Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa
File: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (raw, json)
Hash identifier: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=
Subject key identifier: 2D:FB:42:3B:12:50:D6:82:3A:84:51:57:AD:F4:74:21:BE:C3:BE:03
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 0194258E4F9DD91B2BB26ADAB33C18421B69
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa
Signing time: Thu 02 Jan 2025 05:47:50 +0000
ROA not before: Thu 02 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15547
IP address blocks: 91.212.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4f:9d:d9:1b:2b:b2:6a:da:b3:3c:18:42:1b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dfb423b1250d6823a845157adf47421bec3be03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:df:0c:87:9c:08:3b:2f:4d:8a:5d:69:2b:
4a:5d:43:13:15:26:b0:8d:f0:8c:41:61:d7:f3:2b:
a4:f1:8f:93:72:6d:1a:fd:ba:ec:97:c0:eb:88:20:
bb:e5:35:6b:f3:26:2a:4b:82:ff:57:34:32:35:6b:
bc:b5:8b:f5:fa:75:43:92:93:f7:7a:65:39:dc:93:
18:38:3a:12:b4:c1:9f:22:8d:78:51:60:79:15:d3:
15:b3:bc:79:d1:b7:c0:1e:0d:13:95:eb:71:5b:0c:
f9:c0:38:39:36:4b:49:b5:46:1b:d3:a7:a4:d8:8a:
d5:06:e8:1d:90:4d:89:b4:44:3f:be:73:65:7c:06:
4b:c6:de:d9:6a:46:14:0e:ac:31:66:4f:ea:98:2c:
74:8f:ce:8b:1f:67:93:d8:33:66:32:1d:50:4d:26:
8e:3c:48:25:df:ed:7e:60:3f:dc:e4:cd:f5:0c:93:
fc:06:ff:51:d3:9f:30:33:da:72:33:2e:16:f8:49:
e1:ce:32:79:46:24:53:98:86:b5:37:93:18:ec:c5:
e5:ee:da:a3:81:42:c0:df:41:71:ca:04:9a:28:38:
f8:7c:8f:c0:1e:dd:7f:c7:f3:53:ee:de:37:d1:fa:
55:fb:b3:6f:c3:cf:88:c8:92:04:c2:46:7e:99:eb:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FB:42:3B:12:50:D6:82:3A:84:51:57:AD:F4:74:21:BE:C3:BE:03
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a3:4e:bf:50:aa:5e:1e:75:ca:51:a8:46:5e:cd:de:b8:fc:
40:ac:41:f0:86:77:a4:d9:cf:b0:e4:1d:b6:86:fe:6f:5b:ba:
62:6c:a3:2e:93:26:eb:06:89:0b:3d:ac:1b:21:33:85:9b:b5:
a5:90:41:2e:4c:c6:3e:40:b8:5e:b7:bf:c1:bc:53:87:99:7f:
fe:cb:30:57:33:a0:c8:16:9d:d1:c1:86:eb:47:ab:10:c3:bb:
80:45:53:cb:41:18:3d:6a:99:50:32:ad:ad:ad:04:22:43:75:
3c:ec:9e:25:b3:b0:bf:2d:24:86:35:4e:26:6f:9e:3d:1e:3d:
3b:17:b5:49:77:5b:b7:16:12:9d:d9:e9:7f:77:24:62:5a:92:
66:26:d8:69:19:26:c0:11:01:4c:57:88:43:02:40:79:11:e8:
9d:61:75:1c:86:c0:cc:03:94:a9:e8:4d:10:a9:f1:95:55:20:
b7:aa:c0:66:79:eb:ed:9a:32:60:b0:08:da:ca:4b:f9:00:66:
3e:42:3c:e4:c7:80:71:ae:36:41:5d:68:05:e6:f6:cd:5d:89:
8f:c5:6a:c9:e7:79:41:20:15:b2:b0:ac:76:ec:22:f6:6a:27:
ab:91:01:26:bb:0c:91:39:4a:d6:ac:d2:28:61:73:64:a0:71:
12:46:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:53 2025 by rpki-client