Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LZ0nnw3_dQqcrebIv-dk7muNW_E.roa
File: LZ0nnw3_dQqcrebIv-dk7muNW_E.roa (raw, json)
Hash identifier: 4CYAA7KY0ihYBglosi8t0qYS2XW1AFkcjXNiz16/tQY=
Subject key identifier: 2D:9D:27:9F:0D:FF:75:0A:9C:AD:E6:C8:BF:E7:64:EE:6B:8D:5B:F1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B31B1F7EDE372080D90957420402705B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LZ0nnw3_dQqcrebIv-dk7muNW_E.roa
Signing time: Wed 29 Jan 2025 17:28:06 +0000
ROA not before: Wed 29 Jan 2025 17:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 5.83.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:1b:1f:7e:de:37:20:80:d9:09:57:42:04:02:70:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 29 17:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9d279f0dff750a9cade6c8bfe764ee6b8d5bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:ed:f1:a6:62:3e:49:86:cc:96:69:38:2a:
32:fd:56:2c:9a:98:64:04:e8:ee:52:3c:8b:e4:ed:
25:b0:5b:3c:e8:8a:99:6f:69:e8:21:d2:2e:92:9d:
15:36:02:cc:e5:15:23:9b:24:82:ee:02:0b:d7:11:
05:1a:53:99:3b:8e:10:b4:92:39:26:4b:64:bf:de:
19:b2:b1:ec:0d:37:98:4a:58:82:0b:93:fb:12:96:
12:16:8f:f3:c0:10:e0:55:98:0e:ab:09:d5:e0:4a:
89:bb:ba:1a:0e:3f:55:29:29:58:25:5f:2c:e5:55:
c6:18:7d:5d:91:8b:c1:da:68:9e:58:08:a5:fd:68:
6f:be:d3:74:a7:70:7a:21:14:d6:83:20:56:a5:73:
29:9d:0c:4f:22:08:6f:75:bc:fa:76:e5:5b:76:5e:
20:b0:9d:06:81:c5:d1:dd:a1:be:55:d1:6c:09:88:
3a:34:11:41:f4:30:00:3c:52:b4:03:0d:3b:ba:30:
79:7d:69:d4:eb:b0:36:18:aa:55:e2:59:fe:37:78:
69:14:3d:f3:d3:9d:5d:d5:7d:8c:f2:3d:4c:09:c3:
00:a6:0e:d4:4a:db:7f:cd:fd:a3:ce:61:b1:a1:1d:
91:56:3c:02:e0:62:25:a5:48:f4:9e:47:d2:30:23:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:27:9F:0D:FF:75:0A:9C:AD:E6:C8:BF:E7:64:EE:6B:8D:5B:F1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LZ0nnw3_dQqcrebIv-dk7muNW_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a4:e3:cf:32:33:d1:b3:01:4b:b8:37:cd:ac:de:b3:76:20:
6d:01:9c:ab:0c:c8:dd:d6:53:29:1f:f1:43:b2:53:fa:7f:5b:
fd:f9:30:dd:31:a1:b1:0f:1c:9d:6b:a7:6f:3e:e9:58:9f:03:
70:fa:91:4a:e7:e9:5e:f6:94:48:81:25:d3:25:12:8b:78:95:
1e:cd:8a:4e:20:ce:3e:0d:38:26:fc:78:01:d8:a5:d0:7f:72:
56:e4:b3:43:16:7e:ab:b6:2e:c0:e7:6e:3e:81:22:c1:d1:f2:
e0:44:36:7e:16:49:92:b0:2b:2d:af:7d:4d:8c:70:67:cc:b2:
af:ce:a1:ba:f5:4f:64:ca:2d:86:92:f5:d7:f5:75:54:a5:fd:
ae:87:db:f7:ef:68:e7:2c:67:2c:8a:9b:8b:af:85:e5:64:8c:
6c:f5:fa:50:52:b3:3a:fd:93:5b:f0:3f:f7:56:76:28:84:c2:
36:65:2b:be:ef:f1:6b:72:58:c9:0f:3d:34:e1:90:4e:86:1f:
70:d1:29:5c:1d:85:0a:11:b9:c0:7f:cc:fd:58:ee:9f:9e:3e:
a2:08:d5:a8:57:84:9d:8d:b9:1f:ec:23:ae:75:bd:b1:c5:b0:
aa:0f:19:38:6f:20:e7:62:a7:ac:9c:8f:34:4e:43:dd:a7:aa:
e0:e3:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:00 2025 by rpki-client