Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/om141KzkG2-4eMZ-f0PthIkpE80.roa
File: om141KzkG2-4eMZ-f0PthIkpE80.roa (raw, json)
Hash identifier: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=
Subject key identifier: A2:6D:78:D4:AC:E4:1B:6F:B8:78:C6:7E:7F:43:ED:84:89:29:13:CD
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019424B3660684C3C1CAA1B177912E9F5B0B
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/om141KzkG2-4eMZ-f0PthIkpE80.roa
Signing time: Thu 02 Jan 2025 01:48:44 +0000
ROA not before: Thu 02 Jan 2025 01:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209095
IP address blocks: 5.182.136.0/22 maxlen: 24
5.182.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:66:06:84:c3:c1:ca:a1:b1:77:91:2e:9f:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a26d78d4ace41b6fb878c67e7f43ed84892913cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:81:c5:9a:41:4f:c0:47:7a:66:5e:3d:9b:
cd:46:25:a7:65:f5:34:45:6a:20:06:f4:19:c6:bc:
ed:99:4e:1d:7f:ba:7b:71:e1:4c:c7:2a:59:e4:17:
75:cb:76:44:31:75:d4:f1:89:37:42:16:25:b9:4f:
00:48:ce:23:2c:bc:77:1b:3c:86:5f:19:53:08:2c:
3a:62:b0:d7:9f:3f:f3:65:4d:07:29:3f:a9:aa:22:
87:52:3f:64:28:51:5b:4e:3f:42:c3:7f:87:f4:00:
93:a4:91:8f:3e:5d:dd:b3:8d:89:b3:6e:07:06:71:
5c:c6:d1:4e:15:18:1e:95:93:c7:21:60:e7:cd:a0:
9c:ee:6c:0d:30:a3:be:2a:fe:0a:ef:c4:0b:21:45:
0d:78:9d:54:b2:e8:d2:09:a1:cf:97:67:c6:bf:99:
d7:17:4e:7d:b3:cb:ca:73:ba:12:d8:b9:84:0c:eb:
58:fd:e3:69:54:a7:1f:68:04:c9:b8:ed:89:1e:7f:
11:08:a9:ff:83:9a:32:e2:b3:76:58:24:56:97:89:
86:0e:52:4c:0d:28:74:3e:91:8a:62:54:2e:ec:d0:
44:68:e3:88:8e:3f:01:95:43:90:68:57:c1:19:3a:
ba:58:21:f5:2d:1d:ae:b0:be:b9:8e:28:fa:b6:6a:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:78:D4:AC:E4:1B:6F:B8:78:C6:7E:7F:43:ED:84:89:29:13:CD
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/om141KzkG2-4eMZ-f0PthIkpE80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.136.0/22
Signature Algorithm: sha256WithRSAEncryption
59:1c:b4:35:36:0e:fe:92:66:d3:17:d5:c8:0d:e8:c0:ca:9d:
90:f6:25:07:8c:a5:54:1c:4c:fe:f0:50:2e:b2:9b:c2:75:e0:
0c:09:86:b9:29:2e:9b:d1:3d:09:ac:d9:78:68:2c:a6:ef:65:
df:23:0b:b2:2f:57:88:5f:4f:a4:5a:0f:1c:8b:8d:b4:dd:93:
a8:a9:f0:d4:4c:41:b3:ad:67:5f:ef:df:d3:18:8d:58:90:27:
70:8c:75:8b:3c:fa:15:ca:9b:df:ae:9c:2b:51:5b:9d:97:1e:
95:db:dc:7f:fa:50:d8:d3:f5:79:69:82:7b:fb:92:f7:a9:d1:
0e:28:35:bf:08:af:2b:72:d1:4e:cb:7d:79:64:4d:f5:bb:ad:
46:71:52:27:14:f4:9e:f0:5d:a6:ac:21:c6:a7:7b:a1:77:3b:
35:fd:10:bf:76:a8:6c:f6:e3:62:a0:9d:77:b6:6a:0b:06:6d:
fc:6b:78:98:4e:d3:2d:ca:f9:29:bc:a5:dc:82:e9:de:f5:87:
4b:e6:26:d3:b0:26:5f:be:83:02:2b:75:ac:ce:bd:c7:15:8b:
a1:f3:88:8d:13:2e:ff:b4:b3:50:9b:17:23:a0:17:86:73:97:
13:e4:bd:2d:77:fb:75:18:57:4a:73:17:ef:67:b0:70:86:1d:
7e:b7:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:08 2025 by rpki-client