Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/lbF_l02xwlPuqyIyhvc-CUJUU3g.roa
File: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (raw, json)
Hash identifier: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=
Subject key identifier: 95:B1:7F:97:4D:B1:C2:53:EE:AB:22:32:86:F7:3E:09:42:54:53:78
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 0194244542A8521F06DF58183BF51F1B6C15
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/lbF_l02xwlPuqyIyhvc-CUJUU3g.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57773
IP address blocks: 91.198.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:42:a8:52:1f:06:df:58:18:3b:f5:1f:1b:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b17f974db1c253eeab223286f73e0942545378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:7f:ed:e5:05:4c:9a:fd:78:e4:02:52:f4:
e7:be:85:d7:97:cc:f8:1c:18:eb:30:df:d0:5e:7d:
24:9c:81:d5:9c:14:46:80:6b:f4:d2:3c:ed:1c:87:
c5:5c:9a:e3:d2:c3:77:7c:c4:6f:e5:38:df:81:e8:
93:b6:41:bd:bb:7c:9e:65:86:83:0c:93:3d:79:d1:
bd:04:6c:c3:2e:e0:58:af:72:f6:06:43:72:d4:9a:
84:93:92:0a:e2:f0:d7:20:8f:ab:79:03:da:9e:f7:
6c:5e:f0:1f:00:31:6b:b6:10:f0:91:53:77:b4:ac:
39:58:89:34:14:36:46:38:a4:6e:e5:80:0b:be:11:
56:75:5e:24:3a:65:d9:d9:69:cb:51:59:a4:d9:e7:
4c:bd:8e:fa:78:34:87:da:2d:38:72:b0:b8:79:f2:
f2:a5:90:83:8d:76:88:52:38:e7:c4:9d:b0:0a:79:
64:c3:93:07:74:ad:2f:e0:fc:2a:42:10:8c:d7:52:
87:01:60:3e:62:c0:e0:70:b7:99:0e:13:ad:f0:35:
3c:4e:ce:76:07:2e:a6:f9:dd:c5:18:2f:ae:a8:89:
62:ef:2e:a6:59:70:c0:6d:9d:dd:dc:b6:cf:c6:f2:
4d:01:a4:0b:2e:3a:e7:9e:d5:92:e9:fc:5a:8f:52:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:7F:97:4D:B1:C2:53:EE:AB:22:32:86:F7:3E:09:42:54:53:78
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/lbF_l02xwlPuqyIyhvc-CUJUU3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.135.0/24
Signature Algorithm: sha256WithRSAEncryption
30:95:04:a8:85:37:64:64:5d:3b:bf:42:8f:ca:23:a2:80:c6:
94:a5:3a:00:e0:9b:a4:65:dc:c5:e6:78:4d:03:07:6c:bf:bf:
71:15:58:45:f5:e5:7e:d8:aa:f0:7e:01:93:3b:6d:20:8e:94:
0c:2d:5a:4f:67:ec:d2:cb:73:3c:13:ff:76:ab:38:b8:1b:2c:
09:40:93:fe:3a:20:ff:c5:2a:56:e7:ad:5d:8c:d2:a6:7c:ee:
47:e4:c7:cc:95:88:16:d5:a3:3a:4c:7a:e7:d3:eb:63:02:07:
90:7b:9a:b6:a1:30:2e:3f:d0:dc:98:16:b2:68:d4:09:04:99:
92:7f:9c:1b:c5:54:84:8b:f5:bb:92:7f:9d:18:34:44:33:a9:
42:3a:9e:ff:0b:5b:e2:6b:f0:92:5f:2c:a1:6e:71:37:0b:6c:
04:e6:bc:7a:f9:7e:7a:ad:cd:e4:6f:9d:d3:3e:21:57:5c:5a:
bd:48:4d:82:c2:49:e4:65:d5:bc:c6:33:7f:07:1b:94:66:ad:
d6:65:83:5a:1c:f2:10:23:c9:f8:5c:79:c9:11:69:69:22:e4:
4b:13:6f:6c:74:a3:dc:90:3e:aa:4f:6a:56:b0:8f:bb:28:7d:
22:0a:a8:d9:d9:1d:0f:6a:ed:09:a0:d7:06:36:ee:69:0c:b7:
cf:a9:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:40 2025 by rpki-client