Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa
File: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (raw, json)
Hash identifier: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=
Subject key identifier: 2E:FC:2F:34:60:14:6D:F4:F6:06:DD:2D:63:E9:1A:AD:9F:F0:58:8A
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01958F4922C7CADC564862D57C471E7DC47E
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa
Signing time: Thu 13 Mar 2025 11:34:49 +0000
ROA not before: Thu 13 Mar 2025 11:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29491
IP address blocks: 91.202.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:49:22:c7:ca:dc:56:48:62:d5:7c:47:1e:7d:c4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 13 11:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2efc2f3460146df4f606dd2d63e91aad9ff0588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:ba:07:08:51:c2:bb:d4:7f:95:1c:47:06:
f7:3b:e0:61:80:c5:2a:d6:4a:83:db:71:73:24:0a:
fb:3a:60:8d:d0:7e:41:20:7e:f1:f1:41:62:b0:c4:
53:6f:bc:04:4c:94:54:90:85:67:05:bf:1b:49:07:
fd:c0:b0:9f:f9:27:55:f3:16:ac:23:ec:91:f9:de:
f1:d3:86:7b:eb:3b:7a:8b:06:7b:83:da:f6:55:e5:
49:ec:df:a4:e1:0b:68:de:87:31:0b:cb:95:e9:a9:
f4:c7:3a:0c:10:a8:86:49:b3:6a:90:c6:17:bf:af:
80:c2:14:66:ab:b8:a7:0b:ff:3b:8a:71:b9:ec:c7:
0a:a7:15:37:f1:8b:1a:8b:4b:2d:8e:c7:b9:96:23:
d9:08:10:d4:55:db:1b:7e:58:60:1c:37:2b:1d:4b:
ff:fb:48:b8:52:fc:6b:57:6d:76:8a:7b:d4:5b:2c:
88:3f:24:f9:11:61:b0:4c:8d:f5:53:4d:96:e7:94:
06:57:06:cf:70:88:e3:6b:84:e6:d0:c1:d9:d9:0d:
f9:77:ae:98:0d:b3:18:e0:a6:94:4a:e8:f4:24:eb:
a5:d8:6f:b5:70:89:12:97:79:e3:ac:b2:ba:28:9f:
19:95:33:9a:0d:52:3f:c9:bf:0d:44:64:a8:81:05:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:2F:34:60:14:6D:F4:F6:06:DD:2D:63:E9:1A:AD:9F:F0:58:8A
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:84:e2:cd:4e:92:08:db:27:81:e4:9f:83:2a:f8:92:63:b7:
4f:f8:1c:29:66:b6:1b:e3:80:c5:83:f7:fa:e2:f4:9c:44:c9:
b4:98:f0:de:c0:78:c4:e1:1d:c1:e2:8c:92:0a:1b:a1:01:f0:
af:28:63:46:cc:06:80:50:19:67:f9:49:47:91:97:d4:66:34:
48:2d:fa:d3:9e:51:af:38:eb:b6:6f:2e:52:96:ef:22:e7:bb:
21:2d:2b:6b:33:c2:0b:de:7d:ce:4c:e8:8a:29:bb:ba:e0:41:
c7:26:a4:9f:d6:2a:6d:d7:21:a1:40:17:ae:48:9e:b0:40:a4:
e7:7f:50:49:bb:8a:1b:ba:c8:37:32:40:8c:5e:e9:d5:8f:fc:
e8:e7:cb:a5:6b:cd:84:db:8f:51:7d:d3:37:0f:be:b0:04:a0:
66:1b:b1:60:f2:59:7e:1f:8f:54:9f:a5:46:ac:98:e6:e3:e3:
86:15:24:60:c7:b2:d4:2f:a5:29:0b:43:21:54:73:e6:ce:8a:
62:be:9b:df:24:39:28:ae:20:0f:37:09:0f:53:bd:94:39:10:
aa:fd:da:1a:d8:ba:59:e2:7c:e4:f7:8c:22:a9:20:ff:bf:49:
52:55:67:5c:90:83:53:3a:03:0a:05:07:29:54:7e:8f:2f:0f:
aa:01:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:47 2025 by rpki-client