Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1LVV8RdUA9jAX3ru8-klA2Bznj4.roa
File: 1LVV8RdUA9jAX3ru8-klA2Bznj4.roa (raw, json)
Hash identifier: U2G9ULayEA+UTOBCekAHoWh+eop1ydmXO2R6bRDD5DA=
Subject key identifier: D4:B5:55:F1:17:54:03:D8:C0:5F:7A:EE:F3:E9:25:03:60:73:9E:3E
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0195BE61B794A4039487A61B0DEB4779932E
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1LVV8RdUA9jAX3ru8-klA2Bznj4.roa
Signing time: Sat 22 Mar 2025 15:03:49 +0000
ROA not before: Sat 22 Mar 2025 15:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:be:61:b7:94:a4:03:94:87:a6:1b:0d:eb:47:79:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 22 15:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b555f1175403d8c05f7aeef3e9250360739e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:a1:a0:15:12:44:8b:3c:b9:52:08:2c:4b:
95:83:ea:7b:24:02:8a:80:cb:89:59:f2:5e:d4:a2:
68:c5:2d:cd:63:7f:d1:8c:03:8c:ef:f0:10:bd:42:
fd:7e:88:7b:7b:9f:dd:ba:8f:d9:69:f5:86:ac:49:
44:bb:be:9f:8e:a6:bf:34:ed:ad:d0:c3:cb:34:f3:
91:55:b6:9c:18:46:f3:99:34:8e:77:4b:2b:aa:cb:
40:80:84:c8:e8:ea:09:16:3e:4e:a6:8c:bc:18:0b:
94:ad:4b:91:07:b8:5c:e0:f8:82:3d:1d:74:98:d0:
08:a8:8e:f5:d9:60:8f:5d:28:26:82:d4:67:1d:ae:
58:4f:10:e7:31:4b:94:5a:56:1a:c9:8b:19:74:36:
e4:21:f7:9f:c2:50:56:96:95:c3:37:37:36:44:1d:
72:71:79:d6:36:09:50:d0:21:e1:4e:71:ae:cb:68:
ff:94:e5:81:6a:42:0b:e0:f5:d3:c4:fc:4e:11:1b:
ba:8b:e3:fb:0b:4d:22:dc:68:3a:fc:7d:90:10:58:
ec:6f:ff:33:ee:31:54:dc:5a:6c:8c:cb:57:9d:1e:
57:a8:f0:11:3e:25:68:2b:05:99:cc:6b:7b:6f:c5:
1d:97:cc:e7:83:05:4a:ed:31:b9:49:55:42:39:94:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:55:F1:17:54:03:D8:C0:5F:7A:EE:F3:E9:25:03:60:73:9E:3E
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1LVV8RdUA9jAX3ru8-klA2Bznj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.23.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a6:65:47:09:03:e5:2f:67:4b:9a:7d:c2:9a:f7:e2:fd:df:
7c:54:0b:9c:7f:bb:1b:95:07:71:b8:c7:b5:19:f8:43:ec:1a:
8f:56:88:f8:6b:07:be:ac:ee:00:f0:c1:75:c4:37:f3:a0:66:
1c:3d:49:2e:94:2e:b2:6a:64:66:c5:28:90:19:e1:12:54:33:
1d:9d:40:be:e5:4c:a6:c5:bf:4e:ac:b3:b7:d1:54:74:3f:97:
a1:df:29:39:e6:8e:96:b5:b2:4c:18:aa:53:8b:0f:ec:28:4e:
51:1a:6d:13:48:1d:42:53:98:5a:45:91:5f:20:f7:b6:5f:9a:
f2:05:cb:e3:1d:aa:de:ee:c6:1f:73:26:50:56:9f:bd:a7:75:
08:15:54:6d:67:7e:d0:e9:02:c2:06:f0:1f:0c:08:a1:75:2f:
d0:d6:3e:c3:9e:ab:b7:7a:fc:3b:1f:8c:94:d1:b6:cc:70:93:
48:56:c7:17:c8:cf:3f:92:fe:96:68:d6:8e:46:a6:1b:b9:5d:
a1:bd:cc:78:ea:e9:e9:75:9c:2b:13:a8:16:c0:79:e9:db:7e:
b0:27:87:e1:d0:1c:25:21:e5:ae:90:b9:30:e1:8f:3d:2a:31:
0c:01:d5:ac:d6:f0:56:56:6f:3a:f6:5e:b1:35:b6:64:8c:39:
39:ba:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:50 2025 by rpki-client