Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/1Iw6gHnDSqh_FMH40VyoIg5xj8A.roa
File: 1Iw6gHnDSqh_FMH40VyoIg5xj8A.roa (raw, json)
Hash identifier: U/3vo7IizhXmn//229A52GpKQE4RRyhUPFs/QVWWVn4=
Subject key identifier: D4:8C:3A:80:79:C3:4A:A8:7F:14:C1:F8:D1:5C:A8:22:0E:71:8F:C0
Certificate issuer: /CN=5fe0a3fb18866eebad45981c224f23245d176099
Certificate serial: 096334CC
Authority key identifier: 5F:E0:A3:FB:18:86:6E:EB:AD:45:98:1C:22:4F:23:24:5D:17:60:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-Cj-xiGbuutRZgcIk8jJF0XYJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/1Iw6gHnDSqh_FMH40VyoIg5xj8A.roa
Signing time: Sat 01 Jan 2022 08:01:11 +0000
ROA not before: Sat 01 Jan 2022 08:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34643
IP address blocks: 5.253.128.0/24 maxlen: 24
5.253.131.0/24 maxlen: 24
5.253.129.0/24 maxlen: 24
5.253.130.0/24 maxlen: 24
2a09:5640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157496524 (0x96334cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0a3fb18866eebad45981c224f23245d176099
Validity
Not Before: Jan 1 08:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d48c3a8079c34aa87f14c1f8d15ca8220e718fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:b9:84:10:3f:56:74:30:98:03:25:10:a9:
8b:27:fe:96:b3:68:9c:d5:b5:0c:22:10:fc:f5:00:
8e:97:cf:08:53:24:d8:ce:6b:54:e8:55:da:47:1d:
1c:ff:88:a4:5d:b2:9e:c1:f7:6e:49:6c:50:8b:dc:
63:c3:00:67:63:e8:4c:16:ca:8f:5b:96:f3:1e:51:
ea:17:03:c8:ca:20:de:cd:08:65:66:8e:0d:9b:62:
66:68:c3:2e:c1:9d:67:a9:d9:da:01:2a:ba:0b:49:
fd:53:af:bd:c1:4c:85:cf:95:91:2c:fd:fe:34:56:
18:ca:13:13:80:c7:77:32:69:6b:96:56:71:4e:ec:
3d:1d:f6:37:3c:55:f3:8a:21:7d:0f:ee:f1:78:df:
5e:1a:ea:07:73:91:37:0b:fd:82:5a:9a:d7:64:b0:
67:b9:e3:41:45:5b:42:ae:57:fd:83:06:f3:d2:8b:
4b:3b:66:d2:3b:63:eb:07:b7:aa:01:da:5e:8e:14:
af:6c:d7:12:e2:1d:17:49:c1:0e:94:64:03:71:df:
9d:0c:76:f8:72:bf:25:67:ee:8d:f0:c6:fd:30:f3:
93:90:03:c5:65:9d:26:47:cc:61:10:34:d7:02:d9:
68:ca:e3:36:c8:fc:da:3d:87:18:d1:cd:79:c7:de:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:3A:80:79:C3:4A:A8:7F:14:C1:F8:D1:5C:A8:22:0E:71:8F:C0
X509v3 Authority Key Identifier:
keyid:5F:E0:A3:FB:18:86:6E:EB:AD:45:98:1C:22:4F:23:24:5D:17:60:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-Cj-xiGbuutRZgcIk8jJF0XYJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/1Iw6gHnDSqh_FMH40VyoIg5xj8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/42b6dd-845a-413b-b970-dab7d1eb4cf5/1/X-Cj-xiGbuutRZgcIk8jJF0XYJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.128.0/22
IPv6:
2a09:5640::/48
Signature Algorithm: sha256WithRSAEncryption
8b:fc:24:39:60:34:c3:65:9b:8f:4e:6c:08:cd:61:60:10:00:
a1:77:a7:b3:4e:67:68:2d:5e:35:55:ac:fb:c7:77:35:40:12:
8a:8b:90:82:12:ef:5d:b6:b9:dc:83:43:53:0f:25:7e:0a:a9:
9f:0c:85:cf:60:ed:c5:ba:48:e4:6d:9d:36:83:cc:d6:6b:af:
8f:35:d6:ec:eb:61:b0:fa:de:e0:e7:77:eb:30:3e:4c:61:a4:
20:96:e1:f2:ad:a9:b9:ae:e2:f9:6e:97:4b:46:43:79:d8:65:
e3:da:98:3a:c8:51:94:3e:2a:4a:6a:9e:36:84:80:65:5a:26:
83:06:3f:1e:aa:c9:39:9e:cd:37:8c:f2:d5:d6:af:40:ea:ea:
8a:b3:f6:f1:1d:9f:88:ee:0a:7e:16:38:9f:13:ec:93:f7:ca:
fd:17:f0:75:2f:0b:a1:7b:1a:ae:3f:a7:69:40:95:9b:e5:d7:
93:f2:03:43:67:c5:a4:b7:da:1a:44:8f:43:83:87:8d:0f:b5:
89:50:65:4e:99:81:62:94:88:57:f0:b3:a8:0f:f5:ba:6c:71:
7d:09:c1:93:c7:8e:73:3a:6c:24:e7:bb:5b:a2:2c:37:30:0e:
ee:80:56:fc:b8:e7:e1:6c:e2:d6:59:d1:7e:47:d3:47:21:cb:
78:f4:a7:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECWM0zDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZmUwYTNmYjE4ODY2ZWViYWQ0NTk4MWMyMjRmMjMyNDVkMTc2MDk5MB4XDTIyMDEw
MTA4MDExMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDQ4YzNhODA3OWMz
NGFhODdmMTRjMWY4ZDE1Y2E4MjIwZTcxOGZjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJp9uYQQP1Z0MJgDJRCpiyf+lrNonNW1DCIQ/PUAjpfPCFMk
2M5rVOhV2kcdHP+IpF2ynsH3bklsUIvcY8MAZ2PoTBbKj1uW8x5R6hcDyMog3s0I
ZWaODZtiZmjDLsGdZ6nZ2gEqugtJ/VOvvcFMhc+VkSz9/jRWGMoTE4DHdzJpa5ZW
cU7sPR32NzxV84ohfQ/u8XjfXhrqB3ORNwv9glqa12SwZ7njQUVbQq5X/YMG89KL
Sztm0jtj6we3qgHaXo4Ur2zXEuIdF0nBDpRkA3HfnQx2+HK/JWfujfDG/TDzk5AD
xWWdJkfMYRA01wLZaMrjNsj82j2HGNHNecfedrkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTUjDqAecNKqH8UwfjRXKgiDnGPwDAfBgNVHSMEGDAWgBRf4KP7GIZu661F
mBwiTyMkXRdgmTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1gtQ2oteGlHYnV1dFJaZ2NJazhqSkYwWFlKay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvNDJiNmRkLTg0NWEtNDEzYi1iOTcwLWRhYjdkMWViNGNmNS8x
LzFJdzZnSG5EU3FoX0ZNSDQwVnlvSWc1eGo4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
NDJiNmRkLTg0NWEtNDEzYi1iOTcwLWRhYjdkMWViNGNmNS8xL1gtQ2oteGlHYnV1
dFJaZ2NJazhqSkYwWFlKay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAgX9gDAPBAIAAjAJAwcAKglWQAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCL/CQ5YDTDZZuPTmwIzWFgEAChd6ezTmdoLV41
Vaz7x3c1QBKKi5CCEu9dtrncg0NTDyV+CqmfDIXPYO3FukjkbZ02g8zWa6+PNdbs
62Gw+t7g53frMD5MYaQgluHyram5ruL5bpdLRkN52GXj2pg6yFGUPipKap42hIBl
WiaDBj8eqsk5ns03jPLV1q9A6uqKs/bxHZ+I7gp+FjifE+yT98r9F/B1Lwuhexqu
P6dpQJWb5deT8gNDZ8Wkt9oaRI9Dg4eND7WJUGVOmYFilIhX8LOoD/W6bHF9CcGT
x45zOmwk57tboiw3MA7ugFb8uOfhbOLWWdF+R9NHIct49Kes
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:43 2024 by rpki-client on console-ams.rpki-client.org