Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/LhUj1mCFxgCVgOclN_x_EPQsaaM.roa
File: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (raw, json)
Hash identifier: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=
Subject key identifier: 2E:15:23:D6:60:85:C6:00:95:80:E7:25:37:FC:7F:10:F4:2C:69:A3
Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial: 019424B27E78F4AF4D2A2EB7D1A595127243
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/LhUj1mCFxgCVgOclN_x_EPQsaaM.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209707
IP address blocks: 91.132.76.0/22 maxlen: 22
2a09:c180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7e:78:f4:af:4d:2a:2e:b7:d1:a5:95:12:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1523d66085c6009580e72537fc7f10f42c69a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:96:bb:ad:d9:78:95:0b:5a:53:48:07:60:
ba:c8:ba:0c:21:3b:b4:00:71:53:ea:c6:df:80:18:
77:da:d9:1a:ce:c7:7e:dc:3a:72:e2:a4:99:ce:f6:
58:5e:27:dc:ca:0c:33:21:3b:d1:65:05:33:a8:72:
f1:a4:b3:76:88:bc:85:11:3b:df:a3:ed:e2:a4:d4:
a5:8c:68:28:ea:4f:2d:42:17:f9:b2:c6:07:0f:f1:
9d:d3:8e:ac:48:a5:72:4a:2b:4a:95:49:68:a1:3f:
a2:00:7d:8d:32:e4:5d:73:6e:f2:72:02:49:88:f6:
9f:15:7b:3a:95:3b:15:69:40:3f:cd:b0:65:21:90:
d5:28:80:a8:6c:45:da:1e:77:ff:4f:92:a5:d3:6c:
93:c0:1a:a1:e3:e7:3e:58:44:12:f0:50:9e:4f:37:
62:f2:ff:ff:89:46:b5:14:ff:09:69:f7:5c:9b:a0:
83:2c:c0:15:2c:53:f4:b4:32:b5:3b:53:95:4f:c5:
0f:77:14:75:9a:3d:28:7b:0e:e5:a6:2c:d7:dc:49:
bd:14:cb:e2:77:0d:e0:2c:d9:a7:80:1c:21:27:1d:
16:04:f3:2b:7d:c6:5e:73:dc:1d:6f:05:6e:77:52:
12:11:ac:08:54:02:40:c3:9a:4c:e5:b3:33:24:20:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:15:23:D6:60:85:C6:00:95:80:E7:25:37:FC:7F:10:F4:2C:69:A3
X509v3 Authority Key Identifier:
keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/LhUj1mCFxgCVgOclN_x_EPQsaaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.76.0/22
IPv6:
2a09:c180::/29
Signature Algorithm: sha256WithRSAEncryption
1c:d4:08:6c:5d:05:09:49:31:94:50:43:da:c6:35:d2:ac:94:
ad:1d:b1:da:90:43:3f:b9:83:f8:91:59:f4:6a:7f:31:0d:44:
c5:05:be:47:94:51:31:d0:78:90:93:0c:1c:bb:6b:04:01:9f:
80:f8:65:05:7c:a6:7b:92:14:6c:60:af:a9:33:13:97:0b:a7:
f5:9e:9e:18:b2:cd:79:5c:72:8c:74:cf:f3:b4:92:fa:f7:e8:
87:e0:21:70:a0:4c:3c:44:9b:3f:8d:58:46:64:8a:2a:18:59:
c2:14:5f:ab:2a:1f:a4:05:75:e3:45:7b:a2:ef:31:26:e7:69:
a8:5c:c5:cd:1a:07:86:69:62:7f:31:96:ec:94:d5:13:92:12:
80:4d:3d:37:74:ff:48:a2:40:83:11:a5:1c:e4:ed:13:72:b4:
da:95:25:3f:ca:fc:4e:72:50:76:c0:99:eb:75:75:51:3f:7d:
62:5e:48:fa:bd:22:83:22:63:50:f8:22:11:d1:cf:24:86:1c:
23:fb:e2:5f:85:87:84:b6:44:ff:54:b9:1e:3b:ca:68:51:47:
1c:35:4d:0a:82:87:5c:64:8d:bb:8a:42:6d:aa:2f:7c:71:e8:
99:1d:9b:81:f0:ba:45:c9:94:ed:53:d6:9c:9a:33:92:96:4d:
d4:78:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:44 2025 by rpki-client