Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/LOLdb1M7Mv4O5kdGbtkrTZ_3CTA.roa
File: LOLdb1M7Mv4O5kdGbtkrTZ_3CTA.roa (raw, json)
Hash identifier: dmN5tHafCu3fITOxPsSol/rVP/kMv8Id2MsmDtBNNZ8=
Subject key identifier: 2C:E2:DD:6F:53:3B:32:FE:0E:E6:47:46:6E:D9:2B:4D:9F:F7:09:30
Certificate issuer: /CN=5eadf6d6ff71c7e38ea1d291205acbef8c3d9076
Certificate serial: C5B1
Authority key identifier: 5E:AD:F6:D6:FF:71:C7:E3:8E:A1:D2:91:20:5A:CB:EF:8C:3D:90:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq321v9xx-OOodKRIFrL74w9kHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/LOLdb1M7Mv4O5kdGbtkrTZ_3CTA.roa
Signing time: Tue 05 Apr 2022 17:23:01 +0000
ROA not before: Tue 05 Apr 2022 17:23:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51521
IP address blocks: 91.217.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50609 (0xc5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eadf6d6ff71c7e38ea1d291205acbef8c3d9076
Validity
Not Before: Apr 5 17:23:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ce2dd6f533b32fe0ee647466ed92b4d9ff70930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:d0:92:f3:e3:67:cc:61:37:ae:8f:7d:53:
6d:e6:a2:1e:cb:36:a6:12:2a:01:e5:8a:5a:eb:55:
e6:eb:42:05:e4:3d:60:a2:a0:e2:a7:58:c9:a8:c5:
3e:e5:52:cf:43:2d:03:1c:25:69:5a:e9:39:2f:88:
50:a7:db:5a:88:f6:0f:da:64:cf:d9:37:26:07:53:
95:21:fe:28:f7:9c:be:5f:a1:91:c3:4d:f8:f2:2c:
f2:1b:ce:4b:d3:01:93:78:f7:d8:55:e2:38:af:9a:
fd:5b:12:1d:d4:fb:b6:43:c9:18:93:b8:23:07:c7:
e8:3b:49:d8:ba:66:ab:ec:74:1e:19:73:96:f6:6f:
b5:38:a8:85:3e:b8:f4:38:db:52:a4:60:a5:c9:e7:
95:86:f3:79:2a:0b:eb:29:97:57:1e:bf:4e:16:6b:
45:a0:c3:f3:1c:a7:42:ed:96:c0:a0:60:51:60:aa:
64:11:df:32:35:c2:63:8e:06:30:3b:25:f8:55:87:
9d:d8:97:82:a6:e1:40:f5:27:d3:12:17:44:e8:e4:
21:11:de:78:43:8a:5e:55:eb:99:08:85:fd:3f:c8:
8c:2b:90:a4:23:31:e1:d4:2c:55:23:e3:1f:20:8b:
d8:da:63:61:96:b8:49:1c:9e:81:ed:e9:bd:4c:c9:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E2:DD:6F:53:3B:32:FE:0E:E6:47:46:6E:D9:2B:4D:9F:F7:09:30
X509v3 Authority Key Identifier:
keyid:5E:AD:F6:D6:FF:71:C7:E3:8E:A1:D2:91:20:5A:CB:EF:8C:3D:90:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq321v9xx-OOodKRIFrL74w9kHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/LOLdb1M7Mv4O5kdGbtkrTZ_3CTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/Xq321v9xx-OOodKRIFrL74w9kHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:dd:77:c1:00:ed:e8:0f:33:9f:da:09:3a:3f:f3:56:19:ea:
db:33:92:47:5f:95:2e:fb:22:e0:eb:e5:35:82:a6:94:ca:19:
4b:39:eb:5a:23:65:1c:60:02:95:9b:3d:00:36:73:1e:27:4a:
81:11:81:e9:a2:7b:6d:b4:15:f1:42:7d:9e:a2:8a:56:b1:c3:
7e:8d:3e:f7:88:31:ee:6a:a8:85:67:32:91:46:86:a9:11:69:
48:5e:87:b2:14:33:a5:97:e7:0f:5f:bb:0a:fd:63:72:28:96:
b5:1f:d3:56:67:de:e7:81:58:c3:ad:60:d0:07:3c:4f:4e:24:
0b:ee:e7:c7:7d:ed:eb:cc:a6:f5:db:9e:e6:3a:40:bc:10:15:
62:74:6b:5a:26:cc:bf:ce:a9:b3:81:7b:c2:51:7d:90:58:3f:
0b:ef:cc:36:c3:32:ec:3d:29:f1:c5:dd:ab:4b:a5:8d:56:5b:
18:af:e1:29:db:4a:d4:97:3c:72:0e:4e:c9:72:26:ee:07:48:
f8:6f:ae:07:41:2b:a4:9e:32:9c:aa:54:32:98:77:8b:a8:d4:
ef:40:88:95:3b:45:fd:2c:72:68:4e:d0:5b:74:87:5e:ab:34:
11:5d:70:5c:35:c0:6f:e9:48:17:d2:7d:00:88:c4:14:5f:36:
41:1e:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:54:10 2025 by rpki-client