Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/U1dRTQtgMtdZmH48jV7N3oy8n8I.roa
File: U1dRTQtgMtdZmH48jV7N3oy8n8I.roa (raw, json)
Hash identifier: T+tvaSZkBAaMTkPZBdkomKvj+ibcLRoLzaqX+Cw7rjA=
Subject key identifier: 53:57:51:4D:0B:60:32:D7:59:98:7E:3C:8D:5E:CD:DE:8C:BC:9F:C2
Certificate issuer: /CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
Certificate serial: 680F59
Authority key identifier: 25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/U1dRTQtgMtdZmH48jV7N3oy8n8I.roa
Signing time: Sat 01 Jan 2022 02:56:54 +0000
ROA not before: Sat 01 Jan 2022 02:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51082
IP address blocks: 212.52.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6819673 (0x680f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
Validity
Not Before: Jan 1 02:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5357514d0b6032d759987e3c8d5ecdde8cbc9fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:c3:22:42:98:f8:9b:bf:03:07:45:5b:5a:
54:c8:54:97:a6:a7:73:5a:b6:79:1e:f6:9a:92:f2:
69:1b:ef:9d:b8:53:57:a7:90:74:98:5b:83:3f:f3:
75:40:09:6e:e7:df:c0:f5:9f:97:dd:94:31:ee:0f:
ff:2e:e1:ad:cc:cb:42:15:18:61:5e:07:5b:12:a6:
a3:4f:a5:f6:51:d3:37:83:d4:2a:e5:69:38:8d:43:
13:ed:c0:6a:6e:91:c8:a7:5d:c1:49:d3:eb:6f:42:
bf:75:ca:27:a2:f2:a7:98:18:54:2d:ef:55:20:35:
cc:67:fe:bb:19:ef:f7:dc:6f:80:07:60:5b:f3:94:
ed:d4:a9:42:a3:f4:41:73:05:17:5f:4c:34:f5:3a:
0d:4f:d1:69:85:1a:de:36:79:ac:e3:3f:05:5e:30:
7a:ca:7f:ad:e6:a8:22:04:53:6d:52:d3:01:e9:e8:
3d:65:9e:02:bf:72:dc:c6:f7:83:b8:75:57:c1:8c:
6b:de:91:d2:78:da:62:0c:81:cc:b8:d9:f4:0b:c4:
8f:c1:bf:ed:3c:f3:bf:82:eb:c1:6a:11:4e:da:b2:
db:02:88:82:24:bb:46:68:23:67:93:ef:df:74:8a:
f4:b3:03:b9:0f:f9:2b:e9:21:12:fc:29:a0:47:be:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:57:51:4D:0B:60:32:D7:59:98:7E:3C:8D:5E:CD:DE:8C:BC:9F:C2
X509v3 Authority Key Identifier:
keyid:25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/U1dRTQtgMtdZmH48jV7N3oy8n8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/JTg9Nbnmq7MF_1ePC4go6KUA6sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:34:4a:03:c9:9b:de:45:52:14:02:af:15:c2:32:18:0e:c7:
80:8f:e4:01:9c:0f:38:bc:6a:f8:f0:f3:69:35:d5:c1:b0:6f:
a8:78:aa:22:c4:a5:9d:85:88:b2:30:ab:d7:3c:f2:07:a3:0d:
09:ee:fe:8e:dc:f7:c3:3e:60:9f:6f:66:40:e4:fe:7c:f2:86:
df:65:44:9a:c5:1e:c9:4f:a3:3b:af:3a:5d:31:69:c1:f3:9c:
20:85:65:72:24:a1:ac:6a:d4:08:a4:1d:8d:68:ac:5f:c2:f9:
20:64:22:10:ab:41:d7:60:8f:bc:b8:c2:20:98:1e:f7:9a:90:
3b:03:4c:cd:17:e3:eb:1c:7d:96:9b:40:d2:33:b7:5c:34:12:
24:3f:49:7f:4f:b3:46:46:7a:a2:68:6c:3c:dd:46:c7:06:92:
9a:5a:0e:58:04:db:48:46:15:9a:54:d1:2a:2a:01:6b:10:57:
e4:10:4e:27:ad:d8:e6:da:56:a0:1e:4f:98:09:49:62:7d:9e:
d8:e2:c4:c7:39:06:4b:b0:eb:7e:3d:8b:04:a4:fd:21:a0:d0:
c0:2e:9d:8a:f0:87:b0:f6:7a:e2:3b:eb:f0:48:16:c5:45:a7:
31:08:50:af:c6:bf:6f:db:da:6a:25:83:0c:91:8e:bd:a2:40:
8f:f0:c5:af
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDaA9ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
MzgzZDM1YjllNmFiYjMwNWZmNTc4ZjBiODgyOGU4YTUwMGVhY2MwHhcNMjIwMTAx
MDI1NjU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1MzU3NTE0ZDBiNjAz
MmQ3NTk5ODdlM2M4ZDVlY2RkZThjYmM5ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2tXDIkKY+Ju/AwdFW1pUyFSXpqdzWrZ5HvaakvJpG++duFNX
p5B0mFuDP/N1QAlu59/A9Z+X3ZQx7g//LuGtzMtCFRhhXgdbEqajT6X2UdM3g9Qq
5Wk4jUMT7cBqbpHIp13BSdPrb0K/dconovKnmBhULe9VIDXMZ/67Ge/33G+AB2Bb
85Tt1KlCo/RBcwUXX0w09ToNT9FphRreNnms4z8FXjB6yn+t5qgiBFNtUtMB6eg9
ZZ4Cv3LcxveDuHVXwYxr3pHSeNpiDIHMuNn0C8SPwb/tPPO/guvBahFO2rLbAoiC
JLtGaCNnk+/fdIr0swO5D/kr6SES/CmgR76oGwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFNXUU0LYDLXWZh+PI1ezd6MvJ/CMB8GA1UdIwQYMBaAFCU4PTW55quzBf9X
jwuIKOilAOrMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SlRnOU5ibm1xN01GXzFlUEM0Z282S1VBNnN3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMC85MWMxZGEtMzIwMS00YTBlLWJjYWYtM2UyZmY1YTQ4MDYyLzEv
VTFkUlRRdGdNdGRabUg0OGpWN04zb3k4bjhJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85
MWMxZGEtMzIwMS00YTBlLWJjYWYtM2UyZmY1YTQ4MDYyLzEvSlRnOU5ibm1xN01G
XzFlUEM0Z282S1VBNnN3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DQGMA0GCSqGSIb3DQEBCwUAA4IB
AQCmNEoDyZveRVIUAq8VwjIYDseAj+QBnA84vGr48PNpNdXBsG+oeKoixKWdhYiy
MKvXPPIHow0J7v6O3PfDPmCfb2ZA5P588obfZUSaxR7JT6M7rzpdMWnB85wghWVy
JKGsatQIpB2NaKxfwvkgZCIQq0HXYI+8uMIgmB73mpA7A0zNF+PrHH2Wm0DSM7dc
NBIkP0l/T7NGRnqiaGw83UbHBpKaWg5YBNtIRhWaVNEqKgFrEFfkEE4nrdjm2lag
Hk+YCUlifZ7Y4sTHOQZLsOt+PYsEpP0hoNDALp2K8Iew9nriO+vwSBbFRacxCFCv
xr9v29pqJYMMkY69okCP8MWv
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:33 2025 by rpki-client