Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/lCS66nr_34n8kitgenkDbIDqSMI.roa
File: lCS66nr_34n8kitgenkDbIDqSMI.roa (raw, json)
Hash identifier: o05fOPaJoMMqnJ5H0CfmonwCsoEzGcFHjgPxJXgpi8o=
Subject key identifier: 94:24:BA:EA:7A:FF:DF:89:FC:92:2B:60:7A:79:03:6C:80:EA:48:C2
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 019493BB70482288F39D789ADC9B4AFEE51A
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/lCS66nr_34n8kitgenkDbIDqSMI.roa
Signing time: Thu 23 Jan 2025 15:15:21 +0000
ROA not before: Thu 23 Jan 2025 15:15:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202654
IP address blocks: 5.59.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:bb:70:48:22:88:f3:9d:78:9a:dc:9b:4a:fe:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 23 15:15:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9424baea7affdf89fc922b607a79036c80ea48c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:83:80:e0:3b:79:c2:bc:a0:17:db:13:ca:
3c:9e:a7:eb:c6:3d:7c:e0:8a:f2:22:e3:a6:9f:2b:
5b:f9:cd:05:4f:6c:c8:96:7e:19:ef:bb:13:e6:2a:
97:14:63:e2:52:70:06:66:e1:59:14:45:66:87:98:
0d:b4:eb:dd:0f:35:f4:42:09:1f:4a:25:2d:41:51:
5e:b6:22:52:6a:c4:9c:13:12:65:8d:07:b6:3d:8b:
28:39:6b:2e:d1:80:ad:60:39:c2:ab:71:5b:b1:52:
3b:4c:58:87:47:64:66:f3:91:ef:f4:ac:af:4a:88:
ba:2a:a3:bf:6f:41:52:a9:6f:74:59:d7:7b:bb:93:
c1:e4:9f:92:df:9e:93:6c:59:b4:d0:c0:fb:dd:9b:
7d:6a:43:c7:61:ed:2b:9e:c7:bf:e6:94:cf:81:5c:
58:74:7b:33:27:27:f8:62:2c:3c:89:ff:6e:1f:95:
32:90:67:32:8f:32:7f:2e:81:ea:59:84:2b:03:97:
f9:10:e8:fe:ac:0e:50:54:df:e4:db:89:f4:bd:2f:
22:6b:b9:c5:32:92:b6:4f:f2:22:fd:27:83:4c:5d:
85:e9:6f:43:0c:d4:18:ad:07:af:8f:35:b5:20:00:
6f:ea:87:41:e0:86:00:92:10:1c:79:35:2c:aa:a7:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:BA:EA:7A:FF:DF:89:FC:92:2B:60:7A:79:03:6C:80:EA:48:C2
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/lCS66nr_34n8kitgenkDbIDqSMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
76:2a:cd:b2:e2:ba:ae:06:50:61:9c:4a:af:38:98:b4:df:77:
a7:2e:96:fe:62:53:6a:26:c3:97:88:50:0d:c3:4c:3d:47:72:
2a:47:d2:7d:b7:97:e8:59:6d:85:5e:03:16:04:c7:4a:a2:2f:
79:70:27:16:15:cd:9e:cd:33:f1:38:5f:1d:08:d6:ac:b6:a6:
b3:b5:ba:bd:2c:be:e1:16:77:7c:6b:d7:26:ac:f7:ca:1d:8b:
67:78:3f:7c:d6:e7:ac:d5:82:3d:c3:61:06:b9:98:3e:e6:bb:
d4:c6:b3:5f:c9:cf:1b:ef:1c:9c:de:e9:5b:a3:c3:bc:f9:e4:
d2:15:64:39:99:50:a4:66:8c:a6:9a:40:89:20:4f:d8:6b:73:
b7:14:61:3d:18:a8:e1:19:7b:99:d8:d1:09:2d:a6:d3:08:66:
95:cc:69:39:43:83:19:30:32:5f:19:d3:cd:bd:ac:5a:57:a3:
c3:9c:2f:f1:e4:ba:b9:14:b6:36:e7:a7:69:85:1e:ed:db:87:
4e:f6:d9:26:03:d8:69:8f:08:12:9f:8a:c7:3b:eb:7b:84:2f:
42:12:6f:a2:97:63:8e:d7:e4:64:61:c2:36:fc:38:3a:80:b9:
ff:cd:81:24:5b:e3:49:ef:84:e6:53:1a:5d:4d:c9:75:e2:39:
0a:2a:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:42:41 2025 by rpki-client