Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/thiVarAMBeEnqBDpZfGbu3w4ANA.roa
File: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (raw, json)
Hash identifier: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=
Subject key identifier: B6:18:95:6A:B0:0C:05:E1:27:A8:10:E9:65:F1:9B:BB:7C:38:00:D0
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0194221F58C5101B8A91E711EE2445EE4D81
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/thiVarAMBeEnqBDpZfGbu3w4ANA.roa
Signing time: Wed 01 Jan 2025 13:47:47 +0000
ROA not before: Wed 01 Jan 2025 13:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59438
IP address blocks: 5.145.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:58:c5:10:1b:8a:91:e7:11:ee:24:45:ee:4d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b618956ab00c05e127a810e965f19bbb7c3800d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:23:65:37:7b:c1:e9:f4:d9:16:2b:c2:fb:
dd:a2:91:14:84:94:0f:78:21:d6:c6:42:d3:98:3b:
26:da:5f:cb:82:a9:76:13:3c:50:10:7f:61:e4:98:
3f:13:9e:88:38:7a:45:0b:08:f7:56:51:cc:f1:36:
07:3a:63:62:34:a5:d2:f1:3b:70:7c:b1:83:c6:8f:
ef:88:9e:f9:48:0d:db:bb:fa:9d:5d:7a:39:5d:7f:
c9:6c:fe:f3:25:76:f5:6d:52:ad:c9:c6:e8:d4:0c:
5f:d0:96:36:e7:d0:34:5a:83:36:a9:b5:9b:13:cf:
99:a0:5a:45:fb:3d:54:fd:75:db:09:c6:b4:7d:22:
37:42:e1:09:13:ed:87:a4:bb:73:db:82:ad:6f:9b:
68:b4:40:69:36:9f:be:3a:2a:c3:fe:24:26:79:d9:
2d:f6:d2:1b:79:70:5d:44:91:7d:28:a6:e3:be:35:
02:c5:0d:44:ee:0e:99:7b:55:b6:d9:11:7b:82:48:
8e:74:f3:37:94:b8:aa:2a:6e:a2:99:c4:60:b7:17:
78:68:c3:0e:a8:33:17:4b:65:16:6e:53:06:b0:3a:
36:d4:66:f1:fe:42:36:ef:ea:51:30:59:4d:bc:83:
9b:82:f4:c0:5a:b3:53:07:9a:91:af:cf:f0:47:f7:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:95:6A:B0:0C:05:E1:27:A8:10:E9:65:F1:9B:BB:7C:38:00:D0
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/thiVarAMBeEnqBDpZfGbu3w4ANA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:9d:32:5a:14:c6:ab:b9:36:3d:c0:b3:e0:29:9f:ec:e9:b6:
e4:97:e6:e6:d3:5d:8a:7c:20:29:ab:b7:3e:b2:bc:7e:67:14:
f0:19:ab:23:e3:18:c8:77:8c:c6:db:17:90:e2:86:a2:39:81:
af:b1:20:89:9c:d3:35:ff:2c:d5:74:71:ab:4c:31:79:2f:59:
40:f2:5f:0a:4e:a5:db:89:e8:38:3a:b0:9a:9d:db:ee:4b:81:
a2:38:a3:0d:81:3a:b6:d9:0f:64:60:95:9a:4d:d2:76:11:7b:
16:19:6d:32:07:62:9c:e0:98:f5:cd:77:b4:0e:5a:20:30:21:
62:a9:3d:fa:19:50:d3:ce:0e:56:a5:c3:3c:5f:55:69:1f:8a:
69:76:17:28:99:64:a0:7d:2c:96:7f:c6:c9:20:17:3c:05:fc:
54:6e:a3:5b:e5:22:2f:b3:4d:74:8c:c5:f7:46:1e:10:b2:ec:
ba:66:f6:31:ed:13:48:9f:0c:ab:d3:e5:33:85:9a:45:48:d2:
6e:46:d3:d5:dd:21:40:17:c0:f0:bd:4c:68:96:9c:b1:b4:1c:
30:54:2d:15:8a:3c:cb:49:0b:88:e2:4a:87:e3:e1:12:27:e8:
e2:dd:a2:e3:ad:2c:bc:e5:bc:63:8f:05:08:11:6f:b7:de:f7:
b9:f5:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:28 2025 by rpki-client