Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/lkxfkXJeUwS4tf9hwfUaHviGSgg.roa
File: lkxfkXJeUwS4tf9hwfUaHviGSgg.roa (raw, json)
Hash identifier: MB/FOS9D0/N7sc26YuesIdJ9X16AAYgiGD6hIoBNyjY=
Subject key identifier: 96:4C:5F:91:72:5E:53:04:B8:B5:FF:61:C1:F5:1A:1E:F8:86:4A:08
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 01941FFA73BAD750A1DDDB928C427A52FA36
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/lkxfkXJeUwS4tf9hwfUaHviGSgg.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52074
IP address blocks: 91.221.218.0/24 maxlen: 24
91.221.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:73:ba:d7:50:a1:dd:db:92:8c:42:7a:52:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964c5f91725e5304b8b5ff61c1f51a1ef8864a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:34:78:ad:7e:bc:8c:5b:7c:78:4f:0b:1d:
87:d2:81:9d:51:3e:9a:ec:2b:81:6e:ee:5e:f6:4d:
76:e5:52:c6:0e:15:cc:88:67:a6:4c:70:38:0a:94:
60:72:56:d8:6f:ee:8c:81:14:64:a3:d9:91:26:79:
02:e0:45:4c:54:a8:ad:6c:1e:17:6b:a9:f0:44:5e:
97:e6:ff:62:2e:20:42:b5:b7:0d:b5:e4:68:4b:bd:
bb:e3:f3:a5:28:2f:4c:d0:0a:85:c3:3c:dd:12:0b:
58:f5:b6:9a:82:96:62:8f:e5:0a:8b:40:2c:79:0e:
36:54:6d:f8:f6:63:ba:fd:46:2c:ee:f3:25:d3:b0:
f1:b5:05:ae:6c:53:ec:0c:fa:c9:cc:aa:e8:89:50:
cf:8c:a0:e0:8f:b2:81:8e:ee:38:64:a3:8f:0f:e2:
8d:e8:0c:da:c3:d1:65:b6:ef:4c:72:a5:86:c5:6f:
28:c4:40:fd:37:47:a3:46:07:90:56:ea:71:12:8d:
48:21:02:13:0b:43:00:66:b4:f5:97:92:72:63:ab:
fd:6c:96:6a:c6:f6:87:ad:33:1c:2b:da:f1:4d:bb:
4b:5e:04:84:61:b3:09:e0:a0:59:3e:1e:ff:3a:88:
a1:48:76:9e:00:74:1f:38:6a:d8:d1:d1:c3:d2:4b:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:5F:91:72:5E:53:04:B8:B5:FF:61:C1:F5:1A:1E:F8:86:4A:08
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/lkxfkXJeUwS4tf9hwfUaHviGSgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.218.0/23
Signature Algorithm: sha256WithRSAEncryption
95:2a:53:5c:bf:ef:c7:fa:19:14:0a:ce:df:96:69:2a:29:24:
28:4c:54:d9:58:56:2d:23:04:ee:bc:72:04:29:bd:66:c0:ad:
96:16:a7:21:a6:c1:16:e5:21:2b:91:d3:58:54:5c:f7:be:b1:
ed:68:da:5e:b0:a5:98:b0:a9:f6:d7:a3:88:34:a9:28:78:c2:
e8:4e:26:21:93:00:e7:21:74:7b:5d:88:92:0d:7f:7c:84:41:
7f:0b:da:5b:80:f4:5a:0d:ca:9b:7f:25:7e:db:c0:c9:70:73:
c2:fe:cc:9f:c5:7f:8a:64:ee:54:bf:61:d4:b0:75:d0:d2:31:
dc:1b:b2:c7:95:e6:ff:02:1d:ba:ce:7c:1d:7f:49:41:8e:a9:
67:c0:14:32:eb:96:33:89:83:7b:93:6a:83:50:35:7f:87:c5:
ee:48:d6:21:95:e9:4b:49:13:db:ed:48:d6:e9:d5:67:14:c0:
7f:4a:39:90:ce:d4:a5:7f:dd:64:ef:13:24:ff:1f:99:20:a2:
92:f3:16:e3:04:da:c6:63:ab:4a:f3:49:5e:fc:ce:8c:f5:91:
00:17:1b:47:8c:31:d4:2b:6a:1d:73:54:a3:2c:7e:db:9a:63:
c1:d3:44:8d:c8:ea:36:71:f3:22:44:4c:59:a1:b8:96:f9:21:
5f:64:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:23 2025 by rpki-client