Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/lbLHqJCXaq3Djk_FkjUlq9Twnac.roa
File: lbLHqJCXaq3Djk_FkjUlq9Twnac.roa (raw, json)
Hash identifier: ADunFMPOdeJyHQJy1AS2CzNNz6sHD1kZHoLqPBwuc64=
Subject key identifier: 95:B2:C7:A8:90:97:6A:AD:C3:8E:4F:C5:92:35:25:AB:D4:F0:9D:A7
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 0194731F6B4F6D1625928E109E9598A67083
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/lbLHqJCXaq3Djk_FkjUlq9Twnac.roa
Signing time: Fri 17 Jan 2025 07:17:06 +0000
ROA not before: Fri 17 Jan 2025 07:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48866
IP address blocks: 91.223.178.0/24 maxlen: 24
193.218.186.0/24 maxlen: 24
195.191.40.0/24 maxlen: 24
195.191.41.0/24 maxlen: 24
195.211.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:1f:6b:4f:6d:16:25:92:8e:10:9e:95:98:a6:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 17 07:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b2c7a890976aadc38e4fc5923525abd4f09da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:f2:76:d7:4c:0c:02:21:fd:2b:98:5b:dd:
54:07:d1:16:b3:24:04:ef:ef:77:46:8e:5d:78:f1:
59:db:3c:04:21:33:15:6f:0f:b5:70:c3:8f:33:91:
92:54:06:35:25:5e:b6:98:93:e9:57:b0:59:7e:95:
32:fb:bf:4c:b6:e8:03:3c:8f:a8:72:47:91:a7:08:
04:d5:93:bb:c4:cb:80:82:5e:2a:db:97:eb:68:9a:
82:d5:d5:2e:76:e6:3a:6b:c9:a1:b6:7f:41:83:00:
97:6a:ba:df:e9:34:92:b6:b9:23:d4:b9:eb:db:2e:
14:9f:49:9b:1a:95:d2:17:70:ab:0f:ff:6a:ea:81:
29:77:71:ca:73:db:c5:4f:28:02:88:77:e4:4d:db:
c9:b7:14:fd:aa:2d:75:36:be:3d:55:38:77:ed:0b:
4b:8c:50:3e:4e:aa:2f:38:db:d8:ac:07:79:7e:d7:
60:99:83:db:15:d0:f8:1d:6b:5c:59:55:15:3d:71:
da:c3:a8:63:15:41:c0:08:ef:c8:e4:a8:08:d1:da:
d4:c4:d2:a3:08:2c:32:b3:89:2d:80:92:8d:5a:9d:
d6:04:56:33:28:e1:f5:41:67:9f:0a:50:36:c0:c8:
ee:dc:71:f4:b2:21:ce:ee:71:f0:ea:43:19:92:d5:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:C7:A8:90:97:6A:AD:C3:8E:4F:C5:92:35:25:AB:D4:F0:9D:A7
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/lbLHqJCXaq3Djk_FkjUlq9Twnac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.178.0/24
193.218.186.0/24
195.191.40.0/23
195.211.250.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:b5:20:dc:6a:58:7e:5a:9e:29:eb:b6:f8:e9:85:de:e5:8b:
69:55:12:13:5c:46:f4:fc:60:52:98:50:d9:d5:bd:70:38:51:
02:f4:e5:e2:d1:48:c8:62:e8:2f:7c:31:ed:a5:45:74:fd:78:
c2:1d:3b:19:b4:23:7e:2e:55:cf:c1:80:9e:1b:de:90:ff:10:
e2:54:a9:b2:a8:20:98:66:da:75:bd:d9:3e:a6:ca:3c:57:cd:
5f:d0:ef:8a:2c:c4:5c:9b:ff:81:56:cf:4b:c8:a2:6d:67:dd:
09:c6:f9:72:fd:68:60:3d:07:9e:30:fd:e1:8e:4c:b1:d7:17:
36:92:9a:0f:f8:a8:fd:b3:12:79:99:27:20:3c:d4:8d:64:7f:
91:b0:38:60:38:05:c0:f8:74:d7:47:b7:21:71:f9:71:b0:2c:
c8:14:fd:ce:31:bc:63:70:ab:cb:be:e2:c1:75:eb:f5:8a:74:
0c:29:2b:33:cb:dc:05:ff:3b:9a:09:0f:50:51:9a:0a:b7:77:
fd:72:1b:be:eb:99:17:c8:d2:00:c5:83:05:68:fb:23:be:5a:
1e:79:cc:50:ca:cc:f9:3e:9a:78:da:8d:6c:73:8b:3f:58:50:
37:7a:ca:b1:28:a9:4f:32:49:fe:c2:75:e8:1d:37:60:a0:26:
a6:6c:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:48 2025 by rpki-client