Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1KQdLQdqSavQ8opOsJBCC_LRSmI.roa
File: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (raw, json)
Hash identifier: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=
Subject key identifier: D4:A4:1D:2D:07:6A:49:AB:D0:F2:8A:4E:B0:90:42:0B:F2:D1:4A:62
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01961B036FB128F1528AF1EFD641005024B7
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1KQdLQdqSavQ8opOsJBCC_LRSmI.roa
Signing time: Wed 09 Apr 2025 14:45:32 +0000
ROA not before: Wed 09 Apr 2025 14:45:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 144.56.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:03:6f:b1:28:f1:52:8a:f1:ef:d6:41:00:50:24:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 9 14:45:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4a41d2d076a49abd0f28a4eb090420bf2d14a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:bd:b0:99:6c:01:62:7b:89:86:6d:2a:ba:
ba:f0:60:a4:3e:57:94:78:f4:54:ca:59:d5:92:9a:
d8:75:4a:53:7e:37:f8:86:be:15:94:1e:ef:ee:a7:
b4:33:2c:85:f7:bf:a1:02:00:be:c8:57:2e:05:9b:
e3:6c:a0:68:d5:bd:a7:d8:a8:c2:f7:33:02:25:f8:
ba:4e:e8:c3:af:89:77:85:ae:53:8b:05:bd:1e:1e:
cf:2b:ef:cc:a2:b3:d7:d7:50:17:ff:4d:31:cc:b7:
32:4e:2d:71:87:f2:50:59:44:17:07:da:6b:06:a3:
e7:4e:44:8f:6d:7b:94:c8:cf:2d:fa:82:8b:13:7a:
3b:c5:50:fc:0f:f3:c3:d4:08:91:1b:b6:aa:8c:c8:
ae:6b:ba:1a:96:23:c9:1f:3b:1d:1a:b7:02:15:8c:
83:a1:db:7d:01:c3:0b:33:d2:43:d9:6f:1d:78:1d:
f9:f3:d2:77:b1:49:b0:be:a7:db:66:ff:91:f8:5b:
b3:c5:c5:3e:92:82:b7:38:46:9c:16:d6:8d:66:d1:
95:f3:89:de:f6:1c:2a:20:f0:14:cb:92:40:73:de:
76:31:e0:d1:e5:ab:38:c3:6b:39:a3:42:d3:e8:6e:
7c:be:76:8e:84:04:a3:31:7b:71:37:eb:b3:98:93:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:1D:2D:07:6A:49:AB:D0:F2:8A:4E:B0:90:42:0B:F2:D1:4A:62
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1KQdLQdqSavQ8opOsJBCC_LRSmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.22.0/24
Signature Algorithm: sha256WithRSAEncryption
72:89:e6:64:85:66:b7:fe:2c:66:ba:3f:27:0f:6e:3b:bb:76:
70:16:28:d7:18:72:d5:61:a9:db:82:c3:d4:e9:e2:e1:cc:55:
7b:58:c7:cc:d6:df:e9:1f:4e:f7:88:53:14:b8:b3:13:99:3f:
af:41:8f:87:15:e2:e7:42:84:fe:46:cc:b4:ae:83:83:2b:60:
1f:0f:57:aa:e9:5c:d7:33:88:5e:ca:47:a8:a3:0d:a4:8b:88:
19:0d:cb:ce:26:33:32:11:0c:c5:3c:78:7e:38:90:a6:ee:97:
9a:d6:32:aa:82:37:7d:c4:87:80:a5:71:b1:09:71:75:81:9a:
d1:0c:8e:72:36:85:81:db:30:b1:69:d9:ef:8e:31:d2:f7:62:
a1:9b:31:84:15:06:df:b3:fb:86:db:cb:7e:da:5e:fc:9b:7d:
a0:d4:05:4f:de:ca:ad:b7:5c:b4:f1:10:5b:c9:bb:ee:7d:6f:
ce:b0:1e:d1:00:b0:a3:70:7c:88:34:6d:39:b8:0c:2a:57:a1:
03:ec:cb:87:62:fc:6c:6c:fc:cd:22:64:c8:34:ed:04:25:58:
75:59:74:cd:a3:36:db:de:62:b7:76:01:42:17:2e:fd:df:cf:
11:5c:77:e0:32:0f:5f:cf:22:55:ef:3f:e3:28:70:98:45:8b:
0d:f1:59:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYbA2+xKPFSivHv1kEAUCS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwNDA5MTQ0NTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGE0MWQyZDA3NmE0OWFiZDBmMjhhNGViMDkwNDIwYmYyZDE0YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjS9sJlsAWJ7iYZtKrq68GCkPleU
ePRUylnVkprYdUpTfjf4hr4VlB7v7qe0MyyF97+hAgC+yFcuBZvjbKBo1b2n2KjC
9zMCJfi6TujDr4l3ha5TiwW9Hh7PK+/MorPX11AX/00xzLcyTi1xh/JQWUQXB9pr
BqPnTkSPbXuUyM8t+oKLE3o7xVD8D/PD1AiRG7aqjMiua7oaliPJHzsdGrcCFYyD
odt9AcMLM9JD2W8deB3589J3sUmwvqfbZv+R+FuzxcU+koK3OEacFtaNZtGV84ne
9hwqIPAUy5JAc952MeDR5as4w2s5o0LT6G58vnaOhASjMXtxN+uzmJOgAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNSkHS0Hakmr0PKKTrCQQgvy0UpiMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvMUtRZExRZHFTYXZROG9wT3NKQkNDX0xSU21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgWMA0G
CSqGSIb3DQEBCwUAA4IBAQByieZkhWa3/ixmuj8nD247u3ZwFijXGHLVYanbgsPU
6eLhzFV7WMfM1t/pH073iFMUuLMTmT+vQY+HFeLnQoT+Rsy0roODK2AfD1eq6VzX
M4heykeoow2ki4gZDcvOJjMyEQzFPHh+OJCm7pea1jKqgjd9xIeApXGxCXF1gZrR
DI5yNoWB2zCxadnvjjHS92KhmzGEFQbfs/uG28t+2l78m32g1AVP3sqtt1y08RBb
ybvufW/OsB7RALCjcHyING05uAwqV6ED7MuHYvxsbPzNImTINO0EJVh1WXTNozbb
3mK3dgFCFy79388RXHfgMg9fzyJV7z/jKHCYRYsN8Vm4
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net