Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/dABSJLRi0TLcB4OYtofXt8vc5mI.roa
File: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (raw, json)
Hash identifier: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=
Subject key identifier: 74:00:52:24:B4:62:D1:32:DC:07:83:98:B6:87:D7:B7:CB:DC:E6:62
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0194258FA942BE9F8D042662751574E3D338
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/dABSJLRi0TLcB4OYtofXt8vc5mI.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207148
IP address blocks: 5.154.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:42:be:9f:8d:04:26:62:75:15:74:e3:d3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74005224b462d132dc078398b687d7b7cbdce662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:2b:ae:ee:a5:6f:52:86:29:ef:e1:c4:ed:
a4:ef:2a:c9:3d:4f:21:9d:0e:ce:92:da:08:4b:66:
58:ba:94:e6:d6:cd:8a:e9:25:30:30:b4:ba:dd:f5:
92:69:6d:26:98:e3:8b:7b:bc:8c:eb:4b:ce:4a:6d:
e8:8f:f6:89:7f:54:01:cf:11:ef:e5:c3:23:04:b8:
ae:98:53:68:4c:85:0d:36:22:68:ea:b7:29:81:23:
89:fc:ac:57:d5:87:a2:97:ce:fa:0c:c5:b3:0f:3c:
4b:08:b0:a5:3d:3f:02:b1:f3:eb:e4:7c:fb:7d:f8:
69:c7:06:c5:fa:cc:40:66:91:11:dd:b1:66:9d:a1:
80:9e:78:39:1f:54:32:2e:67:05:f3:a2:24:5a:19:
42:34:60:4c:c3:79:06:10:b4:6e:69:1f:0a:5b:9d:
8c:3f:41:68:b0:1f:f4:c8:15:3a:24:09:80:58:8f:
ea:47:b4:60:cb:20:ad:3a:af:0f:75:cc:ef:77:e8:
9e:fe:8b:ec:90:56:d5:12:bf:f7:50:87:19:bd:db:
47:47:95:83:51:2e:5a:c4:74:88:7f:14:0c:90:47:
cc:59:9e:47:af:a4:06:a2:1d:92:e2:f3:53:6c:28:
b6:fd:d2:58:03:a6:35:e2:67:ba:f3:62:cf:18:b2:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:52:24:B4:62:D1:32:DC:07:83:98:B6:87:D7:B7:CB:DC:E6:62
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/dABSJLRi0TLcB4OYtofXt8vc5mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.236.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2c:5d:fb:49:68:60:8e:24:7d:13:39:f7:f0:11:30:29:e8:
e2:b6:6b:ed:29:69:a6:35:50:9a:19:41:78:d4:bc:6d:2d:c9:
95:bb:59:de:94:49:26:a0:95:ec:9a:47:2d:cc:80:c9:e3:5f:
33:da:8f:f1:9b:0e:47:e3:19:70:b8:5c:f4:1a:14:98:69:44:
e5:52:a0:af:bc:73:5e:88:b4:18:a5:2e:b0:49:98:b6:e1:a4:
2d:f6:ad:7b:9d:2f:3f:00:24:cb:65:28:c5:78:36:c8:db:28:
55:d0:40:07:2a:84:fa:80:37:1d:3e:92:1d:e5:2c:c0:82:2c:
03:24:4a:81:7f:51:59:34:14:70:be:d5:3d:f1:27:de:6d:b7:
89:b0:d5:88:0b:7b:c5:ac:08:33:38:fc:68:12:fa:da:c3:e4:
16:cc:ee:05:f1:eb:26:75:07:47:9a:aa:4d:ae:b4:78:9a:61:
c1:8f:c7:7b:34:09:13:c9:4d:66:9c:28:9a:27:8f:12:e9:ab:
d5:94:6e:89:5f:33:22:da:c0:9d:85:e7:30:f2:3a:cc:66:db:
62:15:70:55:44:b1:6b:79:5d:67:65:42:14:3e:35:a0:f8:3e:
12:83:13:76:b4:da:af:c8:fe:03:45:9f:4e:bc:ae:b0:31:bd:
11:33:2a:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6lCvp+NBCZidRV049M4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDAwNTIyNGI0NjJkMTMyZGMwNzgzOThiNjg3ZDdiN2NiZGNlNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6wrru6lb1KGKe/hxO2k7yrJPU8h
nQ7OktoIS2ZYupTm1s2K6SUwMLS63fWSaW0mmOOLe7yM60vOSm3oj/aJf1QBzxHv
5cMjBLiumFNoTIUNNiJo6rcpgSOJ/KxX1Yeil876DMWzDzxLCLClPT8CsfPr5Hz7
ffhpxwbF+sxAZpER3bFmnaGAnng5H1QyLmcF86IkWhlCNGBMw3kGELRuaR8KW52M
P0FosB/0yBU6JAmAWI/qR7RgyyCtOq8Pdczvd+ie/ovskFbVEr/3UIcZvdtHR5WD
US5axHSIfxQMkEfMWZ5Hr6QGoh2S4vNTbCi2/dJYA6Y14me682LPGLJ7jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQAUiS0YtEy3AeDmLaH17fL3OZiMB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvZEFCU0pMUmkwVExjQjRPWXRvZlh0OHZjNW1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZrsMA0G
CSqGSIb3DQEBCwUAA4IBAQA1LF37SWhgjiR9Ezn38BEwKejitmvtKWmmNVCaGUF4
1LxtLcmVu1nelEkmoJXsmkctzIDJ418z2o/xmw5H4xlwuFz0GhSYaUTlUqCvvHNe
iLQYpS6wSZi24aQt9q17nS8/ACTLZSjFeDbI2yhV0EAHKoT6gDcdPpId5SzAgiwD
JEqBf1FZNBRwvtU98SfebbeJsNWIC3vFrAgzOPxoEvraw+QWzO4F8esmdQdHmqpN
rrR4mmHBj8d7NAkTyU1mnCiaJ48S6avVlG6JXzMi2sCdhecw8jrMZttiFXBVRLFr
eV1nZUIUPjWg+D4SgxN2tNqvyP4DRZ9OvK6wMb0RMyra
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:15 2025 by rpki-client