Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AgGUvZl11dHrrKKJlQt0vNoXPUA.roa
File: AgGUvZl11dHrrKKJlQt0vNoXPUA.roa (raw, json)
Hash identifier: Fq1zzalmHL5WVi72rclRkMBWzUIblK0OUGjY2P6A3/0=
Subject key identifier: 02:01:94:BD:99:75:D5:D1:EB:AC:A2:89:95:0B:74:BC:DA:17:3D:40
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019417368F60CE56EFF9B67A40EAC111F80F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AgGUvZl11dHrrKKJlQt0vNoXPUA.roa
Signing time: Mon 30 Dec 2024 10:57:19 +0000
ROA not before: Mon 30 Dec 2024 10:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 5.83.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:36:8f:60:ce:56:ef:f9:b6:7a:40:ea:c1:11:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 30 10:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=020194bd9975d5d1ebaca289950b74bcda173d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:a2:04:7e:74:43:a9:e1:b8:a5:72:42:1f:
86:2e:74:0a:e4:1c:fe:84:58:7b:cb:68:35:bd:9d:
4e:4c:b3:f1:a0:df:62:0b:c2:bb:55:ae:32:eb:29:
7e:49:6d:b9:bd:50:36:39:fd:36:44:88:1e:c0:3a:
54:19:4c:19:d2:ce:32:23:a3:82:42:f1:0b:6d:df:
41:89:4c:4f:77:c4:02:84:08:90:b2:61:3d:cf:96:
cb:c4:6d:bb:ec:85:22:37:9b:e3:57:08:01:50:70:
08:d2:72:39:de:84:1c:ff:8c:f9:4e:74:9a:5c:54:
06:76:a6:a1:df:1f:ae:ee:8e:7d:f9:10:1d:88:9d:
0f:f3:d8:2a:22:f5:e2:53:d6:e0:3d:60:e8:57:41:
71:61:3b:7f:ca:9f:c5:d4:18:ff:71:41:38:be:b1:
85:95:55:70:16:77:d4:dc:72:18:88:2d:bc:3f:71:
28:a6:9d:d3:f2:65:e7:4d:cb:35:44:01:9c:8d:ec:
35:e2:1d:ee:2b:97:6d:3a:54:f8:35:62:c8:49:04:
29:47:b6:51:b0:3d:b2:1a:7e:01:9f:51:2a:1a:20:
9c:66:14:11:9d:b1:7e:73:dd:4b:7e:62:c8:32:c1:
a1:c7:ac:b1:ac:e8:cc:57:17:22:f1:81:1d:69:ef:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:94:BD:99:75:D5:D1:EB:AC:A2:89:95:0B:74:BC:DA:17:3D:40
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AgGUvZl11dHrrKKJlQt0vNoXPUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0a:2c:c5:ed:7b:26:da:43:c2:04:09:4f:23:7d:6d:b6:50:
dc:8f:21:fc:47:ca:b0:2c:90:a7:7c:63:a1:ce:bb:85:7d:5e:
41:63:f0:a0:aa:3a:bf:e5:c0:bb:b8:d3:bb:c9:d0:17:40:fd:
d0:00:e3:20:9f:6a:76:55:bd:5f:6e:cf:a2:61:72:1c:7a:8b:
d7:2c:76:80:0a:b4:e6:be:19:c4:5d:7d:86:df:2d:4a:b2:25:
3c:34:a3:fb:b6:7b:71:88:8d:0f:72:14:5f:a8:8f:91:6b:66:
19:17:76:c2:af:17:80:3f:45:3a:0d:a2:5e:61:81:b5:5e:93:
d6:1b:38:fa:bb:65:0d:67:91:3d:94:60:91:47:c9:aa:73:28:
b8:32:61:8b:4f:38:39:31:a6:9d:3f:f6:b3:09:70:e8:66:cf:
0a:26:dc:3f:73:7a:49:2d:6a:99:62:a9:c7:2f:15:9d:e4:da:
6a:af:fa:b1:07:2f:e4:cf:92:2a:6a:d5:49:33:eb:b8:ac:da:
08:fe:61:e9:05:68:49:1e:fb:e4:56:90:98:55:2a:c7:b7:a6:
04:53:f9:c3:4b:4e:f7:a4:f9:57:72:61:5a:96:99:af:5a:2e:
62:5e:5a:15:91:96:93:69:71:43:93:4e:a7:0e:c7:6f:0f:5d:
44:bb:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:43 2025 by rpki-client