Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/iAQ2MJ5w7MPbQcb1Z3m-nXOU-gY.roa
File: iAQ2MJ5w7MPbQcb1Z3m-nXOU-gY.roa (raw, json)
Hash identifier: HlCZd0Hltj8Q1/7s2clvC0PPnWErySHFXNDB+yLeZyg=
Subject key identifier: 88:04:36:30:9E:70:EC:C3:DB:41:C6:F5:67:79:BE:9D:73:94:FA:06
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018380557714186C22D74C1C3795395D93B7
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/iAQ2MJ5w7MPbQcb1Z3m-nXOU-gY.roa
Signing time: Tue 27 Sep 2022 19:03:48 +0000
ROA not before: Tue 27 Sep 2022 19:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 5.133.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:55:77:14:18:6c:22:d7:4c:1c:37:95:39:5d:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Sep 27 19:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=880436309e70ecc3db41c6f56779be9d7394fa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:46:3b:42:f6:69:1b:7c:73:eb:4d:9a:03:
40:fc:0e:ac:a4:0f:1a:33:3a:1c:1d:fc:4b:66:8e:
37:b2:59:22:2a:94:07:d2:4f:da:36:08:a5:ff:cd:
4a:1b:2f:76:d7:ef:e9:a4:f2:9c:47:87:8d:fa:28:
30:43:8c:bb:6e:19:c9:67:cb:cb:2c:57:b6:98:fb:
a7:be:3d:6a:74:14:9e:5d:22:6f:83:ba:7d:85:69:
fd:ed:54:99:42:fc:56:0c:4d:6a:53:d0:0b:3a:3a:
9d:53:e8:7c:49:44:79:4c:ce:48:e5:a7:76:cb:5a:
44:ff:e4:9c:43:5c:b2:9c:71:10:1d:8b:39:d6:a8:
55:53:71:fd:42:2f:21:ac:05:c7:a9:4c:53:90:9d:
e2:34:d3:d7:09:53:7a:6f:a4:79:ef:1c:35:5d:84:
f7:48:ad:c8:b1:62:7e:b2:4f:c9:9f:5d:26:7e:6a:
b8:1b:39:3a:eb:e8:f4:40:51:aa:e4:bc:25:48:ce:
5f:b4:4c:cf:d5:d9:3c:f3:95:73:8a:a8:82:09:a5:
70:2e:57:27:02:40:ed:6e:55:fe:16:a0:95:85:b0:
5b:8e:e4:ce:6a:85:27:7f:c7:e2:3c:32:09:99:75:
ec:df:9e:8c:1a:65:de:40:9d:97:d1:e1:7e:42:02:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:36:30:9E:70:EC:C3:DB:41:C6:F5:67:79:BE:9D:73:94:FA:06
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/iAQ2MJ5w7MPbQcb1Z3m-nXOU-gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.122.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:12:1b:19:78:02:03:e2:79:1a:51:68:a1:5b:e4:07:b5:4c:
96:37:cb:ea:05:f0:08:5a:83:92:fd:f0:b4:a0:22:83:eb:70:
da:ac:32:60:cf:81:70:d1:ce:3e:77:46:1d:4f:73:be:22:94:
ad:db:91:12:60:da:2a:cd:18:c2:cb:dd:aa:ff:2b:20:21:f6:
72:82:d7:5c:00:c1:2f:1e:1e:ab:ea:d9:db:15:8c:66:1b:40:
a2:d4:a8:e8:cc:f6:04:0f:43:e4:1b:cb:67:da:6f:99:2f:91:
99:5f:ba:55:2a:c6:61:07:60:51:8f:74:bb:9d:b6:fe:48:2c:
42:c2:80:85:62:81:2e:50:80:77:63:d4:72:5e:e5:19:5f:b2:
e2:88:d2:f8:55:a6:70:4c:3b:2c:b8:56:66:e4:b9:72:86:b9:
e2:7a:aa:c3:b5:06:c6:5e:91:81:7c:93:03:39:81:d1:d1:ce:
f6:5a:21:96:60:fb:de:b9:28:5c:ca:91:b5:16:74:3c:d8:3d:
d1:df:95:ee:de:88:f3:cd:50:fb:0d:1e:33:97:e2:7e:2d:a2:
7f:11:3c:68:18:83:b1:21:5e:16:40:cd:19:59:7d:38:73:bc:
ea:4f:aa:cf:69:c5:63:34:16:fe:9a:67:69:ea:02:ab:2f:2c:
13:04:aa:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOAVXcUGGwi10wcN5U5XZO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhYjhhMDlhOWZkZTIzYzk2MzVmOGUxNjRhZWYwOWUx
Nzk0OGMwHhcNMjIwOTI3MTkwMzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODA0MzYzMDllNzBlY2MzZGI0MWM2ZjU2Nzc5YmU5ZDczOTRmYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFRGO0L2aRt8c+tNmgNA/A6spA8a
MzocHfxLZo43slkiKpQH0k/aNgil/81KGy921+/ppPKcR4eN+igwQ4y7bhnJZ8vL
LFe2mPunvj1qdBSeXSJvg7p9hWn97VSZQvxWDE1qU9ALOjqdU+h8SUR5TM5I5ad2
y1pE/+ScQ1yynHEQHYs51qhVU3H9Qi8hrAXHqUxTkJ3iNNPXCVN6b6R57xw1XYT3
SK3IsWJ+sk/Jn10mfmq4Gzk66+j0QFGq5LwlSM5ftEzP1dk885VziqiCCaVwLlcn
AkDtblX+FqCVhbBbjuTOaoUnf8fiPDIJmXXs356MGmXeQJ2X0eF+QgIB4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIgENjCecOzD20HG9Wd5vp1zlPoGMB8GA1UdIwQY
MBaAFC9cq4oJqf3iPJY1+OFkrvCeF5SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUt
MDAyZjI2ZTNiODk4LzEvaUFRMk1KNXc3TVBiUWNiMVozbS1uWE9VLWdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUtMDAyZjI2ZTNiODk4
LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBYV6MA0G
CSqGSIb3DQEBCwUAA4IBAQDAEhsZeAID4nkaUWihW+QHtUyWN8vqBfAIWoOS/fC0
oCKD63DarDJgz4Fw0c4+d0YdT3O+IpSt25ESYNoqzRjCy92q/ysgIfZygtdcAMEv
Hh6r6tnbFYxmG0Ci1KjozPYED0PkG8tn2m+ZL5GZX7pVKsZhB2BRj3S7nbb+SCxC
woCFYoEuUIB3Y9RyXuUZX7LiiNL4VaZwTDssuFZm5LlyhrnieqrDtQbGXpGBfJMD
OYHR0c72WiGWYPveuShcypG1FnQ82D3R35Xu3ojzzVD7DR4zl+J+LaJ/ETxoGIOx
IV4WQM0ZWX04c7zqT6rPacVjNBb+mmdp6gKrLywTBKpl
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:31 2025 by rpki-client