Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa
File: IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa (raw, json)
Hash identifier: KQukkBzYCAe/vdNdC/O/VpKFkKbDN6k4Tl6VoqE1eLc=
Subject key identifier: 20:6A:D2:37:F6:74:6B:1F:A4:CB:B4:04:D6:C6:3D:66:12:5D:A0:13
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8B46264521D35201F9AB1DEBA9FB
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33881
IP address blocks: 5.154.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8b:46:26:45:21:d3:52:01:f9:ab:1d:eb:a9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=206ad237f6746b1fa4cbb404d6c63d66125da013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:e3:b7:80:1a:53:76:43:f9:93:d0:e3:5e:
db:69:bf:fe:df:a0:3c:ff:58:66:1a:5e:8a:0f:a1:
ee:f2:bc:0a:23:bb:bd:02:f5:ea:e5:b8:5e:2b:35:
30:28:21:21:ae:80:26:3c:b7:9a:7f:92:d0:fd:21:
78:46:c6:6f:d9:e3:7d:43:6c:70:86:e0:24:06:53:
1f:02:36:dd:f4:93:13:cf:bd:7c:3f:d0:5d:08:39:
88:7d:22:3c:c9:fb:5d:9d:ca:40:b8:73:98:50:5d:
b4:f6:0d:27:16:a0:42:c6:4c:59:e8:66:e0:14:54:
8d:b0:ae:42:3b:92:29:b1:6b:3e:98:dd:3e:93:df:
5a:66:c4:5e:78:48:ec:21:d0:bf:d3:6b:aa:b9:e5:
a3:e1:1c:c2:55:01:d1:f6:9c:b5:43:dd:67:a3:24:
62:2d:55:3f:9b:3b:18:73:48:d8:f1:0f:93:06:6b:
dc:8a:8a:fa:55:af:38:e8:9d:d9:e0:bc:ef:45:7e:
63:51:7d:5a:87:6d:50:36:46:a5:46:d4:4c:d4:73:
aa:14:1f:f0:5b:39:e1:95:03:1f:73:9c:a8:bb:e3:
37:7d:8d:6b:e7:b1:41:18:25:0e:92:38:be:e5:5b:
14:c0:49:ea:f6:8d:8b:4f:8c:f0:55:18:44:53:12:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:D2:37:F6:74:6B:1F:A4:CB:B4:04:D6:C6:3D:66:12:5D:A0:13
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IGrSN_Z0ax-ky7QE1sY9ZhJdoBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
65:55:44:61:70:68:7f:82:9d:0b:80:9e:eb:ef:75:a6:9a:67:
93:d6:b7:6e:34:4b:4d:9c:d7:b2:1f:32:c6:3a:13:e3:05:1a:
c4:bc:99:52:bc:0d:02:dc:ee:52:b8:b7:7a:a6:b2:db:99:9f:
7a:00:39:9f:ef:3a:06:99:cb:25:5e:a6:2b:7a:39:62:2c:af:
90:be:93:84:e5:de:f7:35:a9:f5:a8:15:af:73:ba:f4:66:fc:
60:84:04:18:79:a3:bd:17:6b:02:c7:ec:25:c7:76:68:97:c6:
dd:cf:bd:f1:3f:a1:4c:06:48:7a:6b:de:e6:5c:88:49:ac:07:
10:3e:0b:06:2e:e1:e1:06:bf:eb:97:8d:c7:bc:99:75:01:b5:
70:08:01:05:f5:f9:ad:d8:f8:36:86:36:64:73:77:09:e8:af:
65:df:7a:4b:95:1d:8f:96:b0:26:bf:21:4e:90:8e:b1:ab:4a:
86:19:b7:91:6c:b9:09:57:5d:83:1d:c0:03:36:58:64:74:ae:
f7:67:da:f4:f1:d4:82:a7:c7:50:c3:ef:35:b5:f1:9c:e0:a8:
6d:86:26:0d:f0:33:2f:83:d7:9e:1b:24:1c:fe:6b:e5:08:ce:
60:ce:73:e7:78:91:58:21:7c:d4:8b:4d:b0:f5:0c:7c:17:5c:
0a:63:7d:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4tGJkUh01IB+asd66n7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDZhZDIzN2Y2NzQ2YjFmYTRjYmI0MDRkNmM2M2Q2NjEyNWRhMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9njt4AaU3ZD+ZPQ417bab/+36A8
/1hmGl6KD6Hu8rwKI7u9AvXq5bheKzUwKCEhroAmPLeaf5LQ/SF4RsZv2eN9Q2xw
huAkBlMfAjbd9JMTz718P9BdCDmIfSI8yftdncpAuHOYUF209g0nFqBCxkxZ6Gbg
FFSNsK5CO5IpsWs+mN0+k99aZsReeEjsIdC/02uqueWj4RzCVQHR9py1Q91noyRi
LVU/mzsYc0jY8Q+TBmvcior6Va846J3Z4LzvRX5jUX1ah21QNkalRtRM1HOqFB/w
WznhlQMfc5you+M3fY1r57FBGCUOkji+5VsUwEnq9o2LT4zwVRhEUxJ9yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBq0jf2dGsfpMu0BNbGPWYSXaATMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvSUdyU05fWjBheC1reTdRRTFzWTlaaEpkb0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZqsMA0G
CSqGSIb3DQEBCwUAA4IBAQBlVURhcGh/gp0LgJ7r73WmmmeT1rduNEtNnNeyHzLG
OhPjBRrEvJlSvA0C3O5SuLd6prLbmZ96ADmf7zoGmcslXqYrejliLK+QvpOE5d73
Nan1qBWvc7r0ZvxghAQYeaO9F2sCx+wlx3Zol8bdz73xP6FMBkh6a97mXIhJrAcQ
PgsGLuHhBr/rl43HvJl1AbVwCAEF9fmt2Pg2hjZkc3cJ6K9l33pLlR2PlrAmvyFO
kI6xq0qGGbeRbLkJV12DHcADNlhkdK73Z9r08dSCp8dQw+81tfGc4KhthiYN8DMv
g9eeGyQc/mvlCM5gznPneJFYIXzUi02w9Qx8F1wKY30w
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net