Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/lTMhSgL26L3WshgcHKtqiK6dWOE.roa
File: lTMhSgL26L3WshgcHKtqiK6dWOE.roa (raw, json)
Hash identifier: lT0gHZelbqYBMTqFFeobtlMm525MvEBrfO7U1PfhKCo=
Subject key identifier: 95:33:21:4A:02:F6:E8:BD:D6:B2:18:1C:1C:AB:6A:88:AE:9D:58:E1
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0185155E34978AE5BBB3573ACDCD8E3B9A0F
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/lTMhSgL26L3WshgcHKtqiK6dWOE.roa
Signing time: Thu 15 Dec 2022 10:39:33 +0000
ROA not before: Thu 15 Dec 2022 10:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 5.181.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:5e:34:97:8a:e5:bb:b3:57:3a:cd:cd:8e:3b:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 15 10:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9533214a02f6e8bdd6b2181c1cab6a88ae9d58e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:5c:fc:18:2b:e9:85:3b:8e:64:4a:12:d3:
79:9e:92:24:60:21:d7:18:27:83:3b:d2:0b:58:a8:
75:bc:e0:ae:45:02:26:06:6c:12:a9:fc:4b:0c:74:
d6:55:5a:6a:27:a0:fe:a1:1c:e7:8d:65:bf:dc:59:
f4:c2:8d:f7:03:c0:db:5a:dd:26:9c:bb:aa:9c:4d:
ef:4e:12:36:b9:d8:c4:02:d4:f8:a1:f3:0a:42:95:
d0:f8:a4:33:1a:77:1b:51:03:76:4d:84:07:b5:22:
09:a7:76:76:58:b6:fe:d0:bc:0f:7b:5c:e3:e7:5c:
28:08:d8:41:04:c8:6e:4e:66:a4:df:5a:c8:6c:76:
e0:bd:51:05:f8:67:ed:c3:a5:9d:57:81:98:2f:83:
c1:cb:9c:78:19:02:aa:e7:08:10:c2:7d:62:4d:7a:
cf:2e:e9:cc:32:98:ab:8b:e8:d5:84:2a:ca:03:2d:
d9:dc:a6:73:ef:a4:05:4e:6b:22:53:59:76:ad:98:
4d:07:49:10:ae:42:d4:de:35:85:80:e4:62:89:2e:
1a:df:a7:6a:cf:04:f6:83:8c:f9:9f:bf:91:77:e4:
41:ef:a3:2d:af:61:32:56:78:81:47:fd:51:8b:18:
6b:38:d3:fb:8b:fb:10:91:fa:8a:63:af:83:fb:eb:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:33:21:4A:02:F6:E8:BD:D6:B2:18:1C:1C:AB:6A:88:AE:9D:58:E1
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/lTMhSgL26L3WshgcHKtqiK6dWOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.184.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d7:1c:26:9d:e1:a8:b5:1a:e2:55:0b:8e:62:97:e3:e3:35:
e4:f0:d6:5f:99:1f:39:b2:81:13:18:d3:95:24:55:a7:21:80:
5a:e9:a3:ab:18:82:9f:31:62:17:ce:09:3c:cc:c1:30:4c:09:
2c:89:53:cf:96:70:fb:d4:10:67:45:61:a2:03:21:08:32:2d:
1a:ae:78:f8:78:b7:5f:84:d3:eb:c7:98:cc:ce:ab:b2:54:04:
46:1a:b5:55:5c:0a:f4:9d:da:33:2c:81:84:c0:22:d3:17:07:
6b:5b:41:d6:2e:d7:7e:ab:43:a5:df:c9:c2:1a:7b:dc:aa:c4:
e5:41:23:12:95:69:4e:a7:4a:2d:b8:17:37:f6:bb:d6:86:5a:
bb:b2:04:51:cd:b8:35:ed:36:60:10:a5:d6:ca:19:2d:d6:34:
62:cb:b1:7e:4d:b6:06:a1:68:95:e6:01:b4:cb:3e:de:eb:07:
ff:81:49:9d:98:f4:a5:e3:02:3d:d0:54:5e:37:79:4a:3e:5a:
c3:6b:2f:18:1c:fa:9e:6f:be:c6:8e:c3:ab:33:78:17:b8:24:
4e:b4:f4:d1:30:6b:2f:93:ad:f8:92:7e:ec:67:0e:f3:20:01:
7e:a9:5c:70:31:0e:51:8a:6b:7b:13:2b:69:65:a5:de:5b:ac:
3e:a6:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:57 2025 by rpki-client