Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/LpwODvh39V9VHzbH8u9PGJLAzQU.roa
File: LpwODvh39V9VHzbH8u9PGJLAzQU.roa (raw, json)
Hash identifier: Rlv1QHC9+50VkIjRvKuY285Keoeyo51F2hjMkK1ay/Q=
Subject key identifier: 2E:9C:0E:0E:F8:77:F5:5F:55:1F:36:C7:F2:EF:4F:18:92:C0:CD:05
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 0187B76B181ABDB81F8A30862866B270C758
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/LpwODvh39V9VHzbH8u9PGJLAzQU.roa
Signing time: Tue 25 Apr 2023 07:57:41 +0000
ROA not before: Tue 25 Apr 2023 07:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 91.108.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:6b:18:1a:bd:b8:1f:8a:30:86:28:66:b2:70:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Apr 25 07:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e9c0e0ef877f55f551f36c7f2ef4f1892c0cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:50:cd:4f:60:cf:bd:7f:20:4c:67:86:e3:
db:74:93:fa:50:6f:99:b7:31:33:f3:db:4c:b6:7e:
63:22:8f:c3:ed:6c:41:50:20:a1:d4:fa:49:1f:55:
5e:18:fb:b2:52:4b:17:4c:eb:5c:96:f8:9a:01:07:
91:ea:3c:f0:fd:15:b0:75:ad:84:d5:2d:64:3a:19:
da:c7:bd:2b:28:48:b2:82:6c:02:60:2f:d7:28:7a:
88:d2:da:e8:f3:99:41:b3:75:c0:9d:ca:72:37:82:
a1:03:37:a4:e2:88:33:61:e5:be:17:f7:ea:1e:a8:
21:c4:e8:bd:00:42:b1:f0:ae:51:cd:6b:67:8a:3c:
61:74:c5:54:0e:18:41:ad:1e:3e:7c:fc:7b:3a:d9:
e2:86:ec:00:16:f4:06:30:b6:bd:16:24:a6:c0:e5:
00:c5:2b:c6:f5:12:a8:16:c5:46:04:1c:a3:0c:69:
36:cc:68:2d:7a:d2:60:c3:16:27:e7:81:88:79:f1:
60:1b:b2:bb:08:63:19:2f:4f:db:87:61:2f:b2:ac:
58:b1:c5:f8:66:6b:c4:c1:30:da:d8:fd:0f:1c:eb:
50:3d:e0:e7:49:06:a8:70:2c:c8:82:50:5d:cd:10:
71:8b:78:ac:18:94:b5:13:a8:cf:04:62:59:c0:c4:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:0E:0E:F8:77:F5:5F:55:1F:36:C7:F2:EF:4F:18:92:C0:CD:05
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/LpwODvh39V9VHzbH8u9PGJLAzQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.236.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e3:d8:0c:51:62:82:4f:cc:40:99:2b:a3:ae:00:ff:6d:6a:
ca:aa:0d:9f:f7:a0:14:ea:77:ed:4c:69:bd:99:46:a7:e9:ce:
f5:eb:89:bc:aa:f7:57:63:40:c8:79:24:21:ee:38:7b:24:8b:
52:2b:d5:a6:38:e7:47:ba:e0:8a:0c:4f:7e:4d:de:0b:d3:c4:
12:ff:87:c9:03:2e:7d:b4:17:2f:10:c6:ce:d5:6c:f7:61:52:
62:77:aa:35:11:53:46:88:16:fc:0a:bc:7a:bc:b8:c3:ee:d1:
84:25:ea:f8:74:91:3d:87:55:21:27:db:7f:57:27:97:5b:0e:
60:53:cb:1b:0c:31:39:ab:29:f6:ab:15:f4:81:43:b2:70:4c:
bf:a1:b3:93:3d:ed:5f:70:5d:d0:0b:22:ee:b2:a2:cd:f3:24:
60:5c:2c:51:d4:ed:14:4b:b6:67:1b:b6:c9:01:ba:ee:c5:9a:
af:fa:94:49:64:cb:b0:e7:78:b0:d4:2b:ed:b8:4c:fd:0a:ba:
4e:25:8e:4d:76:eb:a5:ef:5e:aa:7e:a7:36:bd:a3:83:6c:dd:
e9:da:39:3e:57:77:6b:2b:0e:be:e6:a9:1f:61:31:ca:ac:35:
51:20:10:40:57:cb:71:44:20:a6:c6:55:59:34:7e:dd:7f:4f:
e8:a8:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:07 2025 by rpki-client