Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa
File: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (raw, json)
Hash identifier: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=
Subject key identifier: 2C:FB:7F:CD:E8:50:E8:F2:95:CE:9D:0C:8D:F4:99:F1:B8:48:DC:52
Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial: 019422200D53E6D94838DCEA5A2BB9D54C33
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43473
IP address blocks: 91.195.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0d:53:e6:d9:48:38:dc:ea:5a:2b:b9:d5:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cfb7fcde850e8f295ce9d0c8df499f1b848dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:ed:22:8c:7d:b0:a5:49:63:5c:ea:a6:02:
d1:14:ce:84:ae:81:85:12:24:6d:ca:40:e5:43:62:
40:a5:4f:29:2e:17:88:f7:fe:ed:cc:d6:41:cf:5b:
69:13:03:01:cc:88:75:5d:0c:06:8b:74:b4:c5:2d:
de:ff:10:6d:df:af:23:89:7f:73:a1:e8:0d:3f:32:
99:9c:bf:34:b7:05:5e:1c:14:03:0c:45:54:b5:19:
63:b7:8b:0d:65:36:b0:27:61:cc:90:31:d3:3e:f3:
be:34:b4:bc:5e:2d:59:c4:eb:6a:fd:8f:df:1d:ea:
69:25:e5:6c:3d:29:ec:a7:b8:b5:8b:5c:34:d1:af:
11:af:fa:ee:c0:22:fd:0f:64:5c:18:5e:d9:c5:8b:
c9:e1:e0:66:cf:59:8f:5d:31:34:ae:e9:74:3e:32:
61:d3:55:25:d6:60:ec:f2:ce:60:d2:33:89:29:b5:
59:fe:de:ff:14:49:17:0b:d5:72:e3:11:14:71:65:
09:00:75:06:77:65:47:0e:a5:75:a0:cd:9c:d8:4c:
cb:16:4b:d6:c4:94:97:10:19:ce:63:31:f8:87:f9:
10:12:d8:d5:05:5d:fa:1e:bf:2e:26:45:df:02:a5:
13:fa:b9:ad:b1:a7:15:e8:b6:16:6b:62:7a:de:88:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:7F:CD:E8:50:E8:F2:95:CE:9D:0C:8D:F4:99:F1:B8:48:DC:52
X509v3 Authority Key Identifier:
keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.14.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:8c:39:7a:ce:2d:93:53:4f:e8:e8:e2:01:d4:20:14:77:48:
1c:3e:dd:b1:c8:00:68:78:b7:eb:29:53:72:bd:c8:15:84:ac:
cc:57:44:a5:7a:c3:83:29:1b:f5:ab:15:2c:1a:c4:eb:26:1c:
9c:a8:ab:58:ad:64:36:62:a2:c8:0c:5b:f8:d2:81:aa:ee:36:
0b:da:97:cb:d4:d0:6b:a4:c7:2d:69:ea:dd:4a:b8:c7:8c:ca:
75:e6:13:80:47:00:db:70:96:07:03:8d:f0:88:6c:4c:51:77:
e9:6e:fa:3d:49:2b:d5:33:3d:e2:4b:bd:26:e9:d7:0b:b2:54:
9a:8d:a2:f0:28:95:22:11:ca:41:b8:9a:92:25:e2:7c:94:e3:
14:3e:70:dc:a4:64:a6:5e:7a:04:54:1d:34:f5:1a:97:cb:cc:
7e:18:dd:ba:17:18:ef:ed:cd:0f:77:4f:54:ad:22:0b:e9:52:
80:1d:a2:5c:e8:8d:6a:ff:ea:2a:bc:a9:99:de:37:00:10:7b:
45:fa:e0:38:59:57:da:2a:dd:48:52:75:3c:81:3f:5e:10:ce:
52:e0:ea:7b:df:84:aa:6a:6d:4c:f6:b0:76:24:3e:bf:6e:1d:
b5:b9:de:43:fe:11:84:ef:de:e3:a3:3c:c0:c9:6c:13:14:fe:
39:e3:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:29:03 2025 by rpki-client