Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z5n-9EeQ_j7R8bMsGmtfavbhS5Y.roa
File: Z5n-9EeQ_j7R8bMsGmtfavbhS5Y.roa (raw, json)
Hash identifier: Ac6uUbxvHlCyqsZn0MdOrj71vglsf62ePjzb7IdDOJM=
Subject key identifier: 67:99:FE:F4:47:90:FE:3E:D1:F1:B3:2C:1A:6B:5F:6A:F6:E1:4B:96
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019408A59F66CCB89E7D5AC2D5EBAB5C3826
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z5n-9EeQ_j7R8bMsGmtfavbhS5Y.roa
Signing time: Fri 27 Dec 2024 15:04:19 +0000
ROA not before: Fri 27 Dec 2024 15:04:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215026
IP address blocks: 5.180.34.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:a5:9f:66:cc:b8:9e:7d:5a:c2:d5:eb:ab:5c:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 27 15:04:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6799fef44790fe3ed1f1b32c1a6b5f6af6e14b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:a8:de:f0:78:ad:5f:6a:07:14:ce:00:74:
d8:de:8b:0b:b8:5a:fb:22:29:f5:6c:fb:0d:c3:53:
b1:fe:a1:dc:d7:5d:81:b3:f4:5f:ad:bb:14:41:31:
83:55:8a:82:c3:27:13:70:97:d1:cb:b2:3d:3c:13:
9e:ef:f6:86:41:37:38:9d:d4:ce:91:1b:ab:d0:55:
ea:4f:ec:43:d2:cd:bf:ac:88:7d:fc:27:a4:36:b0:
f6:27:d9:97:41:23:54:1f:ef:2b:27:0e:88:5d:64:
91:69:87:69:81:03:1d:49:e9:91:34:08:8a:d9:54:
98:fa:82:ba:56:b3:02:cb:f1:50:36:84:e9:34:95:
ea:e9:c1:72:9d:56:6b:f0:8a:4e:fe:68:40:64:86:
0d:14:d8:8a:d1:4d:ce:9f:2b:2d:29:08:02:ff:54:
06:0f:18:ef:29:0f:37:51:f1:ca:4a:da:fa:c3:14:
16:46:dd:10:f4:0d:e5:e0:3a:86:32:a0:78:cf:cc:
9c:65:dc:e6:b6:79:cc:18:50:66:81:df:0e:0b:03:
90:2b:6e:26:1a:f0:a3:e9:7a:1b:2a:24:b8:76:2b:
3c:35:64:ad:e2:46:25:6a:52:f2:64:32:7c:78:ae:
cb:49:4d:af:38:e6:1c:b1:23:f0:08:e1:52:9a:65:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:FE:F4:47:90:FE:3E:D1:F1:B3:2C:1A:6B:5F:6A:F6:E1:4B:96
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z5n-9EeQ_j7R8bMsGmtfavbhS5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.34.0/24
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:09:8e:74:41:58:77:10:f3:7f:79:8e:b7:9d:98:6a:85:43:
9b:92:23:4a:59:b9:c2:97:05:6e:9f:67:9a:37:3b:13:82:32:
53:42:f7:83:41:98:98:9d:b9:32:bb:a4:1d:4e:0b:d8:6c:dc:
77:6e:4f:86:d3:df:8b:d0:78:e2:1d:12:9e:0a:cf:c1:28:5e:
84:b1:37:86:59:2d:10:5b:ed:6c:7a:34:10:a3:5b:e8:3b:ac:
32:f3:93:7b:dd:4d:ac:14:69:1d:49:d8:4c:d4:cd:73:c0:bc:
0a:dd:8b:97:77:3a:28:9d:1c:c0:a1:b2:95:a2:cc:83:a0:3f:
f3:34:45:a1:e5:98:28:3a:1c:a6:08:aa:69:79:fb:6e:23:5d:
08:fe:52:1a:e0:16:19:43:a3:ae:61:7c:b3:d0:62:c7:58:d8:
d7:05:01:f3:d8:e0:fa:82:58:01:8b:79:dd:fd:f0:6c:d3:ae:
d0:9a:03:bd:b1:78:0a:35:5b:19:28:e1:d5:50:11:29:68:fb:
51:be:3e:8a:a5:e6:32:34:8c:70:21:42:88:22:cd:3b:45:12:
46:10:6a:c0:2b:83:ff:49:59:4b:9c:9f:94:2e:cc:cb:d2:13:
69:d2:8b:10:76:d2:87:b6:e5:25:42:f1:5d:c6:9d:ba:0f:dd:
cd:3f:92:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQIpZ9mzLiefVrC1eurXDgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQxMjI3MTUwNDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzk5ZmVmNDQ3OTBmZTNlZDFmMWIzMmMxYTZiNWY2YWY2ZTE0Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ceo3vB4rV9qBxTOAHTY3osLuFr7
Iin1bPsNw1Ox/qHc112Bs/RfrbsUQTGDVYqCwycTcJfRy7I9PBOe7/aGQTc4ndTO
kRur0FXqT+xD0s2/rIh9/CekNrD2J9mXQSNUH+8rJw6IXWSRaYdpgQMdSemRNAiK
2VSY+oK6VrMCy/FQNoTpNJXq6cFynVZr8IpO/mhAZIYNFNiK0U3OnystKQgC/1QG
DxjvKQ83UfHKStr6wxQWRt0Q9A3l4DqGMqB4z8ycZdzmtnnMGFBmgd8OCwOQK24m
GvCj6XobKiS4dis8NWSt4kYlalLyZDJ8eK7LSU2vOOYcsSPwCOFSmmV9xQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGeZ/vRHkP4+0fGzLBprX2r24UuWMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvWjVuLTlFZVFfajdSOGJNc0dtdGZhdmJoUzVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbQiAwQA
LVljMA0GCSqGSIb3DQEBCwUAA4IBAQCsCY50QVh3EPN/eY63nZhqhUObkiNKWbnC
lwVun2eaNzsTgjJTQveDQZiYnbkyu6QdTgvYbNx3bk+G09+L0HjiHRKeCs/BKF6E
sTeGWS0QW+1sejQQo1voO6wy85N73U2sFGkdSdhM1M1zwLwK3YuXdzoonRzAobKV
osyDoD/zNEWh5ZgoOhymCKppeftuI10I/lIa4BYZQ6OuYXyz0GLHWNjXBQHz2OD6
glgBi3nd/fBs067QmgO9sXgKNVsZKOHVUBEpaPtRvj6KpeYyNIxwIUKIIs07RRJG
EGrAK4P/SVlLnJ+ULszL0hNp0osQdtKHtuUlQvFdxp26D93NP5K9
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:03:58 2025 by rpki-client