Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Lo0B9wFGkG28l5CJrBuRJrUNc24.roa
File: Lo0B9wFGkG28l5CJrBuRJrUNc24.roa (raw, json)
Hash identifier: Yb2yF2QTeUDNlfbgSoxoIh9UUPiokxJejyzV4V1NkOo=
Subject key identifier: 2E:8D:01:F7:01:46:90:6D:BC:97:90:89:AC:1B:91:26:B5:0D:73:6E
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01951600243B49E8437048591654CEC28379
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Lo0B9wFGkG28l5CJrBuRJrUNc24.roa
Signing time: Mon 17 Feb 2025 22:21:02 +0000
ROA not before: Mon 17 Feb 2025 22:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.10.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:16:00:24:3b:49:e8:43:70:48:59:16:54:ce:c2:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Feb 17 22:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8d01f70146906dbc979089ac1b9126b50d736e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:51:a8:52:71:70:bf:7f:74:ff:ed:ac:bd:
7a:e4:32:91:4e:9c:99:80:49:93:eb:aa:d4:0e:c5:
09:49:86:e8:dd:89:9f:e2:79:0a:6d:59:b5:63:3b:
39:da:15:5b:d0:56:93:3c:d0:21:77:da:8b:40:bf:
21:f0:0c:e0:b8:53:2f:3f:cc:e7:21:e9:7a:06:e3:
27:40:76:30:e5:af:3b:a2:93:6f:04:09:44:12:5d:
ba:46:fd:64:53:99:b6:d6:e0:bc:b0:c7:36:3b:1d:
ee:4b:05:ad:b4:48:10:1c:ab:6b:f2:a3:ac:80:2c:
27:c3:40:5d:ef:5f:9f:2b:dc:0d:e0:da:60:bf:54:
5f:24:6d:d1:99:6a:bd:ba:9b:98:f2:da:af:be:fd:
97:7c:8a:ef:5a:61:4b:5b:61:b6:bb:ea:6c:05:73:
93:3a:d1:6d:a8:dd:4f:54:56:e3:91:90:4e:9e:e2:
39:94:c3:bc:56:28:86:b5:ad:a8:0e:fa:6e:e3:96:
aa:34:f9:b8:15:3d:06:1f:c3:77:3c:d0:4f:5f:0f:
11:89:e2:f5:c7:40:31:7e:1c:0c:c1:94:24:a7:a4:
40:ac:e7:25:d9:c0:d9:9c:bf:e3:2c:2c:3b:c7:64:
3a:c9:cb:9d:72:f5:7d:da:e2:2f:73:1b:ac:42:1e:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8D:01:F7:01:46:90:6D:BC:97:90:89:AC:1B:91:26:B5:0D:73:6E
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Lo0B9wFGkG28l5CJrBuRJrUNc24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:f8:d3:bd:9e:10:5a:b0:5f:21:27:ec:b1:07:2d:88:36:22:
9b:c1:15:87:2e:18:57:f3:80:ee:95:9c:19:fc:d7:35:08:1c:
df:51:cb:66:9c:35:1a:9c:40:0d:8b:77:3f:38:bf:c3:19:59:
dc:86:cd:63:6d:6b:21:c6:db:b8:df:2f:a7:29:43:32:6a:fc:
bc:9a:28:a4:bd:a1:2b:97:fc:6e:45:d4:5d:3b:66:8b:f1:94:
05:da:75:96:77:f1:92:6b:d2:d6:76:8c:35:95:9a:9e:3b:ec:
e9:bb:81:64:35:0d:c6:ba:8b:df:b9:65:46:59:8a:bb:e4:ed:
6a:7e:97:8b:49:fb:3c:e3:f7:17:e7:63:c3:d9:3a:64:00:2e:
02:39:3a:14:bd:fb:b9:51:14:1f:bd:0a:a7:17:54:df:32:9a:
bb:8d:78:d1:fc:01:64:16:b7:16:da:83:a3:45:1b:9e:9e:3b:
34:2d:b2:02:75:5d:b3:c7:86:07:46:4a:cb:3f:b5:3b:4f:83:
ca:04:a3:77:f1:57:eb:10:9a:1b:91:e6:3b:c7:39:75:08:0e:
fd:2d:41:de:46:98:ba:3d:e6:40:38:a0:8b:03:da:1f:3d:5c:
39:91:72:44:2c:49:ea:fa:73:56:db:83:3c:93:4e:9a:c1:cd:
7b:78:bf:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUWACQ7SehDcEhZFlTOwoN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjUwMjE3MjIyMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZThkMDFmNzAxNDY5MDZkYmM5NzkwODlhYzFiOTEyNmI1MGQ3MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6hRqFJxcL9/dP/trL165DKRTpyZ
gEmT66rUDsUJSYbo3Ymf4nkKbVm1Yzs52hVb0FaTPNAhd9qLQL8h8AzguFMvP8zn
Iel6BuMnQHYw5a87opNvBAlEEl26Rv1kU5m21uC8sMc2Ox3uSwWttEgQHKtr8qOs
gCwnw0Bd71+fK9wN4Npgv1RfJG3RmWq9upuY8tqvvv2XfIrvWmFLW2G2u+psBXOT
OtFtqN1PVFbjkZBOnuI5lMO8ViiGta2oDvpu45aqNPm4FT0GH8N3PNBPXw8RieL1
x0AxfhwMwZQkp6RArOcl2cDZnL/jLCw7x2Q6ycudcvV92uIvcxusQh4A4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC6NAfcBRpBtvJeQiawbkSa1DXNuMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvTG8wQjl3RkdrRzI4bDVDSnJCdVJKclVOYzI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBQrQMA0G
CSqGSIb3DQEBCwUAA4IBAQBf+NO9nhBasF8hJ+yxBy2INiKbwRWHLhhX84DulZwZ
/Nc1CBzfUctmnDUanEANi3c/OL/DGVnchs1jbWshxtu43y+nKUMyavy8miikvaEr
l/xuRdRdO2aL8ZQF2nWWd/GSa9LWdow1lZqeO+zpu4FkNQ3GuovfuWVGWYq75O1q
fpeLSfs84/cX52PD2TpkAC4COToUvfu5URQfvQqnF1TfMpq7jXjR/AFkFrcW2oOj
RRuenjs0LbICdV2zx4YHRkrLP7U7T4PKBKN38VfrEJobkeY7xzl1CA79LUHeRpi6
PeZAOKCLA9ofPVw5kXJELEnq+nNW24M8k06awc17eL8S
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:43 2025 by rpki-client on console.sobornost.net