Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/CHolCMPV9MDfWslO2iJddWWgMxU.roa
File: CHolCMPV9MDfWslO2iJddWWgMxU.roa (raw, json)
Hash identifier: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=
Subject key identifier: 08:7A:25:08:C3:D5:F4:C0:DF:5A:C9:4E:DA:22:5D:75:65:A0:33:15
Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial: 01942068652519C00F3832A03D90316A6767
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/CHolCMPV9MDfWslO2iJddWWgMxU.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 155.55.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:65:25:19:c0:0f:38:32:a0:3d:90:31:6a:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=087a2508c3d5f4c0df5ac94eda225d7565a03315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:c4:37:75:9c:b1:08:02:ab:9d:5c:05:9e:
95:c4:4c:5e:51:bd:30:b3:39:81:9b:40:42:f4:8e:
2f:07:27:41:81:3f:eb:d7:6b:3d:06:ab:18:35:a2:
fd:91:0f:8d:3b:7f:c4:8c:e0:9a:ba:e2:b4:1b:34:
24:9d:be:39:fa:32:8a:02:df:f9:96:44:6e:c3:07:
53:77:b6:ba:45:02:64:7d:a9:46:ba:e0:76:7e:6b:
50:97:2d:18:5e:3b:97:c4:5a:98:6d:7f:27:72:43:
a1:2c:5d:6d:45:58:75:de:47:d1:43:fa:da:8d:68:
b9:d6:f6:99:8a:f2:b9:90:4a:24:9f:a5:75:97:c6:
97:6e:f0:38:c2:ec:04:e5:af:0d:5e:57:1d:c3:1e:
25:25:09:3f:e6:45:7a:c5:9b:82:82:fe:3a:25:e5:
55:91:80:a6:1d:e1:28:00:45:08:15:13:56:e2:bc:
45:90:a4:fe:d1:e7:8c:7e:10:2e:4a:23:d0:0c:6a:
eb:c7:f8:35:bb:5c:8f:8e:e9:df:21:68:43:19:18:
19:62:7e:c4:50:37:5c:c5:f2:ed:2e:7a:8f:45:fc:
9d:f2:2a:15:f2:a0:bd:18:3f:6e:15:a9:da:ce:f2:
eb:1b:c9:bf:e8:b7:f5:63:fa:7e:2b:a9:c0:41:fb:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:25:08:C3:D5:F4:C0:DF:5A:C9:4E:DA:22:5D:75:65:A0:33:15
X509v3 Authority Key Identifier:
keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/CHolCMPV9MDfWslO2iJddWWgMxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.55.196.0/22
Signature Algorithm: sha256WithRSAEncryption
58:86:1c:75:56:88:05:17:a5:b4:1d:96:09:5d:e6:02:9b:d5:
1c:47:b2:58:61:b6:ec:c6:44:8b:2b:ef:48:44:62:ae:02:47:
61:85:a1:8a:80:d3:93:4a:ed:8c:e7:20:60:cd:99:14:65:b4:
9c:ac:0c:f6:f4:d8:04:ad:fc:3d:22:47:ae:35:31:91:cb:40:
5e:45:cb:30:ef:73:0d:6b:db:f9:bd:4f:cb:ec:48:6b:f5:93:
1c:ad:4c:79:86:10:cf:0a:e9:01:ec:be:fd:a1:45:78:60:3d:
b9:74:5b:0e:b8:01:24:91:b8:65:f4:49:bb:62:cf:81:80:09:
5e:62:8a:14:25:80:ff:3e:f3:62:84:1e:bb:6a:dd:82:f2:e6:
40:a6:89:40:31:41:67:0b:0c:be:f6:55:7d:7a:5a:23:64:6b:
6e:10:c2:52:a4:fb:b5:5c:ba:66:9b:ff:61:b5:68:00:58:3e:
8e:77:dd:8f:9f:32:61:9c:93:ac:09:b5:18:ab:9e:3b:f8:50:
d6:7e:4a:fc:85:3c:62:08:62:d6:71:f7:b2:3d:ad:09:f6:72:
58:a7:fa:29:3e:e0:4c:0b:83:f1:52:80:65:68:f4:29:12:50:
69:c2:f6:19:2e:40:58:3f:24:87:3a:5d:88:0e:2e:07:1d:07:
ae:a4:00:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGUlGcAPODKgPZAxamdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl
ZmE1ZGIwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdhMjUwOGMzZDVmNGMwZGY1YWM5NGVkYTIyNWQ3NTY1YTAzMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5PEN3WcsQgCq51cBZ6VxExeUb0w
szmBm0BC9I4vBydBgT/r12s9BqsYNaL9kQ+NO3/EjOCauuK0GzQknb45+jKKAt/5
lkRuwwdTd7a6RQJkfalGuuB2fmtQly0YXjuXxFqYbX8nckOhLF1tRVh13kfRQ/ra
jWi51vaZivK5kEokn6V1l8aXbvA4wuwE5a8NXlcdwx4lJQk/5kV6xZuCgv46JeVV
kYCmHeEoAEUIFRNW4rxFkKT+0eeMfhAuSiPQDGrrx/g1u1yPjunfIWhDGRgZYn7E
UDdcxfLtLnqPRfyd8ioV8qC9GD9uFanazvLrG8m/6Lf1Y/p+K6nAQfvrkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh6JQjD1fTA31rJTtoiXXVloDMVMB8GA1UdIwQY
MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt
YjIxN2E2OGNlYWY0LzEvQ0hvbENNUFY5TURmV3NsTzJpSmRkV1dnTXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0
LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmzfEMA0G
CSqGSIb3DQEBCwUAA4IBAQBYhhx1VogFF6W0HZYJXeYCm9UcR7JYYbbsxkSLK+9I
RGKuAkdhhaGKgNOTSu2M5yBgzZkUZbScrAz29NgErfw9IkeuNTGRy0BeRcsw73MN
a9v5vU/L7Ehr9ZMcrUx5hhDPCukB7L79oUV4YD25dFsOuAEkkbhl9Em7Ys+BgAle
YooUJYD/PvNihB67at2C8uZApolAMUFnCwy+9lV9elojZGtuEMJSpPu1XLpmm/9h
tWgAWD6Od92PnzJhnJOsCbUYq547+FDWfkr8hTxiCGLWcfeyPa0J9nJYp/opPuBM
C4PxUoBlaPQpElBpwvYZLkBYPySHOl2IDi4HHQeupACk
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:26 2025 by rpki-client