Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lFZQAYBZm2i6PALVQkXfGV-Onrc.roa
File: lFZQAYBZm2i6PALVQkXfGV-Onrc.roa (raw, json)
Hash identifier: EX9IlODzF8B3PQAI8kpb4bLGvD5vImL6xhuOAuaL0Zc=
Subject key identifier: 94:56:50:01:80:59:9B:68:BA:3C:02:D5:42:45:DF:19:5F:8E:9E:B7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D658CFE6B3B3CCB6F53A2D3189FA
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lFZQAYBZm2i6PALVQkXfGV-Onrc.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53340
IP address blocks: 5.182.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d6:58:cf:e6:b3:b3:cc:b6:f5:3a:2d:31:89:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9456500180599b68ba3c02d54245df195f8e9eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:f7:c2:4c:df:1f:f7:d1:59:c9:fd:52:3e:
ff:72:18:2a:0e:f3:98:01:d3:5c:0a:54:96:42:ef:
fd:09:dc:37:d4:ac:0b:75:d5:98:12:69:33:44:02:
cb:70:38:3b:c1:d2:12:a7:bf:e9:1f:e4:a5:b6:ae:
fb:61:ad:6d:4e:38:b7:36:b6:0c:9d:b1:6f:76:52:
61:26:89:fd:45:3c:d0:4e:53:af:6d:bd:86:29:c2:
52:13:a7:c2:eb:14:45:d9:a2:8e:00:7c:28:39:d6:
e0:4a:2a:85:b0:21:27:b5:e4:87:47:e1:eb:ef:b1:
fc:21:7b:49:aa:8e:0d:1d:19:71:76:26:6a:88:68:
ab:c6:a5:34:36:8a:3f:27:62:5e:0a:b8:91:eb:fd:
01:f6:10:61:24:00:d6:7b:62:a3:20:15:e4:6d:da:
da:68:8d:6b:a7:72:e9:d3:06:e8:d2:d7:e9:d5:31:
52:91:58:d6:64:80:1a:95:49:82:dd:6b:e6:b4:d9:
b0:9f:0f:f0:4f:b0:ba:9b:b2:92:a2:30:fb:02:ef:
60:b3:fd:b6:2f:30:5d:d4:1b:41:7c:9e:b1:71:55:
a4:fe:41:95:d0:ea:0d:2f:fc:df:98:90:dc:30:ad:
5f:5f:32:dd:b3:2c:92:58:41:87:b6:4b:89:bf:46:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:50:01:80:59:9B:68:BA:3C:02:D5:42:45:DF:19:5F:8E:9E:B7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lFZQAYBZm2i6PALVQkXfGV-Onrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7b:9b:e6:d8:ec:09:f7:c4:18:a5:88:91:f3:db:61:1c:1a:
7d:6e:19:2e:c8:41:08:32:48:d0:7e:8f:c2:80:9d:8f:4b:de:
65:64:4b:cb:bf:a5:92:aa:2c:03:a0:ea:7e:c8:81:fa:88:ba:
a8:44:93:f9:b0:5b:cf:35:0d:fc:cd:f6:75:b6:60:17:4e:8d:
5b:8c:d5:fa:08:fe:86:e2:13:9f:7a:b9:9b:47:ba:07:22:da:
da:e2:32:e2:b3:4b:31:a2:02:5d:36:a0:10:56:fa:cf:39:28:
40:fc:46:21:a4:b4:ef:51:7c:3d:2f:b4:13:e3:78:85:1f:fa:
db:66:c6:9e:1d:6f:ac:f9:8c:db:74:38:c9:7a:c0:e7:2b:cd:
f9:c7:fa:1f:66:35:a6:28:86:05:68:f4:82:44:95:7b:dd:68:
95:11:00:19:bd:34:a3:6e:56:e3:20:84:db:f0:27:a7:9c:2f:
65:40:9b:45:47:0a:e4:d3:1a:41:ab:31:fc:43:ef:c5:cf:98:
f5:a7:42:cb:60:23:28:1b:91:8d:84:fe:64:75:cc:71:ab:30:
5d:fc:f5:f5:7b:4a:8b:dd:d7:de:af:8f:4e:ca:cc:fd:9e:2d:
c7:15:de:21:d8:9a:94:62:34:cd:59:68:8f:57:90:6e:7b:ef:
d1:bc:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:01:41 2025 by rpki-client