Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/laipLp8KglQcye-IRjOJRJlG5Jg.roa
File: laipLp8KglQcye-IRjOJRJlG5Jg.roa (raw, json)
Hash identifier: QkzCQRtBzn9Zcj1icCjg3vKSbBlrrvuCni/GZf6tlpE=
Subject key identifier: 95:A8:A9:2E:9F:0A:82:54:1C:C9:EF:88:46:33:89:44:99:46:E4:98
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 018934E1F408CADBDE53465A2E590A3A57DB
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/laipLp8KglQcye-IRjOJRJlG5Jg.roa
Signing time: Sat 08 Jul 2023 09:42:50 +0000
ROA not before: Sat 08 Jul 2023 09:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:e1:f4:08:ca:db:de:53:46:5a:2e:59:0a:3a:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Jul 8 09:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95a8a92e9f0a82541cc9ef88463389449946e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:b3:a7:be:72:6f:c2:19:f3:31:0c:87:ec:
96:6d:d8:43:75:e0:d4:35:97:1b:c3:8c:46:d2:d5:
b9:c6:a4:13:c5:16:12:39:56:88:4c:ed:f1:eb:a7:
bd:d9:82:cd:25:bd:bd:c4:f0:b2:6d:53:0a:b7:b6:
bd:be:ba:98:34:74:eb:f4:c6:7b:4b:c3:1e:51:be:
55:29:ea:c6:9e:fa:71:ba:53:8d:87:63:60:93:ba:
1e:b7:ee:22:50:98:2a:a0:26:5c:09:be:51:5b:f2:
0b:bb:0d:e8:55:17:17:2d:dc:96:3d:0e:fe:51:68:
ee:86:27:89:a4:e3:57:81:6d:5b:de:a4:a1:68:2e:
0f:74:a7:0e:66:0f:5d:48:c9:32:06:26:b1:4f:68:
9b:75:32:8e:9f:74:d7:64:19:ce:61:12:85:77:99:
04:e2:f8:6d:be:bd:d5:c4:57:c4:76:a1:c9:da:c9:
f2:5f:04:e0:0f:d2:cd:c5:cb:b4:d8:47:a2:b2:a8:
6e:e4:40:61:a9:40:a4:94:2f:d9:0a:c7:ad:22:57:
64:61:36:7e:a0:1a:6c:ef:55:1f:7c:84:17:0d:53:
28:3e:9b:e8:09:ca:6d:2f:e2:96:0a:7a:37:ce:01:
3f:25:7f:26:c7:10:ff:75:51:ed:cd:bd:52:91:5d:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:A9:2E:9F:0A:82:54:1C:C9:EF:88:46:33:89:44:99:46:E4:98
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/laipLp8KglQcye-IRjOJRJlG5Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6f:a1:7e:ff:f0:dd:0c:29:ae:d7:ad:37:0f:7f:21:5b:55:
f2:32:46:3f:4b:7e:43:f9:f4:65:cd:27:c8:7e:4c:3a:c6:07:
95:e2:9f:42:09:43:c7:d2:23:ba:25:55:57:09:64:13:c5:e6:
4f:18:58:db:fe:a5:78:34:26:40:64:f4:1d:f5:00:61:0c:cd:
77:f5:64:31:29:18:32:2d:da:dd:b0:c6:d5:e8:d7:85:6c:6c:
6a:b6:da:be:7a:2c:93:75:1d:ec:9e:f0:8b:31:69:82:6f:89:
1e:9b:7b:c4:05:f1:d0:f0:1b:3a:5b:c3:c8:2b:c8:24:f9:42:
84:8e:53:b1:00:6b:53:c4:cf:88:10:d0:eb:d3:39:07:db:61:
9e:9d:c9:cb:3e:dc:cc:78:77:bd:3d:2c:83:a8:c8:62:59:02:
db:2b:31:a4:e3:c2:6c:20:03:28:0c:7e:40:fd:d5:9d:68:9e:
66:34:76:46:c2:02:6f:13:82:6d:b7:ea:fe:5a:c3:af:b9:38:
a3:1c:ef:81:09:55:88:37:44:77:8a:1b:ff:25:26:9f:a2:48:
af:86:0f:b5:59:5a:2a:06:49:21:9b:3b:f3:12:ad:07:3e:e6:
6a:00:35:c5:97:b6:cd:c0:c4:60:32:80:de:9b:ac:23:bc:31:
d4:af:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:26 2025 by rpki-client