Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/lOM5CDPI-FhQ4dq2rdNsnbTFvmc.roa
File: lOM5CDPI-FhQ4dq2rdNsnbTFvmc.roa (raw, json)
Hash identifier: IgeNFL8LJSGE4l/g6v+rAToK8fc7jq26jM9Ruy/hMc4=
Subject key identifier: 94:E3:39:08:33:C8:F8:58:50:E1:DA:B6:AD:D3:6C:9D:B4:C5:BE:67
Certificate issuer: /CN=f5b6b176e95d0fe45fa20083137d143b76d67645
Certificate serial: 01896478EF80928B6B5F794082C4C2FF8F0B
Authority key identifier: F5:B6:B1:76:E9:5D:0F:E4:5F:A2:00:83:13:7D:14:3B:76:D6:76:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9baxduldD-RfogCDE30UO3bWdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/lOM5CDPI-FhQ4dq2rdNsnbTFvmc.roa
Signing time: Mon 17 Jul 2023 15:29:54 +0000
ROA not before: Mon 17 Jul 2023 15:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 89.107.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ef:80:92:8b:6b:5f:79:40:82:c4:c2:ff:8f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b6b176e95d0fe45fa20083137d143b76d67645
Validity
Not Before: Jul 17 15:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94e3390833c8f85850e1dab6add36c9db4c5be67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:90:b8:5b:15:9b:a4:af:02:43:df:b3:30:
57:b3:e6:28:b0:d8:9f:a0:8f:1f:09:bb:33:8a:09:
d2:86:db:7b:c2:c4:12:22:24:8e:c6:13:6e:24:ec:
4d:45:b4:1a:7c:a8:56:47:ab:e4:88:a1:87:7d:f8:
a3:d1:b2:2b:4c:6c:ef:eb:96:43:8a:fb:57:b7:95:
5d:b0:ad:e2:d1:21:85:46:d3:c7:1f:62:13:53:a2:
14:ad:a2:d6:09:9b:50:5f:b0:f6:2e:8c:34:0f:bb:
e8:b7:a6:30:12:85:2a:30:a3:f5:42:d8:f8:f5:2c:
89:79:88:a2:de:2e:9a:32:3c:6f:66:2c:ac:50:56:
ca:f1:0a:a7:ea:d3:ab:ca:8c:3b:e6:8d:ad:28:38:
57:c9:76:c3:a6:e2:3f:fa:47:be:fe:1f:d6:ab:ac:
fb:12:21:54:05:66:0f:b6:9c:e1:70:a4:e7:85:4d:
59:15:16:1a:63:3b:4e:4d:15:63:08:8f:c4:e3:3c:
11:da:e1:7a:6b:d7:fb:8a:b0:16:2c:73:b7:46:02:
45:a9:78:d7:98:2a:22:dc:51:ce:6a:df:bf:b0:6c:
3f:4f:6f:76:ff:b0:0d:7c:75:32:f6:bd:3e:b7:1c:
bb:51:81:26:c7:64:57:0b:1f:38:1e:17:6f:1c:18:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:39:08:33:C8:F8:58:50:E1:DA:B6:AD:D3:6C:9D:B4:C5:BE:67
X509v3 Authority Key Identifier:
keyid:F5:B6:B1:76:E9:5D:0F:E4:5F:A2:00:83:13:7D:14:3B:76:D6:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9baxduldD-RfogCDE30UO3bWdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/lOM5CDPI-FhQ4dq2rdNsnbTFvmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/729ad2-ec67-4f95-8b49-40114cdc99da/1/9baxduldD-RfogCDE30UO3bWdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5f:7b:ba:f3:3f:0d:54:7a:d5:44:d1:1d:17:00:1e:8c:39:
f0:18:d6:6c:dc:6d:c8:6e:f0:a6:2d:29:d4:f7:f2:f1:bb:ce:
d6:f7:b5:34:43:44:6f:42:f3:d4:72:48:33:69:97:f0:95:a9:
b4:be:e3:3f:f8:0e:08:05:02:e1:58:44:5d:d2:4c:f3:4b:5d:
f4:bd:7a:78:14:e0:bb:d8:36:ca:78:95:a6:b1:c7:28:2c:fb:
86:f9:1c:86:5c:89:37:81:78:46:2e:fd:5b:54:69:41:a3:d3:
2e:e4:de:c2:b1:47:cd:91:33:d1:fb:ea:ce:9a:fb:27:5c:2c:
53:25:30:9a:08:c1:44:ea:74:7f:ab:21:bb:d7:cf:7a:77:bb:
5e:0c:57:c2:6c:56:a6:ba:51:08:6a:cc:a7:61:a4:59:f2:0a:
92:95:b9:8b:77:37:67:91:f5:d6:05:33:fe:ab:f5:f8:98:02:
6b:02:fc:d1:3f:82:e2:02:6e:81:93:33:86:07:88:ad:f2:bc:
39:6c:d2:55:5f:75:ce:ca:8a:84:68:8c:a7:7c:63:2e:51:c0:
11:c4:d8:6a:ab:8a:40:4a:0a:aa:99:de:d4:03:65:12:6c:36:
de:5f:86:7d:31:35:a6:a1:52:20:86:26:16:09:54:96:7d:a1:
23:3f:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:30 2025 by rpki-client