Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/5XE0gfIHPBVwos97p8SFxETissU.roa
File: 5XE0gfIHPBVwos97p8SFxETissU.roa (raw, json)
Hash identifier: 6gs7iKR2AXCvfwIabzt43SR9/MCH860ldfvLILxKt+M=
Subject key identifier: E5:71:34:81:F2:07:3C:15:70:A2:CF:7B:A7:C4:85:C4:44:E2:B2:C5
Certificate issuer: /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial: 019424B39F72006EEB3C806F588238DCB672
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/5XE0gfIHPBVwos97p8SFxETissU.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 160.202.20.0/24 maxlen: 24
160.202.21.0/24 maxlen: 24
160.202.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:72:00:6e:eb:3c:80:6f:58:82:38:dc:b6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5713481f2073c1570a2cf7ba7c485c444e2b2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:50:b8:f5:50:2f:85:8d:dc:19:06:d1:6f:
02:81:1a:5a:36:d3:ae:40:04:95:22:bc:37:12:37:
e1:24:13:29:82:a6:a4:7e:af:d3:7f:0f:b2:9a:c4:
1b:39:e6:71:63:68:76:0d:40:b1:68:70:ce:3d:b7:
18:b5:48:5a:4a:9d:74:88:c1:fa:73:8e:89:cb:3f:
c9:79:84:84:66:4d:49:b5:81:46:bc:3b:d1:18:c8:
e9:ee:3d:85:5d:d2:63:4a:cc:d5:9c:a1:1b:dc:16:
df:00:2a:b6:fd:20:bb:cb:75:1a:c6:70:5a:43:ea:
85:97:57:40:19:c6:a1:e8:f8:b3:94:dc:64:ff:76:
9d:bc:b8:ff:20:8b:75:d4:0c:85:99:9c:c5:60:ca:
a8:84:93:db:7b:a0:84:e5:5d:d5:67:f7:e1:e5:d9:
98:22:6b:96:bc:cd:0c:d4:40:df:68:c0:cd:00:ef:
b8:3e:a6:84:b5:5b:99:fa:91:f7:b9:63:b2:63:60:
68:00:51:e1:7b:fb:f6:1a:3e:93:fb:23:35:f0:7e:
a8:e3:49:8e:32:63:ec:b9:3d:82:5d:e3:80:11:75:
25:8a:7f:07:df:1b:ca:eb:b5:7e:db:a1:15:27:a2:
16:cc:4b:86:34:e6:81:fd:27:f2:db:43:d4:5b:24:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:34:81:F2:07:3C:15:70:A2:CF:7B:A7:C4:85:C4:44:E2:B2:C5
X509v3 Authority Key Identifier:
keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/5XE0gfIHPBVwos97p8SFxETissU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.20.0-160.202.22.255
Signature Algorithm: sha256WithRSAEncryption
b6:17:97:32:78:f9:81:4f:b2:48:3c:2a:0b:5d:77:fa:fd:c2:
5a:ec:c6:cd:48:a3:b2:88:38:fa:a3:88:d0:7e:73:30:33:f6:
3e:8c:cf:a7:84:fa:9f:7c:24:63:77:2c:48:8a:2a:19:91:45:
72:22:b6:15:08:bd:32:86:42:4d:5b:7f:20:0c:a9:d2:5f:09:
ce:50:ec:2d:85:71:e6:bd:b4:e4:b6:82:0d:dd:4a:6e:b0:98:
54:cf:3a:6f:98:37:f8:b6:2e:9d:eb:d1:89:a8:25:46:c8:10:
06:ba:f2:c8:f0:99:fc:2e:1c:db:2a:37:27:cb:e8:62:3e:c7:
ed:3b:2f:47:3a:78:a4:df:25:bb:39:2f:41:1a:db:69:d1:49:
88:f6:6e:09:84:e1:18:2d:44:74:57:ad:4b:6d:e5:fe:91:1c:
af:37:b7:eb:e2:49:20:37:6e:ec:f3:1f:d7:7e:67:ac:bd:66:
ec:6a:57:2d:89:30:96:53:2e:f3:c8:69:64:af:b5:fe:cd:b5:
62:a4:39:c2:b2:9c:03:e0:f5:0c:43:44:0a:0e:df:43:f8:08:
06:0f:d4:f6:d9:53:e2:f2:e8:69:ae:53:11:98:c5:7e:14:f8:
a0:fb:1b:53:09:59:43:9b:68:ba:55:70:8c:54:1b:f7:d3:4e:
e9:e3:44:2a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQks59yAG7rPIBvWII43LZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTEwMDU3YmNkMDA3NjJlZWY0MzgyM2MwMzBlN2UzMmQ1
NzIyNDEwHhcNMjUwMTAyMDE0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTcxMzQ4MWYyMDczYzE1NzBhMmNmN2JhN2M0ODVjNDQ0ZTJiMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAualQuPVQL4WN3BkG0W8CgRpaNtOu
QASVIrw3EjfhJBMpgqakfq/Tfw+ymsQbOeZxY2h2DUCxaHDOPbcYtUhaSp10iMH6
c46Jyz/JeYSEZk1JtYFGvDvRGMjp7j2FXdJjSszVnKEb3BbfACq2/SC7y3UaxnBa
Q+qFl1dAGcah6PizlNxk/3advLj/IIt11AyFmZzFYMqohJPbe6CE5V3VZ/fh5dmY
ImuWvM0M1EDfaMDNAO+4PqaEtVuZ+pH3uWOyY2BoAFHhe/v2Gj6T+yM18H6o40mO
MmPsuT2CXeOAEXUlin8H3xvK67V+26EVJ6IWzEuGNOaB/Sfy20PUWyTn8wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOVxNIHyBzwVcKLPe6fEhcRE4rLFMB8GA1UdIwQY
MBaAFKuhAFe80Adi7vQ4I8Aw5+MtVyJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZFQVY3elFCMkx1OURnandERG40eTFYSWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi84MDM1M2QtNGYyMi00ZDk0LWJlYWQt
ZGQyMGUyOTk0Y2QwLzEvNVhFMGdmSUhQQlZ3b3M5N3A4U0Z4RVRpc3NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi84MDM1M2QtNGYyMi00ZDk0LWJlYWQtZGQyMGUyOTk0Y2Qw
LzEvcTZFQVY3elFCMkx1OURnandERG40eTFYSWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKgyhQD
BACgyhYwDQYJKoZIhvcNAQELBQADggEBALYXlzJ4+YFPskg8Kgtdd/r9wlrsxs1I
o7KIOPqjiNB+czAz9j6Mz6eE+p98JGN3LEiKKhmRRXIithUIvTKGQk1bfyAMqdJf
Cc5Q7C2Fcea9tOS2gg3dSm6wmFTPOm+YN/i2Lp3r0YmoJUbIEAa68sjwmfwuHNsq
NyfL6GI+x+07L0c6eKTfJbs5L0Ea22nRSYj2bgmE4RgtRHRXrUtt5f6RHK83t+vi
SSA3buzzH9d+Z6y9ZuxqVy2JMJZTLvPIaWSvtf7NtWKkOcKynAPg9QxDRAoO30P4
CAYP1PbZU+Ly6GmuUxGYxX4U+KD7G1MJWUObaLpVcIxUG/fTTunjRCo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:48 2025 by rpki-client