Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/LZkFlogSClzrc-AKeTsZwuxNckE.roa
File: LZkFlogSClzrc-AKeTsZwuxNckE.roa (raw, json)
Hash identifier: idZSLu3xeTL8SNfMl6tJuyG42pzzi5FNRcVeZuo1CNk=
Subject key identifier: 2D:99:05:96:88:12:0A:5C:EB:73:E0:0A:79:3B:19:C2:EC:4D:72:41
Certificate issuer: /CN=a0094996f4bc87995d20d2a2a2dc843aad4e4738
Certificate serial: 0186E5D80DAE002D4C1415D48D8581CE06FE
Authority key identifier: A0:09:49:96:F4:BC:87:99:5D:20:D2:A2:A2:DC:84:3A:AD:4E:47:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAlJlvS8h5ldINKiotyEOq1ORzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/LZkFlogSClzrc-AKeTsZwuxNckE.roa
Signing time: Wed 15 Mar 2023 15:16:27 +0000
ROA not before: Wed 15 Mar 2023 15:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208124
IP address blocks: 91.209.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:d8:0d:ae:00:2d:4c:14:15:d4:8d:85:81:ce:06:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0094996f4bc87995d20d2a2a2dc843aad4e4738
Validity
Not Before: Mar 15 15:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d99059688120a5ceb73e00a793b19c2ec4d7241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:4e:08:a5:c2:83:30:7c:58:eb:6f:b2:06:
91:76:eb:e5:4e:db:e0:39:9f:c9:e7:16:9b:46:b9:
d7:88:a8:50:8f:d4:ed:55:eb:64:be:e2:76:f3:27:
ab:9d:c6:03:ef:84:6d:5d:00:de:0b:33:0a:92:83:
0b:73:94:d5:e4:70:97:a4:4f:e7:13:3a:cc:ab:43:
52:8b:eb:64:af:4c:f9:94:75:7e:f9:49:36:be:64:
81:68:4e:89:c8:c1:c7:00:8d:76:c5:b0:9d:01:ca:
14:02:a1:a0:a7:42:c9:e9:87:e3:c8:1b:bf:77:78:
43:c0:e9:07:8b:1f:ed:2a:10:6b:dd:89:36:58:77:
72:b6:c6:40:40:c1:10:03:c9:f5:e4:b0:03:10:85:
63:b8:54:26:9c:98:d8:81:05:37:11:0f:cb:03:15:
7e:b9:1b:dd:f1:a3:8b:a5:fc:d7:79:e5:8f:d6:09:
dc:2a:47:39:41:59:55:f8:a4:03:e2:3d:0d:c1:7a:
49:17:c2:ca:f2:05:96:34:47:98:b5:bd:6d:dd:fe:
01:9f:b9:6a:da:8c:99:5b:aa:d4:0c:26:61:26:62:
f4:df:37:4c:a7:e0:ea:8f:1c:9c:25:24:73:0c:da:
a2:df:f9:8a:bc:b4:48:82:c8:9a:04:ec:cc:59:41:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:99:05:96:88:12:0A:5C:EB:73:E0:0A:79:3B:19:C2:EC:4D:72:41
X509v3 Authority Key Identifier:
keyid:A0:09:49:96:F4:BC:87:99:5D:20:D2:A2:A2:DC:84:3A:AD:4E:47:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAlJlvS8h5ldINKiotyEOq1ORzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/LZkFlogSClzrc-AKeTsZwuxNckE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/oAlJlvS8h5ldINKiotyEOq1ORzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ff:02:fd:c7:9d:ea:48:d4:6d:7f:77:a7:e3:a1:72:70:5e:
f8:2c:61:99:58:04:ee:78:cf:d5:90:35:ea:ca:32:8f:00:79:
13:a8:8c:82:98:88:7c:f9:50:57:44:de:7e:37:de:60:5c:db:
a9:6d:a2:b1:09:07:67:9f:b6:e0:d8:d0:84:7a:4c:0c:07:5e:
87:16:c3:b3:ce:c6:45:ee:ce:45:d7:39:c2:2b:08:6c:7a:66:
f2:a7:e1:97:68:2b:e2:69:e9:42:2c:3f:d1:c1:94:65:24:6f:
3d:59:62:5b:04:a9:2a:a3:5f:b1:91:0f:83:ee:2d:55:b3:cd:
32:91:c3:07:93:f1:8e:a8:7b:31:d0:84:17:50:0b:39:0c:d1:
33:b1:fb:40:a8:c1:ba:c9:d0:3c:a9:50:53:a0:c1:23:b3:e0:
19:19:37:ef:65:1d:89:eb:1f:f0:1b:69:51:1e:bc:47:ac:f8:
8d:92:f1:8a:3f:47:b7:0f:9b:e1:b5:d2:2c:cb:d2:fc:b5:85:
5c:e3:a6:ed:53:09:2b:96:11:06:84:75:ad:27:f8:c3:8a:9b:
f9:42:7a:72:24:bc:be:0f:64:f1:8d:cd:e3:b3:0e:40:b2:10:
ab:bc:7a:64:39:63:42:74:1a:cc:0b:31:19:e0:e9:19:3f:d7:
80:a5:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:26 2025 by rpki-client