Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/LmyJMmF8Qo13tzZD6pqCLPwDjI4.roa
File: LmyJMmF8Qo13tzZD6pqCLPwDjI4.roa (raw, json)
Hash identifier: KP/jPBkENdFOV7fTyIyMPqKG26bq31+6SPAeXg5veKs=
Subject key identifier: 2E:6C:89:32:61:7C:42:8D:77:B7:36:43:EA:9A:82:2C:FC:03:8C:8E
Certificate issuer: /CN=cd06d19bb3ea59d16763ef5ef0bc55dbeedce785
Certificate serial: 0574D761
Authority key identifier: CD:06:D1:9B:B3:EA:59:D1:67:63:EF:5E:F0:BC:55:DB:EE:DC:E7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQbRm7PqWdFnY-9e8LxV2-7c54U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/LmyJMmF8Qo13tzZD6pqCLPwDjI4.roa
Signing time: Sat 01 Jan 2022 05:56:06 +0000
ROA not before: Sat 01 Jan 2022 05:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62445
IP address blocks: 91.199.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91543393 (0x574d761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd06d19bb3ea59d16763ef5ef0bc55dbeedce785
Validity
Not Before: Jan 1 05:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e6c8932617c428d77b73643ea9a822cfc038c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:9d:ee:ed:52:a3:db:52:db:85:20:44:f0:
09:d5:bf:99:b9:30:16:a1:80:00:c5:ec:eb:4a:1c:
40:6a:a7:72:9a:a3:83:5b:a3:6f:c6:0c:19:6d:b0:
b4:1a:01:70:17:1b:4c:a2:41:08:0b:4a:6d:a8:1e:
db:05:a1:e3:ea:86:a9:a7:57:e9:65:a4:ce:2d:8d:
6a:98:2f:34:23:0a:4d:4a:e6:ad:9a:9f:b8:fb:90:
75:a0:cd:5e:49:67:11:f2:32:23:fb:b3:1b:a0:d1:
59:72:8e:9c:61:01:60:3f:59:5b:1a:59:9c:fb:98:
f9:a8:c2:1f:88:39:38:93:e3:b8:d8:6f:32:6b:00:
e5:c8:08:8b:f2:7e:95:8c:aa:25:70:02:2a:64:58:
62:c9:b2:29:3e:df:6a:e9:8d:0b:58:40:36:b4:43:
b9:21:c9:95:80:7e:50:ea:b6:c4:dc:04:8f:c3:01:
29:05:d1:fc:72:16:6c:cf:6a:e6:3d:e4:63:c8:af:
5c:0e:82:67:95:12:58:46:58:2d:5b:7d:86:ed:34:
6e:77:61:3d:7e:12:c1:f7:4d:67:2a:e0:93:91:1c:
d3:dc:c0:d3:9c:ff:77:24:26:b7:5a:c0:42:02:ce:
bf:0c:04:8e:8d:f4:b8:04:25:ca:29:5a:ce:8f:e3:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6C:89:32:61:7C:42:8D:77:B7:36:43:EA:9A:82:2C:FC:03:8C:8E
X509v3 Authority Key Identifier:
keyid:CD:06:D1:9B:B3:EA:59:D1:67:63:EF:5E:F0:BC:55:DB:EE:DC:E7:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQbRm7PqWdFnY-9e8LxV2-7c54U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/LmyJMmF8Qo13tzZD6pqCLPwDjI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:dc:02:a5:91:55:5b:46:55:24:03:cc:08:89:06:67:2b:c5:
8c:ca:97:82:da:ad:f0:1a:9d:fb:2a:6f:0b:7b:75:4d:ee:17:
e7:32:cf:12:c6:43:53:ae:bd:95:c1:23:a6:2f:4c:f6:bd:61:
12:2d:0b:8d:a1:63:ff:24:b5:c4:6b:f4:cb:89:9a:b8:06:f0:
33:8a:2c:d3:6d:8d:7a:d5:15:72:9d:18:6c:ad:55:e8:61:c5:
c9:eb:ba:a0:f0:bd:e5:e3:e8:b7:fe:38:09:ed:f8:e0:ab:bf:
37:a5:34:e7:5d:df:0e:2e:0d:ad:15:01:9f:3a:ed:e6:48:5c:
1a:2b:49:0f:ac:69:95:3a:a3:3a:6a:fa:50:58:49:a5:6a:7e:
c7:d6:22:48:93:0b:dc:99:af:83:04:a3:a3:24:6c:19:f6:c2:
21:c3:7d:5e:bf:a1:29:fe:e2:39:8b:f5:0c:13:67:ef:5c:db:
a4:86:34:da:c4:26:02:0f:44:02:b7:90:6b:05:61:fe:3a:1b:
94:74:5a:c6:3e:ca:36:d2:e9:72:57:ed:e2:84:e7:6a:7b:70:
a3:f0:4e:d9:b6:6b:ad:6a:0a:31:13:45:97:92:b1:e6:5d:10:
0c:3d:cc:69:fb:5b:8b:78:7b:2d:9f:f2:e8:bc:27:15:8f:9e:
24:cc:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:11 2025 by rpki-client