+AAOYpIy7DU1eNs2D3qqP2Rtjt+Wkg0MWC9d39
IHBXeH0rvn2xXgn1nTuviw9/nN6j5AJyUy/Ik59HLoGZ
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:43 2025 by rpki-client