Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/l5LQQJ1hscP11M9PGOZJoYipJjA.roa
File: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (raw, json)
Hash identifier: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=
Subject key identifier: 97:92:D0:40:9D:61:B1:C3:F5:D4:CF:4F:18:E6:49:A1:88:A9:26:30
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 01942143B14384475C711EB3D3BD2C7D613E
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/l5LQQJ1hscP11M9PGOZJoYipJjA.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212953
IP address blocks: 146.19.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b1:43:84:47:5c:71:1e:b3:d3:bd:2c:7d:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9792d0409d61b1c3f5d4cf4f18e649a188a92630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:84:2b:c7:cd:8d:8f:a0:34:df:18:b8:2b:
e5:91:d9:fe:1c:22:fb:57:d2:2f:d4:86:44:f5:f5:
c5:75:2f:58:3e:44:f2:e8:35:d9:21:bd:92:e0:4a:
d5:06:7f:ac:85:5d:01:26:77:a9:10:3c:22:78:d7:
7c:f9:e1:0a:d9:10:b9:e0:db:5c:65:a8:c4:0f:d7:
41:6c:3d:c4:5c:2b:df:2d:74:d3:ad:7c:b7:73:04:
74:4b:61:04:03:b1:ec:1a:88:bc:55:51:43:ef:63:
25:c8:a1:a8:dc:af:be:50:66:f2:a5:c0:72:44:c0:
bd:d7:13:e3:b5:ee:cb:28:ff:bd:25:c4:ba:af:3e:
02:2f:0d:f7:fc:9b:e9:a2:22:3d:3e:82:12:86:0f:
d1:9d:22:14:05:cd:9a:61:7b:18:a1:28:34:2b:35:
76:db:e0:1c:08:6a:3b:f7:23:a7:80:94:a2:bf:ce:
6f:6c:1f:3a:e1:93:cf:d3:d0:a0:99:23:09:19:9e:
c1:3a:46:10:a0:a6:bc:02:32:38:5c:55:62:3e:ff:
1d:f1:9b:1c:72:da:74:2e:9f:4a:b1:a2:a0:3e:d9:
f9:3d:85:40:52:d5:51:d9:bd:46:e3:43:90:d0:37:
be:c2:21:5c:7d:d2:7d:7c:01:72:93:d8:c0:76:fb:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:D0:40:9D:61:B1:C3:F5:D4:CF:4F:18:E6:49:A1:88:A9:26:30
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/l5LQQJ1hscP11M9PGOZJoYipJjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c3:de:5b:38:da:92:d7:5f:85:5c:9e:0b:20:17:98:cf:e2:
b9:6f:77:e4:da:72:cd:e7:9a:04:25:2a:33:7a:a9:2e:f7:d1:
a3:96:fc:a7:3c:45:e2:7f:b3:a0:17:cb:40:fc:33:0d:b2:31:
0c:23:d2:6f:4b:93:7f:9e:ae:e9:e7:c8:77:d8:f2:da:98:2b:
8c:6c:20:48:d0:ec:01:cf:e9:6a:ff:26:65:52:f3:dc:11:ae:
04:43:fd:c3:26:46:3a:dd:c2:c3:bc:d0:8c:0c:ff:1d:92:53:
3e:c6:c3:cb:e7:a3:0a:d1:36:bd:fd:de:c3:d8:0d:96:bf:42:
8c:7f:c8:f7:d6:c8:6a:e9:a6:99:4a:f6:29:af:5a:d8:51:7f:
8f:e9:df:84:ee:f6:f2:29:da:ac:88:5d:36:b5:65:5c:7e:c7:
39:40:a8:60:e4:ab:c5:74:f1:ec:ba:6b:8e:1d:9d:23:52:8f:
32:a4:5f:91:a5:c2:ac:8a:a1:de:41:3d:af:02:94:d5:16:cd:
1d:0a:97:5e:4b:4f:c9:52:a1:fe:23:09:08:b8:03:ad:1a:6b:
d9:65:c5:5f:bb:b0:2c:65:92:73:0c:80:8f:90:34:18:5a:35:
e7:92:d8:80:15:3d:c4:63:1a:50:f7:8d:ec:07:92:40:37:64:
89:48:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:14:29 2025 by rpki-client