Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LhPJ_SiceuZAAuEIsX1GKNxt9Go.roa
File: LhPJ_SiceuZAAuEIsX1GKNxt9Go.roa (raw, json)
Hash identifier: InDA7lsAWmeaETIguSqqMFFNZfMUW8JNli8TAqabtdI=
Subject key identifier: 2E:13:C9:FD:28:9C:7A:E6:40:02:E1:08:B1:7D:46:28:DC:6D:F4:6A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186C5904BF043F3E43BDCA7145C948201A9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LhPJ_SiceuZAAuEIsX1GKNxt9Go.roa
Signing time: Thu 09 Mar 2023 08:50:13 +0000
ROA not before: Thu 09 Mar 2023 08:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 5.105.32.0/24 maxlen: 24
5.105.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:90:4b:f0:43:f3:e4:3b:dc:a7:14:5c:94:82:01:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 9 08:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e13c9fd289c7ae64002e108b17d4628dc6df46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:2f:2c:a0:4d:ab:e5:ae:0d:f3:c7:1b:f9:
cf:e2:a7:2a:47:ce:5c:5a:d9:23:19:e6:21:b2:f9:
a9:8d:75:81:f5:01:3d:1f:ea:a3:59:f9:ac:7f:eb:
3e:ab:2a:4d:b3:aa:e0:5f:ff:5c:79:b9:4a:9f:14:
5a:2f:76:2c:fe:c1:b9:e4:cb:76:9f:8e:4e:74:9b:
85:91:58:0a:db:be:d9:b1:36:61:82:ed:22:cd:72:
8a:27:79:38:1b:47:0e:4a:c8:74:5c:eb:e7:76:47:
5c:5c:70:75:5f:96:f0:16:43:78:09:a5:db:1a:13:
53:89:aa:2c:75:6c:70:00:4c:83:e3:a7:b2:be:3b:
9c:24:78:c3:25:d2:ad:1c:0d:25:df:3c:b8:9b:07:
1a:54:f2:e5:5f:ef:32:c5:81:29:8c:13:7e:b1:2d:
51:07:ac:a9:17:b7:d8:d0:40:6d:d2:6b:4f:5d:1e:
1c:5b:00:29:7c:61:b4:2b:47:07:e3:5f:dc:6a:73:
ae:13:63:87:30:14:8d:71:75:97:bc:b5:d4:36:6e:
e3:58:36:ee:b6:9c:1d:a7:04:4f:cd:16:c4:7d:a9:
a9:48:a9:a4:1a:6c:a4:f7:ce:cf:bf:1a:59:5f:5a:
be:4b:a9:48:76:47:20:9a:9b:5b:89:13:d3:10:6a:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:C9:FD:28:9C:7A:E6:40:02:E1:08:B1:7D:46:28:DC:6D:F4:6A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/LhPJ_SiceuZAAuEIsX1GKNxt9Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
5.105.32.0/24
Signature Algorithm: sha256WithRSAEncryption
26:53:65:a4:d3:7c:15:d6:f0:d7:04:1f:db:79:bf:95:f8:42:
24:63:44:1f:35:ea:10:46:e6:28:08:08:cf:2a:46:d3:58:b3:
82:e4:3a:23:0a:58:ff:97:f4:e1:99:52:0a:c0:98:35:10:dd:
c5:2c:55:09:54:6e:4a:5b:c0:ea:27:dc:53:3f:2f:6b:cc:51:
82:57:4a:63:1b:d4:49:16:c2:6a:5d:24:6a:f2:f3:8c:77:12:
dd:38:8d:1e:c9:8c:f9:09:2d:d4:8c:66:aa:66:81:b0:ce:d0:
b2:3d:19:1b:c0:98:d7:f9:8c:e7:da:23:d0:d8:a8:a0:30:bf:
d2:a7:ed:d7:a5:96:be:52:b0:40:2e:88:b5:e5:1a:79:5b:ab:
b4:49:23:68:d6:6b:a9:1f:07:8a:81:4b:ea:1c:df:8e:9d:87:
72:6e:d2:7a:c1:95:54:4a:7c:94:f6:f0:05:36:08:0c:35:08:
18:36:ba:38:6b:84:1b:21:41:cf:55:5a:a6:91:21:6b:7f:fb:
f9:42:75:f5:c7:5a:c6:50:07:82:c6:89:cb:50:5f:9b:3f:c6:
54:7c:53:72:53:dd:1a:06:96:26:dd:ad:63:49:49:38:f6:d4:
e1:8b:98:76:d5:c9:3d:b8:ae:ac:40:6c:ff:c2:3e:f3:d4:24:
b3:bc:e9:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbFkEvwQ/PkO9ynFFyUggGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzA5MDg1MDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTEzYzlmZDI4OWM3YWU2NDAwMmUxMDhiMTdkNDYyOGRjNmRmNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOcvLKBNq+WuDfPHG/nP4qcqR85c
WtkjGeYhsvmpjXWB9QE9H+qjWfmsf+s+qypNs6rgX/9ceblKnxRaL3Ys/sG55Mt2
n45OdJuFkVgK277ZsTZhgu0izXKKJ3k4G0cOSsh0XOvndkdcXHB1X5bwFkN4CaXb
GhNTiaosdWxwAEyD46eyvjucJHjDJdKtHA0l3zy4mwcaVPLlX+8yxYEpjBN+sS1R
B6ypF7fY0EBt0mtPXR4cWwApfGG0K0cH41/canOuE2OHMBSNcXWXvLXUNm7jWDbu
tpwdpwRPzRbEfampSKmkGmyk987PvxpZX1q+S6lIdkcgmptbiRPTEGpsCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC4Tyf0onHrmQALhCLF9RijcbfRqMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvTGhQSl9TaWNldVpBQXVFSXNYMUdLTnh0OUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWkEAwQA
BWkgMA0GCSqGSIb3DQEBCwUAA4IBAQAmU2Wk03wV1vDXBB/beb+V+EIkY0QfNeoQ
RuYoCAjPKkbTWLOC5DojClj/l/ThmVIKwJg1EN3FLFUJVG5KW8DqJ9xTPy9rzFGC
V0pjG9RJFsJqXSRq8vOMdxLdOI0eyYz5CS3UjGaqZoGwztCyPRkbwJjX+Yzn2iPQ
2KigML/Sp+3XpZa+UrBALoi15Rp5W6u0SSNo1mupHweKgUvqHN+OnYdybtJ6wZVU
SnyU9vAFNggMNQgYNro4a4QbIUHPVVqmkSFrf/v5QnX1x1rGUAeCxonLUF+bP8ZU
fFNyU90aBpYm3a1jSUk49tThi5h21ck9uK6sQGz/wj7z1CSzvOnX
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:56:16 2025 by rpki-client