Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/H0lhlyvHrJBUbelTUSco_7dJSjQ.roa
File: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (raw, json)
Hash identifier: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=
Subject key identifier: 1F:49:61:97:2B:C7:AC:90:54:6D:E9:53:51:27:28:FF:B7:49:4A:34
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01942520B010C4B831DA153285318EB881F6
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/H0lhlyvHrJBUbelTUSco_7dJSjQ.roa
Signing time: Thu 02 Jan 2025 03:48:06 +0000
ROA not before: Thu 02 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57668
IP address blocks: 5.183.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:b0:10:c4:b8:31:da:15:32:85:31:8e:b8:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 2 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f4961972bc7ac90546de953512728ffb7494a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:07:f2:82:d2:3c:a5:e6:81:22:6e:57:b2:
d9:4d:11:a1:c2:32:5b:b8:03:5e:72:ed:f7:be:54:
e0:f9:d0:08:b4:03:91:c9:87:ff:58:0c:f1:3a:ec:
a9:5b:da:fd:a0:8c:8f:d0:52:83:a7:45:03:91:8b:
04:a8:55:80:fb:ac:45:f0:7d:b5:fb:35:b0:0d:89:
81:12:a1:71:f9:76:20:11:b8:7f:a0:21:c5:21:68:
df:ae:2a:a3:dd:af:b9:60:d7:89:5c:d6:16:4c:e3:
a7:da:f8:8c:08:7d:d3:74:a3:a4:b7:35:20:43:e4:
e0:38:3c:00:ed:53:5e:91:45:c9:5e:3a:56:95:b7:
2a:3c:d8:f0:ca:90:af:bb:a1:76:49:bb:cf:1d:22:
2a:bc:d2:40:bc:48:5c:4d:57:63:58:c8:34:04:22:
ba:55:82:ca:e5:70:43:5c:ac:d9:8d:5c:0c:4e:56:
89:d7:3e:f3:07:54:1e:f0:d1:ae:16:ff:e0:de:83:
d7:9c:47:c2:a8:cc:4f:b7:c0:ec:11:4a:d2:b5:ff:
41:d2:ec:37:2f:fc:de:6f:e4:09:8a:d8:28:38:10:
d8:67:aa:2a:d3:d2:24:03:04:28:11:03:36:0c:44:
48:89:e3:a4:0f:4c:0d:2f:a5:77:be:db:1d:fb:e2:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:61:97:2B:C7:AC:90:54:6D:E9:53:51:27:28:FF:B7:49:4A:34
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/H0lhlyvHrJBUbelTUSco_7dJSjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:32:56:ac:50:e5:a6:80:0d:76:38:cd:e9:d0:5b:e7:46:8c:
91:5a:b2:91:f1:2c:41:8a:9f:4d:35:5e:43:8c:15:f9:c2:cf:
5e:d5:2a:50:a7:96:67:0c:3b:b6:76:c4:d8:f0:a5:3e:ee:20:
63:97:07:ac:ed:35:1a:47:05:71:f9:e5:a9:6f:a2:c7:cc:67:
84:27:e1:f5:4e:f0:44:ae:e6:dd:90:0f:39:34:93:10:b4:a9:
89:28:3a:61:85:1d:cf:c5:c3:bc:5b:f7:d0:9c:65:37:fa:6e:
13:49:de:5e:d4:7c:36:b6:ad:62:ac:46:10:51:cf:19:3f:ad:
e5:fa:58:14:00:85:08:bf:f3:cc:06:03:49:11:4d:60:f1:de:
85:27:73:7b:fd:a8:b5:ff:b9:86:e3:8c:64:ef:3c:9a:59:c8:
01:6d:1e:ee:c5:c7:59:05:9c:57:73:4b:6b:91:17:f9:4b:ae:
5a:2f:83:6f:b1:11:f5:ab:1e:19:37:aa:79:49:e8:69:7e:b0:
4a:88:06:96:b7:87:f1:56:15:6d:3b:d7:99:6a:08:81:72:ef:
2b:a5:d9:1c:4d:32:48:45:04:2d:38:49:41:8c:18:94:0a:2e:
19:96:ec:8b:70:a2:70:09:2a:14:1c:2d:a0:5e:bd:ea:50:ab:
b1:23:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:41:29 2025 by rpki-client