Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/lmn9m784OLvYNEmoODCEhtK7M6Y.roa
File: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (raw, json)
Hash identifier: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=
Subject key identifier: 96:69:FD:9B:BF:38:38:BB:D8:34:49:A8:38:30:84:86:D2:BB:33:A6
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0194221F587FB59360D3AD55C3C01E34BBF0
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/lmn9m784OLvYNEmoODCEhtK7M6Y.roa
Signing time: Wed 01 Jan 2025 13:47:47 +0000
ROA not before: Wed 01 Jan 2025 13:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44381
IP address blocks: 5.145.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:58:7f:b5:93:60:d3:ad:55:c3:c0:1e:34:bb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9669fd9bbf3838bbd83449a838308486d2bb33a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:33:d2:be:13:8a:e1:22:35:77:96:ed:d7:c6:
37:3c:61:42:da:54:e3:ae:6a:69:66:74:38:50:e1:
27:8c:6d:55:b9:15:90:53:34:23:16:a7:f7:a8:c4:
93:a6:82:06:ce:59:7f:03:fb:10:80:6a:d7:f9:24:
32:e0:09:de:b4:67:f7:79:98:a8:e8:c0:b4:b2:22:
f2:59:69:95:74:f3:a4:95:19:f3:19:02:7a:69:c8:
be:ba:f8:2a:89:7c:70:55:18:b7:38:f0:c6:85:1e:
6d:70:ad:b2:c0:9c:8b:27:67:50:e8:73:56:61:87:
bd:4a:ef:90:f4:1d:ea:31:1b:92:29:cd:8b:e4:40:
c8:c0:e5:02:81:38:b7:d6:e5:4c:45:c2:5d:16:47:
13:fe:b8:b4:4d:78:27:9f:58:93:90:88:65:08:a9:
ac:62:ee:b8:2e:f1:12:bc:09:4e:84:c8:01:26:8c:
f7:89:24:4b:0d:82:7f:bf:5d:95:69:1c:42:a2:df:
95:72:6f:14:b0:66:eb:94:9f:9d:b2:f7:72:e8:ca:
33:22:27:25:4d:9c:84:b6:bb:ab:9d:38:7f:19:2f:
90:56:ac:ea:dc:8e:fb:8e:92:97:30:2f:42:e7:d2:
0a:15:21:a6:81:94:32:06:fd:e0:c2:db:d2:97:a5:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:FD:9B:BF:38:38:BB:D8:34:49:A8:38:30:84:86:D2:BB:33:A6
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/lmn9m784OLvYNEmoODCEhtK7M6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
Signature Algorithm: sha256WithRSAEncryption
27:1d:0e:1b:ad:c9:84:7d:d4:d3:34:22:fe:43:58:82:9a:ea:
54:ed:e8:b9:d3:fb:05:c1:53:c4:0b:52:98:63:7a:cc:a6:b1:
62:64:f7:f5:f8:1b:fd:8d:57:69:a1:7c:4b:58:5d:10:d2:d6:
ae:e8:38:d8:e3:54:81:83:47:9e:5d:5e:39:93:38:8c:f1:21:
aa:9f:82:c6:93:57:38:c4:fa:47:86:4f:e7:43:cc:d8:96:5d:
15:3b:ad:85:5e:fe:19:d7:c9:d1:d2:8c:8a:fb:89:eb:4f:d3:
55:16:50:e0:83:53:7f:15:8e:56:92:c5:a0:31:d0:23:3c:57:
4c:98:80:be:4e:a0:b6:3c:d4:28:a5:97:8d:7d:48:4c:45:06:
c3:22:ed:f3:08:d8:48:23:d7:7c:13:a9:7f:39:15:80:f7:2b:
73:28:87:4f:c6:10:d7:4d:72:89:b1:df:bb:7f:a3:12:a9:2a:
95:28:ba:a5:26:61:b6:8f:8d:6f:19:c6:26:0e:ca:9e:c6:36:
d3:03:24:39:ad:07:ee:4d:04:7e:74:37:63:ce:fa:fb:08:3c:
96:10:72:05:d2:f7:ca:4e:28:57:04:4f:59:73:a0:ca:0c:5f:
6a:d3:5c:65:4d:23:c2:42:0f:b8:12:3d:c1:f6:6a:92:09:f0:
1a:e0:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:42 2025 by rpki-client