Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/lbTglUB_cuWwuUtQ0HuYFd1iErc.roa
File: lbTglUB_cuWwuUtQ0HuYFd1iErc.roa (raw, json)
Hash identifier: SqLRBaYjg0lLeWRsw+zkUvg9dbqxK2qZeJXDb+7pMGY=
Subject key identifier: 95:B4:E0:95:40:7F:72:E5:B0:B9:4B:50:D0:7B:98:15:DD:62:12:B7
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 0194258F5605AC166FBA267A38784E423455
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/lbTglUB_cuWwuUtQ0HuYFd1iErc.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57584
IP address blocks: 91.233.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:56:05:ac:16:6f:ba:26:7a:38:78:4e:42:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b4e095407f72e5b0b94b50d07b9815dd6212b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:ac:31:cd:ae:3d:71:70:c0:5f:ff:7d:3d:
f4:37:96:91:d9:0e:99:f6:1c:4f:81:8b:bb:f6:2f:
ac:2a:24:7e:23:c2:c0:78:d5:95:0e:8c:03:b3:b1:
7c:e7:9d:60:2d:4d:ce:b3:04:6a:24:81:0f:27:b5:
30:08:c3:ec:ce:d6:49:78:ab:7a:36:17:f0:11:28:
7d:c1:2a:91:30:0b:51:79:5e:40:b2:62:80:3c:65:
c2:fd:60:8f:76:64:83:8e:05:c3:ee:40:29:ed:4a:
d0:45:9b:c5:43:73:7e:a8:da:17:6d:68:21:1b:6f:
66:b2:c9:43:50:16:f3:25:cb:02:e1:21:a1:4c:9d:
fe:c5:97:73:ee:21:73:74:35:06:10:87:af:ed:41:
2a:f1:6e:3b:7f:ed:af:c0:41:0e:2a:f4:b5:62:28:
63:6d:07:38:f3:3c:7f:1b:ea:1e:f8:75:73:8d:59:
76:76:ff:96:6e:c8:4b:f7:9e:70:43:1c:9a:3b:7e:
fc:09:64:5f:30:82:93:50:94:9d:5e:c9:f6:78:94:
ce:7b:6d:76:00:86:1a:dd:ba:87:df:ae:10:8d:37:
d8:cf:f6:76:b7:dd:ec:f7:b4:2f:cc:2a:e7:b6:37:
7c:88:0b:0a:5f:b6:a6:a8:0b:0a:66:e1:cf:37:9c:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:E0:95:40:7F:72:E5:B0:B9:4B:50:D0:7B:98:15:DD:62:12:B7
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/lbTglUB_cuWwuUtQ0HuYFd1iErc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
67:09:27:ae:44:aa:49:4f:cb:de:b3:a1:7a:10:73:71:0e:8f:
58:78:ed:de:b5:1d:c2:2f:29:65:7b:f6:6a:e5:af:82:6f:2c:
de:e1:02:b6:bd:ee:96:93:71:82:84:d5:ae:62:42:da:72:33:
bd:1b:ca:c9:71:1f:27:2f:51:3d:6b:04:36:35:7a:79:ff:80:
8d:ec:81:f0:8a:d4:f6:b4:c7:07:dc:7e:1d:a7:21:3c:cc:50:
56:2a:c7:44:c4:6b:18:c5:43:48:14:f9:da:de:43:f6:9e:3e:
a3:74:39:8a:19:7e:2d:cd:ed:7d:56:89:a6:9b:14:a4:c3:86:
9c:69:26:c1:9d:1d:9b:d2:4f:41:54:8b:32:a5:ef:6d:f0:f1:
9e:96:a7:4c:70:b6:c7:f3:fc:6c:4a:20:5c:39:c2:eb:1f:fb:
a6:b4:2d:44:e8:99:29:0e:78:73:f2:ff:19:e6:5c:69:b7:e0:
8a:be:c4:4a:6e:f8:e4:25:6e:74:24:4c:78:5b:6c:d6:b9:f3:
68:8f:47:92:86:69:57:d4:07:9a:50:cb:d3:ff:38:13:6d:6f:
ed:79:3a:c1:63:b6:d6:c6:88:84:b0:25:01:e5:39:13:41:32:
89:64:2b:99:ca:dc:17:cc:59:68:59:da:62:91:9a:87:5f:cc:
dd:29:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:28 2025 by rpki-client