Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/lreCMOjUdm3oifNloxJ4msuXFJI.roa
File: lreCMOjUdm3oifNloxJ4msuXFJI.roa (raw, json)
Hash identifier: q93r2pfO0cfnXT+oJEJZWRJxFW5lh24m9a7fpzeRDvw=
Subject key identifier: 96:B7:82:30:E8:D4:76:6D:E8:89:F3:65:A3:12:78:9A:CB:97:14:92
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019424449D65F31CD4D0375F7F88FAAC3EBD
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/lreCMOjUdm3oifNloxJ4msuXFJI.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.107.72.0/21 maxlen: 21
91.107.88.0/21 maxlen: 21
159.253.124.0/22 maxlen: 22
185.91.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:65:f3:1c:d4:d0:37:5f:7f:88:fa:ac:3e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96b78230e8d4766de889f365a312789acb971492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:a6:bf:57:40:4f:1a:50:0b:1f:05:7b:78:
d5:51:d4:ba:4a:83:88:3b:61:7d:b8:2a:fc:98:d8:
f2:8d:1b:f0:9e:17:ad:e4:eb:82:ec:e6:77:4a:aa:
76:29:39:43:e6:62:9b:22:8d:dc:72:b3:04:c5:ea:
8d:a3:d0:2c:f2:af:d3:f1:de:b1:e1:33:78:10:c5:
cb:0e:f0:4f:e4:ca:e5:1d:6e:c5:9d:92:a1:ec:30:
b9:e6:76:a8:a4:aa:54:fb:a0:18:d5:6e:75:e2:b0:
d0:41:7e:2c:de:cf:d5:29:1f:42:d0:2a:0c:e3:21:
dc:80:f4:25:cb:e5:a6:d1:14:a0:a6:c5:27:0f:81:
39:d3:de:fa:63:8e:14:1e:31:69:17:ff:32:33:b4:
74:a5:56:30:da:b0:8b:d9:a4:b5:b1:d3:e9:90:2d:
60:61:a8:96:67:44:26:e8:5f:d6:bf:7c:e2:e5:af:
a0:d3:09:84:df:f1:c6:dc:5a:54:57:18:a8:55:38:
a1:e6:ce:90:04:d2:99:e7:77:37:66:d3:e9:38:a6:
2d:89:a9:8b:98:a6:ea:95:bb:b9:36:49:2b:31:ab:
79:6a:10:bf:af:02:e4:d3:b1:6f:15:a5:7c:da:88:
2f:e2:2d:02:ac:a5:e9:f8:6f:a4:31:91:ae:8d:76:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:82:30:E8:D4:76:6D:E8:89:F3:65:A3:12:78:9A:CB:97:14:92
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/lreCMOjUdm3oifNloxJ4msuXFJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.72.0/21
91.107.88.0/21
159.253.124.0/22
185.91.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f6:06:08:d5:dd:2c:8f:f1:65:e5:3a:a3:12:f8:f8:7c:fd:
48:c0:c6:f6:70:c6:c3:6b:83:db:7c:08:47:bd:c9:d4:2e:e0:
b8:f9:e5:1f:52:73:8d:cd:32:49:91:b0:e4:be:6e:ff:04:44:
2a:d4:4f:bd:69:da:53:12:dd:90:fe:0c:01:59:0c:b0:28:8f:
3e:b3:ec:af:13:25:28:38:e4:52:aa:65:55:e0:88:c3:d3:ef:
91:a9:fc:7b:15:63:c8:8f:12:2e:dc:19:68:59:93:90:6a:8c:
24:90:2a:b7:69:92:13:1b:4d:f5:78:27:b0:ab:1f:a6:c3:ad:
e9:8d:6f:be:fb:b2:dd:d2:a9:df:9e:af:bc:fa:65:e8:1e:af:
f5:fc:86:ac:75:74:8c:40:9a:4e:26:2f:c0:80:20:d3:72:36:
2b:33:f4:fa:c7:dd:6a:62:7e:1b:1e:b1:63:9f:7f:97:9b:53:
87:88:06:6a:79:31:b6:96:8b:f7:09:4d:8c:df:f8:86:6d:60:
41:e4:9a:65:8b:b8:c3:5d:81:f8:df:a3:35:2a:9f:34:cc:8d:
06:63:f3:8e:7a:fe:47:cc:b0:e7:c8:26:1e:f5:82:39:19:50:
42:5e:0a:db:d6:5a:79:9b:46:60:3d:dd:90:36:58:05:74:a8:
35:de:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:58 2025 by rpki-client