Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/aRPqPQS5qjVN7fqBJyx28YuUnGA.roa
File: aRPqPQS5qjVN7fqBJyx28YuUnGA.roa (raw, json)
Hash identifier: 9PmRNjeFVt5irYfav9SSn1lbWccXKiJgpY3LZTHz4Mw=
Subject key identifier: 69:13:EA:3D:04:B9:AA:35:4D:ED:FA:81:27:2C:76:F1:8B:94:9C:60
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA432EB389BC0C7A949014A28EB670
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/aRPqPQS5qjVN7fqBJyx28YuUnGA.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1273
IP address blocks: 5.28.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:2e:b3:89:bc:0c:7a:94:90:14:a2:8e:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6913ea3d04b9aa354dedfa81272c76f18b949c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:37:0a:2b:73:b9:3f:78:ed:9e:08:3a:33:
e5:a7:04:d1:db:dc:20:46:05:ac:09:0b:32:89:1a:
6c:2e:71:71:ac:28:11:80:02:1a:b1:c5:c7:97:e2:
52:e4:31:9c:50:a8:4b:57:8c:f6:ac:79:22:c7:95:
f1:56:80:59:b3:65:b3:2b:5b:aa:4c:f4:9b:4e:ff:
61:2d:a6:3b:07:b6:e3:55:60:fe:04:6b:9a:91:1e:
70:9e:aa:11:af:38:63:40:b3:f0:76:b6:3d:bd:03:
7f:70:78:33:a7:80:b8:60:41:d1:fd:e2:62:dd:ae:
e8:79:3b:97:c9:60:aa:dc:f4:77:79:c3:9d:10:2d:
27:07:58:b9:08:e0:b0:86:34:64:5a:e9:a1:23:e6:
a4:11:4e:56:73:14:e6:ac:c6:a7:1c:66:eb:9d:5c:
4c:c5:c6:1c:69:94:89:94:92:43:2d:22:83:c8:1e:
fa:d2:1d:1d:a8:47:a3:cb:23:50:08:58:0a:24:cc:
9e:34:ae:21:dc:4e:ac:34:98:79:0c:3c:27:d9:32:
ae:4d:d5:4e:80:fa:3d:41:67:5c:85:66:aa:cc:e0:
b4:07:98:f6:f0:6f:81:a5:48:23:c0:43:f9:e0:d2:
7e:9c:bd:58:6d:da:16:09:64:24:b6:d7:4e:71:0a:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:EA:3D:04:B9:AA:35:4D:ED:FA:81:27:2C:76:F1:8B:94:9C:60
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/aRPqPQS5qjVN7fqBJyx28YuUnGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
85:02:5d:5a:f6:ca:0d:db:c5:05:f5:3f:3b:a6:fb:ae:c6:78:
92:52:ce:51:b6:ab:bc:72:a9:23:2a:5c:68:83:4c:a3:18:16:
79:6f:57:75:e3:c0:b2:cc:50:76:12:80:ea:dc:fb:4a:76:f9:
55:f3:86:5a:a1:fb:24:7b:25:35:a8:d5:8c:76:ba:a4:68:c2:
8d:89:ef:d6:20:0b:46:60:5e:92:53:60:ea:03:f3:6d:5f:43:
76:df:43:01:ae:a3:cc:7a:5d:5b:e7:3b:ff:11:7b:f9:0a:c4:
da:ff:e0:db:1a:55:c0:67:6e:a4:15:a6:0f:8f:77:e8:5b:1b:
f8:9f:a0:93:06:1a:57:e1:5c:1a:a6:eb:a8:1a:4a:a5:aa:62:
bd:53:c8:fb:cb:8a:c2:fb:b6:ea:48:d5:6a:3d:d1:f6:f3:56:
1c:19:32:05:5e:6e:42:63:e9:9f:fa:9e:b6:f7:18:de:64:3a:
ac:e2:41:a8:89:fb:72:76:4d:9d:73:4c:07:db:2c:28:b9:fc:
e0:d8:1a:90:19:7e:f7:41:9a:64:5a:c1:c0:d6:a2:a0:e6:b8:
c4:56:86:34:fe:95:5c:60:15:14:24:0c:26:7d:5e:66:2d:22:
7a:3f:3c:13:6a:c1:1a:02:aa:47:b4:83:2c:90:df:48:dd:67:
7d:92:7e:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kMus4m8DHqUkBSijrZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTEzZWEzZDA0YjlhYTM1NGRlZGZhODEyNzJjNzZmMThiOTQ5YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM43CitzuT947Z4IOjPlpwTR29wg
RgWsCQsyiRpsLnFxrCgRgAIascXHl+JS5DGcUKhLV4z2rHkix5XxVoBZs2WzK1uq
TPSbTv9hLaY7B7bjVWD+BGuakR5wnqoRrzhjQLPwdrY9vQN/cHgzp4C4YEHR/eJi
3a7oeTuXyWCq3PR3ecOdEC0nB1i5COCwhjRkWumhI+akEU5WcxTmrManHGbrnVxM
xcYcaZSJlJJDLSKDyB760h0dqEejyyNQCFgKJMyeNK4h3E6sNJh5DDwn2TKuTdVO
gPo9QWdchWaqzOC0B5j28G+BpUgjwEP54NJ+nL1YbdoWCWQkttdOcQowfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkT6j0Euao1Te36gScsdvGLlJxgMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvYVJQcVBRUzVxalZON2ZxQkp5eDI4WXVVbkdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGBRzAMA0G
CSqGSIb3DQEBCwUAA4IBAQCFAl1a9soN28UF9T87pvuuxniSUs5Rtqu8cqkjKlxo
g0yjGBZ5b1d148CyzFB2EoDq3PtKdvlV84ZaofskeyU1qNWMdrqkaMKNie/WIAtG
YF6SU2DqA/NtX0N230MBrqPMel1b5zv/EXv5CsTa/+DbGlXAZ26kFaYPj3foWxv4
n6CTBhpX4VwapuuoGkqlqmK9U8j7y4rC+7bqSNVqPdH281YcGTIFXm5CY+mf+p62
9xjeZDqs4kGoiftydk2dc0wH2ywoufzg2BqQGX73QZpkWsHA1qKg5rjEVoY0/pVc
YBUUJAwmfV5mLSJ6PzwTasEaAqpHtIMskN9I3Wd9kn5g
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:02 2025 by rpki-client