Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/OGDkXEdCBljyIlPEyUnXtsiLHfo.roa
File: OGDkXEdCBljyIlPEyUnXtsiLHfo.roa (raw, json)
Hash identifier: MwZtv/+WnhOi+F5SZ2FW9KbPZtjcyD++Ok9wVqW5D/Y=
Subject key identifier: 38:60:E4:5C:47:42:06:58:F2:22:53:C4:C9:49:D7:B6:C8:8B:1D:FA
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018260E9FC46D4D0E038005027C882E6D9B6
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/OGDkXEdCBljyIlPEyUnXtsiLHfo.roa
Signing time: Tue 02 Aug 2022 23:35:23 +0000
ROA not before: Tue 02 Aug 2022 23:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 5.181.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:60:e9:fc:46:d4:d0:e0:38:00:50:27:c8:82:e6:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Aug 2 23:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3860e45c47420658f22253c4c949d7b6c88b1dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:e0:23:a0:48:f1:de:76:c8:1a:d0:3e:a0:
5c:30:92:67:9e:c9:fa:2d:d6:0d:d8:29:38:98:a8:
82:1e:10:07:8c:76:17:89:e0:37:f0:68:7f:35:d1:
ae:fb:85:47:3c:60:b5:6e:3e:ca:46:be:5e:7e:4a:
b1:83:e2:b0:b5:c0:3b:f0:4f:5c:0c:3b:d9:64:06:
45:8c:e0:ce:7a:33:8e:e5:39:0a:a5:9d:be:df:5f:
20:63:62:a0:06:f8:b5:a9:cd:97:7f:ea:5a:c8:a9:
2c:b8:06:d6:f7:1b:d9:89:67:84:03:25:ec:fa:0e:
25:89:46:03:7c:d9:a8:4f:a0:69:82:cd:3a:f7:85:
7c:2e:a8:78:95:2c:e9:4d:6c:2d:bd:d6:d7:c4:c1:
3d:6c:20:d0:68:23:24:59:eb:94:01:05:40:c2:a3:
27:d2:d4:59:8c:e2:48:e3:d7:90:5e:7e:7a:74:43:
ef:51:45:e5:41:c0:96:da:fd:fb:94:0e:31:ea:5b:
44:78:ce:98:10:ed:e7:ff:7d:9e:75:60:8c:cd:52:
b4:99:f9:58:66:60:53:2b:be:3b:ad:1e:80:2e:52:
e8:53:6e:d5:aa:a2:ae:b3:11:6b:92:8e:33:d6:21:
51:e7:b7:85:0b:6d:d4:11:b4:2c:c8:b2:ca:d8:6d:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:E4:5C:47:42:06:58:F2:22:53:C4:C9:49:D7:B6:C8:8B:1D:FA
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/OGDkXEdCBljyIlPEyUnXtsiLHfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/22
Signature Algorithm: sha256WithRSAEncryption
95:b8:08:00:63:fb:35:8b:2e:6a:c2:a5:90:d1:f8:d2:72:0f:
a6:67:9f:0c:88:99:34:13:bc:76:f4:f1:23:38:b3:8f:89:c9:
9b:ff:e7:d1:1c:eb:cf:ba:74:0f:75:c9:96:ec:11:58:fb:f9:
24:0a:99:9f:39:dc:65:e1:01:f9:2b:91:51:06:cc:61:23:dd:
80:31:e2:22:fb:70:5d:d5:15:42:cd:07:9f:9b:1a:09:68:c3:
39:4c:03:31:93:3e:8c:69:7d:2a:be:1d:87:25:15:d0:1a:44:
0e:ae:ef:00:f8:74:db:b4:4c:e6:ca:52:1e:40:c2:6e:92:2a:
71:ba:c8:97:1d:f7:a6:8c:1d:f0:81:d4:1d:ce:46:06:ca:94:
45:28:7b:ae:c9:e2:a8:63:1a:f1:ad:91:ea:2b:9a:7d:cc:ae:
6d:c6:16:6e:b6:46:5d:16:85:97:b0:dd:78:74:06:22:1e:6b:
af:04:2d:45:de:e7:8e:dc:04:5f:4a:2b:5a:9c:6d:f0:b8:7b:
9e:95:9e:e6:c8:60:aa:09:a9:76:28:e6:61:49:c0:ae:fc:0e:
27:e0:94:63:36:03:a8:8b:33:94:81:ca:5a:26:20:91:1a:55:
16:1b:49:46:9a:e5:75:10:d3:9f:c0:7d:ab:a3:08:e5:00:bd:
f3:b4:92:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJg6fxG1NDgOABQJ8iC5tm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjIwODAyMjMzNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYwZTQ1YzQ3NDIwNjU4ZjIyMjUzYzRjOTQ5ZDdiNmM4OGIxZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qbgI6BI8d52yBrQPqBcMJJnnsn6
LdYN2Ck4mKiCHhAHjHYXieA38Gh/NdGu+4VHPGC1bj7KRr5efkqxg+KwtcA78E9c
DDvZZAZFjODOejOO5TkKpZ2+318gY2KgBvi1qc2Xf+payKksuAbW9xvZiWeEAyXs
+g4liUYDfNmoT6Bpgs0694V8Lqh4lSzpTWwtvdbXxME9bCDQaCMkWeuUAQVAwqMn
0tRZjOJI49eQXn56dEPvUUXlQcCW2v37lA4x6ltEeM6YEO3n/32edWCMzVK0mflY
ZmBTK747rR6ALlLoU27VqqKusxFrko4z1iFR57eFC23UEbQsyLLK2G01BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhg5FxHQgZY8iJTxMlJ17bIix36MB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvT0dEa1hFZENCbGp5SWxQRXlVblh0c2lMSGZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbW4MA0G
CSqGSIb3DQEBCwUAA4IBAQCVuAgAY/s1iy5qwqWQ0fjScg+mZ58MiJk0E7x29PEj
OLOPicmb/+fRHOvPunQPdcmW7BFY+/kkCpmfOdxl4QH5K5FRBsxhI92AMeIi+3Bd
1RVCzQefmxoJaMM5TAMxkz6MaX0qvh2HJRXQGkQOru8A+HTbtEzmylIeQMJukipx
usiXHfemjB3wgdQdzkYGypRFKHuuyeKoYxrxrZHqK5p9zK5txhZutkZdFoWXsN14
dAYiHmuvBC1F3ueO3ARfSitanG3wuHuelZ7myGCqCal2KOZhScCu/A4n4JRjNgOo
izOUgcpaJiCRGlUWG0lGmuV1ENOfwH2rowjlAL3ztJJ7
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:24:05 2025 by rpki-client