Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/LSuon8oWpWCEq3s6Y32PD-sfbyI.roa
File: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (raw, json)
Hash identifier: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=
Subject key identifier: 2D:2B:A8:9F:CA:16:A5:60:84:AB:7B:3A:63:7D:8F:0F:EB:1F:6F:22
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 019423D6AC9E3EC8B8AEA0A00FE47F886C0A
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/LSuon8oWpWCEq3s6Y32PD-sfbyI.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41152
IP address blocks: 91.227.246.0/23 maxlen: 23
91.228.22.0/23 maxlen: 23
193.148.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ac:9e:3e:c8:b8:ae:a0:a0:0f:e4:7f:88:6c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d2ba89fca16a56084ab7b3a637d8f0feb1f6f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:2e:60:a8:05:1d:cd:49:76:31:6c:ad:24:
25:5f:e6:98:db:09:0e:d3:ea:84:34:42:4b:97:2d:
e7:05:48:66:cf:ce:7d:23:ae:e4:92:fa:df:83:5e:
cb:b9:10:48:c3:b4:a3:c2:d3:b3:d2:0b:29:41:33:
67:da:d5:0c:b3:bd:f0:8a:a9:16:5b:be:42:8b:ed:
e0:89:4a:74:95:4c:d0:27:7e:39:fd:bb:06:b7:4e:
59:f5:16:cf:e6:a0:4a:b4:72:75:f1:40:22:e5:ad:
78:4a:1d:90:c3:53:ac:05:55:7f:80:e1:f7:ae:23:
0e:03:f5:6b:79:f0:01:c1:c5:1b:83:a4:e4:e9:82:
b4:2a:77:9e:62:ab:d2:3d:6b:d2:1d:7b:60:74:06:
c8:5b:97:b5:eb:70:59:d4:c7:c3:85:83:b4:e0:1d:
53:37:7e:a0:88:34:f7:bd:dc:fd:a3:67:68:85:1c:
e3:88:d6:a6:4d:14:e7:24:79:48:75:06:09:25:c3:
a0:69:6b:86:80:ac:75:b2:ba:40:01:4c:85:03:5a:
f7:84:39:a6:30:5b:69:85:87:c1:48:17:08:c9:62:
ba:25:fa:a9:c2:2b:39:e4:bd:28:ef:a3:90:86:12:
55:47:21:ae:57:4f:98:92:27:af:56:47:13:a8:7b:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:A8:9F:CA:16:A5:60:84:AB:7B:3A:63:7D:8F:0F:EB:1F:6F:22
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/LSuon8oWpWCEq3s6Y32PD-sfbyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
91.228.22.0/23
193.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
61:80:db:e8:66:bf:12:3e:8d:68:2c:83:26:92:7c:6e:c6:15:
e8:37:f2:1b:af:98:ae:e8:d0:70:cf:ac:6a:a7:ba:87:34:a5:
29:64:f0:a3:09:b7:56:82:0f:ef:fa:69:15:d4:ef:7f:21:6e:
67:c7:46:18:ee:5a:fd:41:26:bc:c3:a5:be:0a:4a:4d:90:45:
09:28:80:9b:b8:f5:28:f4:90:5d:2e:de:13:f0:17:63:03:bc:
1e:76:12:94:ae:dc:ae:47:61:28:12:11:33:19:5f:e4:3f:54:
2b:a6:a4:f8:70:22:95:8e:c7:42:ba:f8:be:00:20:9d:24:d7:
2b:37:e5:5a:12:76:64:49:4d:04:bb:fb:23:ee:3c:27:37:c3:
ab:9a:35:2c:b9:bb:6f:41:e9:ae:f5:cb:e6:41:bc:f1:30:55:
d9:f6:76:95:76:6d:bc:cb:a0:69:25:2c:19:ba:fc:65:ea:48:
ef:c4:d6:cb:76:37:a6:08:e2:f3:e7:ec:8e:0a:12:40:2e:9d:
2a:50:8c:78:57:bc:36:da:39:9f:ad:dd:cf:8c:3d:79:dd:b4:
52:5f:13:3a:79:da:62:0a:b7:1b:db:8c:80:63:e0:98:2d:bb:
a1:d4:69:5b:74:a4:eb:35:48:24:be:fd:d5:cf:93:92:6a:6f:
80:e5:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:02:23 2025 by rpki-client