Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/zipYLXAkLGCabnd7bvD7hCs-zDk.roa
File: zipYLXAkLGCabnd7bvD7hCs-zDk.roa (raw, json)
Hash identifier: xoWAvc0Kjl90Yu8l8zPh4PCC3+eKC0d27+942mujzcI=
Subject key identifier: CE:2A:58:2D:70:24:2C:60:9A:6E:77:7B:6E:F0:FB:84:2B:3E:CC:39
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 01856CB84CFACF6CE1E1ABAA849D6777B6BF
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/zipYLXAkLGCabnd7bvD7hCs-zDk.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 216.247.232.0/22 maxlen: 22
113.30.192.0/21 maxlen: 21
5.183.88.0/22 maxlen: 22
2a10:d507::/32 maxlen: 32
2a10:d501::/32 maxlen: 32
2a10:d502::/32 maxlen: 32
2a10:d506::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4c:fa:cf:6c:e1:e1:ab:aa:84:9d:67:77:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce2a582d70242c609a6e777b6ef0fb842b3ecc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:9d:21:7d:95:49:88:71:17:13:c0:61:ca:
5a:35:6b:bd:53:d6:70:be:29:bf:a9:72:d4:41:b3:
82:bf:88:30:2f:6d:c5:31:df:6b:3d:dc:1f:a0:75:
0d:45:e2:89:8d:92:55:cc:e7:21:37:a9:10:aa:4a:
20:75:f2:16:13:31:76:fd:97:2a:8c:a5:a6:ca:7c:
02:8c:5d:82:a5:3e:07:2d:0b:40:35:a6:ea:2e:3c:
d6:5a:a7:7f:10:d0:7d:bb:2a:7b:2c:23:7a:77:9f:
fb:a0:05:27:a2:0e:4b:06:05:ce:7a:4d:1f:d4:e2:
3a:67:1e:cc:d6:3c:d6:fa:27:07:1c:ae:d4:69:13:
aa:1e:c9:93:36:3e:8b:1d:cd:3b:0d:d0:87:1e:b4:
7e:39:45:17:16:80:57:f0:55:bb:56:63:47:07:d7:
d8:0c:ff:47:7b:9a:81:9a:44:97:7a:7a:69:2a:17:
58:8c:b7:88:66:a8:f1:2d:2b:7c:99:ca:73:39:56:
35:a5:49:8a:63:09:f7:e8:91:93:9f:90:d8:53:b4:
94:5b:a3:75:16:44:8c:32:fb:87:d2:de:72:fe:e7:
87:c7:21:4f:b2:56:c7:c9:45:0e:68:3e:8d:ad:c9:
99:8d:55:60:ed:ec:17:2f:6c:f5:a8:12:75:e9:41:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:58:2D:70:24:2C:60:9A:6E:77:7B:6E:F0:FB:84:2B:3E:CC:39
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/zipYLXAkLGCabnd7bvD7hCs-zDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.88.0/22
113.30.192.0/21
216.247.232.0/22
IPv6:
2a10:d501::-2a10:d502:ffff:ffff:ffff:ffff:ffff:ffff
2a10:d506::/31
Signature Algorithm: sha256WithRSAEncryption
02:6c:af:71:40:0a:d3:bb:c0:55:4b:c0:0c:bb:d6:46:04:7e:
a2:0c:dc:73:af:b8:c3:15:1b:6e:37:d5:b4:c2:78:56:b8:1a:
b1:e5:c8:40:66:09:75:70:4d:25:17:2c:36:9d:19:83:81:05:
33:59:3c:83:da:73:6c:95:97:3d:ae:8a:55:0c:54:18:8b:32:
b9:88:a5:8d:33:3d:bc:10:87:19:ce:30:eb:61:bf:c6:f4:3b:
d1:cf:79:6b:f4:67:53:34:be:3d:28:9c:bd:22:5f:47:9d:f0:
f1:04:1c:1a:d4:5c:e3:c4:89:cb:b6:f6:32:0a:e8:df:e3:a4:
a4:f7:b5:6b:42:42:e6:1b:ed:3e:d5:04:71:ab:a8:50:e8:be:
0e:76:c8:ab:29:20:87:c8:67:52:4e:43:d0:bc:15:22:70:05:
cc:3b:95:97:cc:b5:de:c5:1a:c1:6a:98:60:ec:7c:e3:be:82:
f2:a7:2c:9b:09:36:c0:cf:82:5d:db:0c:3a:ff:5d:b8:fa:44:
c7:f7:79:8a:72:fa:fa:5b:3b:ab:b8:49:6c:f3:1f:94:32:f8:
23:75:8a:2d:95:85:5c:18:87:e2:ae:46:35:89:73:df:d2:82:
86:30:6d:9d:08:97:be:cf:e5:d1:b2:dc:34:09:39:c3:6a:b8:
b0:12:52:12
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYVsuEz6z2zh4auqhJ1nd7a/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTQ2ODdhYjhiMWViNmRlMWFiZDA0YTA3NjE3Yzg2ZDEx
ODUxOGQwHhcNMjMwMTAxMDk0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTJhNTgyZDcwMjQyYzYwOWE2ZTc3N2I2ZWYwZmI4NDJiM2VjYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qdIX2VSYhxFxPAYcpaNWu9U9Zw
vim/qXLUQbOCv4gwL23FMd9rPdwfoHUNReKJjZJVzOchN6kQqkogdfIWEzF2/Zcq
jKWmynwCjF2CpT4HLQtANabqLjzWWqd/ENB9uyp7LCN6d5/7oAUnog5LBgXOek0f
1OI6Zx7M1jzW+icHHK7UaROqHsmTNj6LHc07DdCHHrR+OUUXFoBX8FW7VmNHB9fY
DP9He5qBmkSXenppKhdYjLeIZqjxLSt8mcpzOVY1pUmKYwn36JGTn5DYU7SUW6N1
FkSMMvuH0t5y/ueHxyFPslbHyUUOaD6NrcmZjVVg7ewXL2z1qBJ16UGmgQIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFM4qWC1wJCxgmm53e27w+4QrPsw5MB8GA1UdIwQY
MBaAFObkaHq4sett4avQSgdhfIbRGFGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMt
MTM4YmJhYWM3ZmUyLzEvemlwWUxYQWtMR0NhYm5kN2J2RDdoQ3MtekRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMtMTM4YmJhYWM3ZmUy
LzEvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAYBAIAATASAwQCBbdYAwQD
cR7AAwQC2PfoMB0EAgACMBcwDgMFACoQ1QEDBQAqENUCAwUBKhDVBjANBgkqhkiG
9w0BAQsFAAOCAQEAAmyvcUAK07vAVUvADLvWRgR+ogzcc6+4wxUbbjfVtMJ4Vrga
seXIQGYJdXBNJRcsNp0Zg4EFM1k8g9pzbJWXPa6KVQxUGIsyuYiljTM9vBCHGc4w
62G/xvQ70c95a/RnUzS+PSicvSJfR53w8QQcGtRc48SJy7b2Mgro3+OkpPe1a0JC
5hvtPtUEcauoUOi+DnbIqykgh8hnUk5D0LwVInAFzDuVl8y13sUawWqYYOx8476C
8qcsmwk2wM+CXdsMOv9duPpEx/d5inL6+ls7q7hJbPMflDL4I3WKLZWFXBiH4q5G
NYlz39KChjBtnQiXvs/l0bLcNAk5w2q4sBJSEg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:26 2025 by rpki-client