Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/Lge5ZNKhap-Px7gqBCCXWeP9nEI.roa
File: Lge5ZNKhap-Px7gqBCCXWeP9nEI.roa (raw, json)
Hash identifier: R6c1c1aT3Wtl7Kks1MgAiey/fCNqyQA/+R9blHUJEyk=
Subject key identifier: 2E:07:B9:64:D2:A1:6A:9F:8F:C7:B8:2A:04:20:97:59:E3:FD:9C:42
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0194266B6D1778D8A2E9D6C5B40C1F02A2D7
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/Lge5ZNKhap-Px7gqBCCXWeP9nEI.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211560
IP address blocks: 91.151.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6d:17:78:d8:a2:e9:d6:c5:b4:0c:1f:02:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e07b964d2a16a9f8fc7b82a04209759e3fd9c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:7a:e9:80:d7:26:d6:66:8f:c1:fc:99:b1:
ce:92:ed:87:a1:49:95:de:c0:62:60:67:78:f5:e2:
36:6b:49:f1:77:3f:d0:d5:d9:e7:2e:11:d4:6f:5b:
dc:87:fd:4a:30:c5:89:27:58:64:35:21:0c:01:cb:
60:04:58:7d:31:96:ee:15:5a:7a:eb:9a:a0:54:41:
69:40:4a:24:ac:51:67:55:74:dc:be:0c:b9:6c:9c:
4a:b3:24:12:42:af:5a:35:1d:5f:f9:a5:bc:e3:42:
60:32:92:09:47:6b:fc:6d:e2:ca:3b:32:52:07:bc:
6a:4b:82:6d:72:09:37:cf:04:21:df:77:8d:e8:75:
f6:29:9c:c5:43:fd:4c:98:17:75:16:93:79:8d:56:
c2:4e:f4:10:0d:48:87:87:21:59:62:26:c2:7f:f0:
d7:30:87:16:03:94:ea:6d:7f:36:b1:00:d3:94:e1:
fb:d3:d1:dd:fc:0f:d0:07:62:8a:77:58:44:14:49:
02:91:6d:14:dd:f9:a2:8b:9d:75:fc:3b:6e:04:66:
36:dc:35:c4:41:2a:9b:53:89:17:b0:a2:96:e1:8c:
67:c2:3a:3f:9c:6f:35:7c:58:7d:78:cc:47:e4:51:
15:22:81:8f:3f:6c:ec:a2:8b:04:07:b6:d8:05:d8:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:B9:64:D2:A1:6A:9F:8F:C7:B8:2A:04:20:97:59:E3:FD:9C:42
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/Lge5ZNKhap-Px7gqBCCXWeP9nEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bb:4a:0f:ff:ed:47:88:38:13:8a:6c:0a:4c:39:0a:d2:81:
4e:b5:3a:60:8a:0a:f4:c8:cb:54:2d:2b:ff:e5:24:34:a7:5c:
f0:55:48:53:04:90:6f:3d:e9:a9:8c:a6:6d:c2:7e:5d:72:7d:
c8:50:bb:fe:5d:2c:82:19:ab:19:e0:7c:98:aa:64:35:3c:f1:
e9:1d:df:1e:37:5d:3b:c8:93:36:59:b7:42:37:6e:00:8a:b3:
cd:d2:d5:82:01:6a:94:d0:b9:da:aa:9b:70:f2:bd:01:f6:4d:
56:e5:e4:08:ec:69:70:94:77:8d:5b:c7:86:be:4a:6b:2f:65:
20:89:e9:6c:15:e4:e4:b6:1a:d6:ff:1e:4d:5b:41:ae:52:50:
d9:1d:a8:db:65:c9:4f:05:31:99:b6:b7:e1:9f:f1:cc:5a:12:
f2:ab:af:3a:4f:91:6d:74:bf:c8:f4:21:85:9e:a7:09:de:60:
00:76:e9:1a:84:40:07:b3:eb:57:5b:c1:aa:58:81:b0:3d:9d:
04:32:62:4a:c1:22:a7:67:c5:3b:94:bb:e0:97:da:4c:06:ee:
ed:df:bc:d3:0a:1a:81:43:ca:96:21:29:41:7f:8f:db:77:50:
9e:82:9f:a4:af:53:b2:e7:96:51:55:ed:08:2f:dc:be:ec:0b:
cd:ff:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:26 2025 by rpki-client