Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/99dctcKbEJTsr1mXq87vI8DP4Rw.roa
File: 99dctcKbEJTsr1mXq87vI8DP4Rw.roa (raw, json)
Hash identifier: qS2tRGvr8p9ssh5+Uxp4SQDhtK73WC22O+QD9IR3PUU=
Subject key identifier: F7:D7:5C:B5:C2:9B:10:94:EC:AF:59:97:AB:CE:EF:23:C0:CF:E1:1C
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 0189208F51EB7532BC342DE36A3676DC754C
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/99dctcKbEJTsr1mXq87vI8DP4Rw.roa
Signing time: Tue 04 Jul 2023 11:00:10 +0000
ROA not before: Tue 04 Jul 2023 11:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34643
IP address blocks: 5.253.183.0/24 maxlen: 24
5.253.181.0/24 maxlen: 24
5.253.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:8f:51:eb:75:32:bc:34:2d:e3:6a:36:76:dc:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jul 4 11:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7d75cb5c29b1094ecaf5997abceef23c0cfe11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:44:c5:fc:01:d4:0d:e8:80:e2:87:15:24:
9e:e6:08:b2:a3:21:57:f7:a7:ad:52:45:07:04:9c:
3e:b4:61:88:a8:9d:a9:85:1d:73:ce:4c:b5:d9:d2:
f0:3f:c1:70:d6:60:05:2f:b3:f6:fa:c3:d9:52:36:
e0:50:bf:80:03:fd:5d:7a:31:5e:ba:a3:a0:3c:b6:
18:60:95:be:d1:c3:8b:94:41:4e:c6:62:33:6f:58:
92:85:91:5e:75:8a:cf:27:d5:65:cd:71:6b:0d:67:
1d:e1:a0:cb:d3:8a:44:ab:00:37:82:5c:b8:e9:ba:
11:bd:ac:07:4e:74:91:4c:ae:07:2c:ac:cb:4f:81:
5f:b4:4d:fe:c5:44:1e:f0:1e:fc:1a:64:f3:99:6c:
af:85:e9:5f:db:0d:2b:af:f2:42:92:45:0b:71:68:
95:09:88:dc:01:61:bf:38:c2:86:6c:40:ca:42:65:
d7:c1:b7:21:e5:af:12:3e:23:5e:51:77:8f:02:18:
ce:40:2b:ee:d0:e6:48:09:46:f9:46:3b:13:6c:34:
64:55:d5:be:f1:5e:ad:6c:ec:04:ae:cd:a7:d3:45:
5e:f6:6a:d6:c0:93:65:f0:d5:a4:31:ca:fe:41:39:
13:20:15:44:3d:c6:20:45:61:3a:c8:35:fa:22:f4:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D7:5C:B5:C2:9B:10:94:EC:AF:59:97:AB:CE:EF:23:C0:CF:E1:1C
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/99dctcKbEJTsr1mXq87vI8DP4Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.181.0-5.253.183.255
Signature Algorithm: sha256WithRSAEncryption
54:8d:74:15:92:3b:67:6e:76:ab:80:d7:19:b2:09:74:d6:27:
b6:53:b8:f9:d3:51:b6:6b:fe:87:6a:fa:1c:94:59:e3:8e:e0:
29:30:e3:c2:db:0d:16:11:16:3b:aa:85:b4:2a:93:36:1f:56:
7b:36:4f:25:cb:c2:29:70:4b:e1:8d:7e:44:0b:e8:30:52:f9:
54:77:1d:b2:79:68:ad:1f:18:de:df:3a:a4:45:1d:c8:0d:ce:
24:04:48:a4:f5:e2:3b:50:da:66:d4:6a:11:d6:18:f7:c2:7c:
ea:6d:6e:f8:e7:ec:42:ff:42:06:77:bd:e4:62:22:6d:a1:eb:
23:a0:e4:fc:20:6f:cb:9e:83:9d:60:b7:cf:df:cc:bd:ed:75:
f1:44:f4:c8:f8:95:45:64:01:b2:a2:d6:93:86:30:5e:9d:b9:
cd:58:61:76:6a:3e:90:54:f1:aa:84:da:46:2d:eb:a9:7e:a9:
ad:cb:b3:c6:1d:d6:3a:5d:0f:bc:4d:28:c5:4e:7e:44:5b:0a:
fa:f1:60:ff:56:a8:e5:0d:0b:2e:05:17:02:55:3a:41:33:d0:
0e:0b:0a:41:e2:b7:83:0e:b6:c8:61:91:b4:76:12:a6:57:74:
fb:92:b4:ee:57:6a:40:bb:40:4b:90:3e:aa:a1:08:69:d4:f1:
7d:6c:6d:9b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYkgj1HrdTK8NC3jajZ23HVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjMwNzA0MTEwMDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2Q3NWNiNWMyOWIxMDk0ZWNhZjU5OTdhYmNlZWYyM2MwY2ZlMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz9ExfwB1A3ogOKHFSSe5giyoyFX
96etUkUHBJw+tGGIqJ2phR1zzky12dLwP8Fw1mAFL7P2+sPZUjbgUL+AA/1dejFe
uqOgPLYYYJW+0cOLlEFOxmIzb1iShZFedYrPJ9VlzXFrDWcd4aDL04pEqwA3gly4
6boRvawHTnSRTK4HLKzLT4FftE3+xUQe8B78GmTzmWyvhelf2w0rr/JCkkULcWiV
CYjcAWG/OMKGbEDKQmXXwbch5a8SPiNeUXePAhjOQCvu0OZICUb5RjsTbDRkVdW+
8V6tbOwErs2n00Ve9mrWwJNl8NWkMcr+QTkTIBVEPcYgRWE6yDX6IvR4rQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPfXXLXCmxCU7K9Zl6vO7yPAz+EcMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvOTlkY3RjS2JFSlRzcjFtWHE4N3ZJOERQNFJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAF/bUD
BAMF/bAwDQYJKoZIhvcNAQELBQADggEBAFSNdBWSO2dudquA1xmyCXTWJ7ZTuPnT
UbZr/odq+hyUWeOO4Ckw48LbDRYRFjuqhbQqkzYfVns2TyXLwilwS+GNfkQL6DBS
+VR3HbJ5aK0fGN7fOqRFHcgNziQESKT14jtQ2mbUahHWGPfCfOptbvjn7EL/QgZ3
veRiIm2h6yOg5Pwgb8ueg51gt8/fzL3tdfFE9Mj4lUVkAbKi1pOGMF6duc1YYXZq
PpBU8aqE2kYt66l+qa3Ls8Yd1jpdD7xNKMVOfkRbCvrxYP9WqOUNCy4FFwJVOkEz
0A4LCkHit4MOtshhkbR2EqZXdPuStO5XakC7QEuQPqqhCGnU8X1sbZs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:19:33 2025 by rpki-client