Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/lCDqNprGOb5vTF01oJ8hwQqZCRE.roa
File: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (raw, json)
Hash identifier: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=
Subject key identifier: 94:20:EA:36:9A:C6:39:BE:6F:4C:5D:35:A0:9F:21:C1:0A:99:09:11
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 0194236A0DD81E0406619B0060AA5515697F
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/lCDqNprGOb5vTF01oJ8hwQqZCRE.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60386
IP address blocks: 91.237.107.0/24 maxlen: 24
176.121.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0d:d8:1e:04:06:61:9b:00:60:aa:55:15:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9420ea369ac639be6f4c5d35a09f21c10a990911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:8d:95:49:56:72:99:ea:ad:c3:e0:34:f9:
36:24:0e:c4:82:44:ff:d7:05:14:b8:98:9f:62:00:
24:9e:b7:4e:97:0a:ea:db:ae:c8:29:0e:e2:a0:4f:
0c:ba:0f:9d:62:e9:23:b0:f4:9f:db:a1:30:c2:99:
b7:17:02:e2:e7:70:31:cf:58:d0:05:51:3b:b6:a0:
90:39:a3:f9:ee:9b:0f:e7:be:35:dd:c1:14:4a:5f:
30:2c:a9:8d:21:f5:87:7e:76:5c:8e:78:02:22:25:
fa:cd:3e:6a:04:eb:87:bb:50:aa:45:29:7c:34:7f:
8c:02:6f:76:07:7c:60:49:c1:8a:46:53:c7:fb:4f:
0d:57:a3:92:50:ba:07:b3:3a:af:63:35:fb:2a:11:
51:cd:76:0f:01:a7:28:92:f7:f2:6c:92:0a:67:22:
86:70:45:25:12:4d:68:c6:90:92:5a:8d:5d:2a:8d:
34:37:6c:84:da:16:f0:32:79:e0:91:a6:8a:62:86:
10:61:a0:f2:32:39:c9:e1:91:7c:11:dd:31:2b:9f:
93:2a:12:5e:0f:30:ba:a0:ee:4a:64:26:9c:b4:01:
f6:20:23:e5:6d:80:70:b7:56:b5:df:57:bd:61:aa:
f2:c6:54:0c:7f:b5:87:75:b1:5d:7e:85:7d:5a:e9:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:EA:36:9A:C6:39:BE:6F:4C:5D:35:A0:9F:21:C1:0A:99:09:11
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/lCDqNprGOb5vTF01oJ8hwQqZCRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.107.0/24
176.121.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:30:88:d7:d2:8c:c1:c3:96:41:e7:6b:28:31:49:70:b6:
00:f0:e2:b0:6b:33:3a:89:ff:84:61:cc:ab:2a:36:2d:c7:5c:
4f:76:72:6d:8b:c1:fc:05:b3:7b:a8:fe:82:1f:29:d2:1e:86:
90:0f:87:07:f5:50:8c:5d:18:cc:ef:a4:ab:85:0d:7e:a8:4f:
b1:fe:ce:b5:ba:4f:1c:cb:00:37:3a:ae:54:61:d3:0a:d1:7f:
55:7d:87:3f:db:17:2e:3f:5e:d1:d0:a2:da:88:1b:30:5f:eb:
2e:fb:4b:08:ac:f6:67:7d:1b:92:05:fa:0f:39:cf:a6:4b:1f:
15:b5:04:89:58:bc:79:14:37:d6:a1:f2:df:4b:8b:89:26:7b:
37:61:49:8b:e0:65:f0:57:bd:1e:db:c7:da:35:da:ae:80:08:
12:42:13:9c:d2:2b:d7:84:d9:de:7c:f6:f6:fe:9e:c2:a4:ed:
9b:05:50:cd:63:54:20:14:8f:35:96:e9:3f:22:bc:c6:61:a4:
0d:6a:ba:80:03:bd:af:ff:6e:d5:39:95:1c:3a:70:7f:7d:aa:
c2:3c:62:d4:0e:34:85:19:2c:d1:67:76:e1:c1:2a:ad:d8:fd:
50:ac:02:a4:44:be:12:6d:f6:d8:d1:85:80:ba:64:a3:f7:38:
9b:3c:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:51 2025 by rpki-client