Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/sLBMQEMJRNliF7KHdGTKUZzrB1Q.roa
File: sLBMQEMJRNliF7KHdGTKUZzrB1Q.roa (raw, json)
Hash identifier: J+OmImQiGyDQXTuHmQMoFlZG3IDKsPF8iitNHPmzfTs=
Subject key identifier: B0:B0:4C:40:43:09:44:D9:62:17:B2:87:74:64:CA:51:9C:EB:07:54
Certificate issuer: /CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Certificate serial: 05771776
Authority key identifier: 84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/sLBMQEMJRNliF7KHdGTKUZzrB1Q.roa
Signing time: Sat 01 Jan 2022 05:06:20 +0000
ROA not before: Sat 01 Jan 2022 05:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57705
IP address blocks: 5.32.132.0/23 maxlen: 23
5.32.134.0/24 maxlen: 24
5.32.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91690870 (0x5771776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Validity
Not Before: Jan 1 05:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0b04c40430944d96217b2877464ca519ceb0754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:30:60:2f:17:c1:bd:72:3e:58:53:6f:28:
f4:d6:5f:fa:30:61:9f:22:eb:c0:12:32:1d:97:fb:
e9:7a:ec:fb:36:93:2b:13:ec:3f:34:c9:e3:84:87:
63:8b:08:8a:ca:30:73:74:b8:6b:25:25:b3:86:50:
fd:c3:ba:ce:ad:60:1d:91:52:ab:e2:d6:ed:04:e4:
63:99:34:4e:2e:c4:41:d5:48:23:2c:9a:98:e5:33:
b8:1a:60:9d:dc:a3:86:b7:b0:db:11:1a:e1:17:78:
89:d9:b5:9b:a4:3d:20:e5:7d:1a:d4:e4:f3:e0:de:
6f:bd:ec:4a:f9:9c:58:b2:a6:c9:90:e8:04:2a:66:
2f:8e:96:0b:a7:89:80:3a:9a:26:34:fc:31:0d:84:
21:3e:f7:f5:ad:02:dd:b7:cf:d1:a3:08:a4:83:9b:
36:b0:6a:e1:63:e0:ce:45:7c:f8:3d:11:4d:75:3a:
9c:a1:ce:15:e6:88:34:ba:1f:b0:12:36:fa:06:02:
48:38:83:14:2e:b1:fd:2e:c6:f5:34:77:b6:21:75:
8c:24:0e:e5:a4:9e:2e:66:df:ed:a8:da:0c:b7:08:
ef:42:a5:86:ec:93:7f:26:41:0a:06:21:a7:53:95:
28:12:85:96:f3:92:c0:6e:7d:d7:5d:20:f9:d8:4e:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:4C:40:43:09:44:D9:62:17:B2:87:74:64:CA:51:9C:EB:07:54
X509v3 Authority Key Identifier:
keyid:84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/sLBMQEMJRNliF7KHdGTKUZzrB1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:eb:01:ae:35:ab:78:b0:75:20:b8:0a:21:95:ae:5e:5d:d5:
36:6d:66:0c:57:4b:1b:21:3a:83:1e:eb:15:5e:55:9f:fb:04:
6a:6d:8a:8d:0d:f2:0f:b4:71:6b:4e:d6:57:11:e1:f6:7a:1b:
a6:00:65:94:d0:e4:fb:56:76:8f:aa:65:4c:94:39:86:af:e7:
7e:f3:d7:37:a5:29:76:92:df:5b:3f:3e:45:38:72:78:75:f7:
d1:8b:8d:3f:6c:cf:97:2e:36:8a:d5:6c:e8:49:c2:c0:f9:55:
69:2d:b4:0d:6c:9f:de:01:4a:c5:8b:68:42:5c:26:41:13:78:
bc:49:f5:a7:48:c2:90:91:3b:a2:18:98:e6:c5:db:f3:1e:65:
6f:39:f1:c7:41:f0:10:9b:f8:63:5d:d0:cc:38:03:17:5c:5d:
d5:d5:d1:e0:b1:e9:28:d5:7c:67:c7:cf:ed:db:26:86:0f:0e:
10:f6:4f:8b:bc:19:7f:da:6b:88:05:a7:e2:22:32:a3:11:c4:
2b:cf:ab:37:46:4c:99:ef:e4:7d:bd:97:f2:bf:3d:7d:cf:8a:
6b:97:cd:e7:e3:43:c5:b0:c2:f7:6f:bd:66:06:8b:07:45:b9:
b2:2c:9b:5f:c5:cc:64:4e:8a:a7:30:0c:31:7f:a3:b0:94:db:
67:ca:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:42:20 2025 by rpki-client