Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/5xkzXwGYp_IKl0FVLWjplwCAu9I.roa
File: 5xkzXwGYp_IKl0FVLWjplwCAu9I.roa (raw, json)
Hash identifier: 4mWlS6qk+8g7PKWehqkDyvvDAHJZ0IF8asbAwDoTyOM=
Subject key identifier: E7:19:33:5F:01:98:A7:F2:0A:97:41:55:2D:68:E9:97:00:80:BB:D2
Certificate issuer: /CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
Certificate serial: 0236F53E
Authority key identifier: 6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/5xkzXwGYp_IKl0FVLWjplwCAu9I.roa
Signing time: Sat 01 Jan 2022 15:56:10 +0000
ROA not before: Sat 01 Jan 2022 15:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 5.133.125.0/24 maxlen: 24
5.133.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37156158 (0x236f53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd35ebf62e9c5325cd71b63fe8f39e82bbc1a9d
Validity
Not Before: Jan 1 15:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e719335f0198a7f20a9741552d68e9970080bbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:05:5f:e6:9e:41:49:c2:de:af:92:4c:45:
cb:01:a5:df:19:2c:75:6d:15:36:ef:4c:1a:a7:ad:
8b:25:fb:46:93:6b:98:e9:8b:af:f8:9e:de:5c:15:
3d:b6:47:14:62:7c:21:c5:4c:02:2c:ee:fa:02:d6:
a5:05:e9:5b:53:b0:ce:ec:ed:eb:ce:09:23:f9:2d:
d7:d3:8a:75:e2:4e:2f:0b:a1:ef:f6:fd:83:aa:09:
4e:30:6e:0b:b5:e1:07:90:03:00:aa:6b:ff:d9:81:
9d:05:f7:63:05:12:ad:0a:1b:0b:0b:96:1e:23:d5:
be:45:4c:bd:b5:b9:8a:5e:2a:51:e6:3e:d2:55:78:
55:41:3b:61:8a:d8:27:c5:68:d9:e7:76:8e:7c:4f:
6b:72:5f:0e:47:03:d3:e7:cb:33:3d:b3:bc:b4:24:
32:f4:1a:c5:9a:89:b9:ec:2f:18:ab:a2:49:48:8b:
68:f7:b4:cb:09:c7:5f:f5:64:fa:2e:24:39:51:23:
b7:86:dc:26:0a:78:f3:33:60:ff:a9:31:d1:19:43:
a8:23:68:a0:ec:f6:4a:5f:29:92:1e:59:3d:7f:23:
ea:76:1d:3a:01:13:d0:16:75:7f:44:32:5b:ca:86:
94:19:7f:07:f4:5c:2f:42:18:b7:a2:62:31:cb:45:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:33:5F:01:98:A7:F2:0A:97:41:55:2D:68:E9:97:00:80:BB:D2
X509v3 Authority Key Identifier:
keyid:6B:D3:5E:BF:62:E9:C5:32:5C:D7:1B:63:FE:8F:39:E8:2B:BC:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9Nev2LpxTJc1xtj_o856Cu8Gp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/5xkzXwGYp_IKl0FVLWjplwCAu9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3bf02a-2b66-45f5-9e3e-c5e56a72ee18/1/a9Nev2LpxTJc1xtj_o856Cu8Gp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.125.0-5.133.126.255
Signature Algorithm: sha256WithRSAEncryption
a2:41:bf:00:98:fb:1c:d0:af:3e:be:ee:f7:9c:0d:61:76:a3:
18:1c:20:60:4a:53:70:b2:57:76:29:40:c4:97:6b:8c:d7:23:
e1:18:02:d5:78:40:3c:41:c9:7c:05:33:b9:0c:ff:22:50:ad:
7c:48:72:64:cf:e9:a5:e7:33:b1:3f:0b:f5:f1:a1:80:bf:98:
53:6f:c7:19:b1:07:a4:eb:11:32:67:d1:8a:ab:73:38:ac:d8:
75:76:eb:24:75:fe:2d:bc:fa:6f:26:8a:3e:cd:a7:65:9f:e1:
ab:60:a2:21:61:91:8c:05:aa:e8:86:41:4e:0a:00:fb:0e:9a:
3f:0f:ee:59:47:85:08:a3:7b:e0:fe:d2:ed:be:3a:bb:a6:03:
4b:91:22:20:27:2e:29:59:25:c5:6a:43:e3:b2:e7:43:ac:5c:
c5:bc:9a:e5:d1:84:83:ec:72:d9:8b:6f:95:76:20:99:b5:84:
3c:90:98:f6:fb:15:1f:fe:06:8c:19:77:47:62:2a:d1:0a:7b:
1d:fc:52:67:cb:4a:67:4e:ba:92:5d:97:40:47:dc:77:4f:cd:
fb:6c:9c:dc:7b:7b:da:25:fb:bd:68:a2:11:75:09:86:63:da:
d7:04:cb:15:56:f5:ad:95:88:b9:3b:4b:e3:94:b8:a5:55:56:
20:36:b3:cd
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEAjb1PjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmQzNWViZjYyZTljNTMyNWNkNzFiNjNmZThmMzllODJiYmMxYTlkMB4XDTIyMDEw
MTE1NTYxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTcxOTMzNWYwMTk4
YTdmMjBhOTc0MTU1MmQ2OGU5OTcwMDgwYmJkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYzBV/mnkFJwt6vkkxFywGl3xksdW0VNu9MGqetiyX7RpNr
mOmLr/ie3lwVPbZHFGJ8IcVMAizu+gLWpQXpW1Owzuzt684JI/kt19OKdeJOLwuh
7/b9g6oJTjBuC7XhB5ADAKpr/9mBnQX3YwUSrQobCwuWHiPVvkVMvbW5il4qUeY+
0lV4VUE7YYrYJ8Vo2ed2jnxPa3JfDkcD0+fLMz2zvLQkMvQaxZqJuewvGKuiSUiL
aPe0ywnHX/Vk+i4kOVEjt4bcJgp48zNg/6kx0RlDqCNooOz2Sl8pkh5ZPX8j6nYd
OgET0BZ1f0QyW8qGlBl/B/RcL0IYt6JiMctFgxcCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTnGTNfAZin8gqXQVUtaOmXAIC70jAfBgNVHSMEGDAWgBRr016/YunFMlzX
G2P+jznoK7wanTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E5TmV2MkxweFRKYzF4dGpfbzg1NkN1OEdwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvM2JmMDJhLTJiNjYtNDVmNS05ZTNlLWM1ZTU2YTcyZWUxOC8x
LzV4a3pYd0dZcF9JS2wwRlZMV2pwbHdDQXU5SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
M2JmMDJhLTJiNjYtNDVmNS05ZTNlLWM1ZTU2YTcyZWUxOC8xL2E5TmV2MkxweFRK
YzF4dGpfbzg1NkN1OEdwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQABYV9AwQABYV+MA0GCSqGSIb3
DQEBCwUAA4IBAQCiQb8AmPsc0K8+vu73nA1hdqMYHCBgSlNwsld2KUDEl2uM1yPh
GALVeEA8Qcl8BTO5DP8iUK18SHJkz+ml5zOxPwv18aGAv5hTb8cZsQek6xEyZ9GK
q3M4rNh1duskdf4tvPpvJoo+zadln+GrYKIhYZGMBarohkFOCgD7Dpo/D+5ZR4UI
o3vg/tLtvjq7pgNLkSIgJy4pWSXFakPjsudDrFzFvJrl0YSD7HLZi2+VdiCZtYQ8
kJj2+xUf/gaMGXdHYirRCnsd/FJny0pnTrqSXZdAR9x3T837bJzce3vaJfu9aKIR
dQmGY9rXBMsVVvWtlYi5O0vjlLilVVYgNrPN
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:16:29 2025 by rpki-client