Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/lxoBfTFCmpyw0-BNBJ9O7Ti1Onw.roa
File: lxoBfTFCmpyw0-BNBJ9O7Ti1Onw.roa (raw, json)
Hash identifier: bNBJfBOuE49i4xIjKq7CyAWuKiehBG6O4j+0mkZh3lA=
Subject key identifier: 97:1A:01:7D:31:42:9A:9C:B0:D3:E0:4D:04:9F:4E:ED:38:B5:3A:7C
Certificate issuer: /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial: 0187336C1643F7F12A73546F2C450871B8F2
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/lxoBfTFCmpyw0-BNBJ9O7Ti1Onw.roa
Signing time: Thu 30 Mar 2023 16:48:54 +0000
ROA not before: Thu 30 Mar 2023 16:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.91.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:6c:16:43:f7:f1:2a:73:54:6f:2c:45:08:71:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
Validity
Not Before: Mar 30 16:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=971a017d31429a9cb0d3e04d049f4eed38b53a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:25:e4:9d:6e:2b:03:29:ee:b4:d9:c3:4f:
23:55:8b:08:4d:f3:41:9a:89:b5:70:84:84:e0:c3:
d9:9c:ab:ec:ce:e6:31:90:2b:c3:1b:80:df:3d:3c:
77:8b:84:1c:7f:9d:ad:09:e0:78:bb:b8:aa:56:10:
b9:6e:07:7d:fb:9a:75:ab:ff:58:6a:f8:9e:ce:8b:
e7:f9:90:26:83:a5:9e:5a:b1:88:7a:c8:5e:c3:e3:
eb:fd:75:3e:8c:ff:f0:f6:e3:22:7e:f6:68:51:f8:
81:3f:0c:f7:d6:fc:6a:29:82:e8:63:9d:01:da:0a:
e9:51:23:8b:5d:4c:ff:d9:bd:f3:bc:93:24:24:b2:
99:54:7b:7d:20:52:dd:a8:c8:4c:d8:80:a8:8e:86:
a0:99:b2:83:bb:7d:b6:2d:01:d4:c6:6f:3c:9b:10:
63:9c:69:1d:4b:b5:06:0f:5c:b6:3f:6a:c0:79:54:
0c:f1:ea:61:1d:a8:19:33:11:0c:a3:55:06:83:96:
4e:7f:d6:96:43:90:3d:5b:03:34:9b:0e:e7:8f:66:
f0:ae:75:8b:87:9c:96:15:bb:2b:e4:f3:aa:2e:41:
82:d7:be:cf:ec:f1:58:86:1a:37:61:44:f7:4c:bb:
75:0d:da:aa:12:60:e6:03:a5:46:2d:2a:33:e2:77:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:01:7D:31:42:9A:9C:B0:D3:E0:4D:04:9F:4E:ED:38:B5:3A:7C
X509v3 Authority Key Identifier:
keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/lxoBfTFCmpyw0-BNBJ9O7Ti1Onw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/24
Signature Algorithm: sha256WithRSAEncryption
23:73:3c:df:62:5b:5c:54:76:1d:85:72:ab:2d:5c:08:f2:02:
57:ef:09:53:ae:9d:12:07:5a:e3:7a:05:7d:b6:a0:e0:37:84:
cc:88:03:e7:c1:2e:27:cf:85:3b:3c:80:87:9f:d8:3b:d2:be:
f1:61:6c:b9:a3:84:e6:a5:8c:9c:e1:51:25:f3:ec:2e:ea:c5:
c1:3a:85:b1:5b:1b:06:30:db:8f:c0:8e:d7:4e:e5:f8:42:c9:
1f:b5:82:fa:7c:0a:42:28:d8:c0:c0:da:e0:e2:cc:3d:d4:c5:
d4:17:0f:b0:42:21:b7:4f:d8:78:66:b4:d0:1c:84:a5:41:a9:
2d:0e:0a:ab:93:ef:36:1c:d1:c7:11:a5:d0:68:2d:41:82:e9:
06:97:ec:b5:87:15:66:ae:a8:dc:33:4f:f3:95:14:5c:5d:68:
e8:7e:02:ca:48:24:c3:f8:a5:56:43:09:a8:05:5d:09:8b:a6:
c1:73:d4:a8:cb:f9:9e:22:86:53:53:2a:b4:9f:bd:65:21:65:
0a:13:d3:13:6b:39:c1:64:b9:09:c0:72:81:dc:c4:a2:28:b0:
59:21:8c:5d:5b:4b:f0:60:de:54:2f:e7:78:df:67:f0:8e:25:
6a:db:1c:e6:93:cc:17:b4:c3:99:a2:7e:57:45:b4:b5:94:89:
27:b8:bf:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYczbBZD9/Eqc1RvLEUIcbjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGEwNjI1OTUzNGRjNDUyMDg5ZDI5MWFkMjc3ZWVhYzE2
Y2Q0MmEwHhcNMjMwMzMwMTY0ODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzFhMDE3ZDMxNDI5YTljYjBkM2UwNGQwNDlmNGVlZDM4YjUzYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw8l5J1uKwMp7rTZw08jVYsITfNB
mom1cISE4MPZnKvszuYxkCvDG4DfPTx3i4Qcf52tCeB4u7iqVhC5bgd9+5p1q/9Y
aviezovn+ZAmg6WeWrGIeshew+Pr/XU+jP/w9uMifvZoUfiBPwz31vxqKYLoY50B
2grpUSOLXUz/2b3zvJMkJLKZVHt9IFLdqMhM2ICojoagmbKDu322LQHUxm88mxBj
nGkdS7UGD1y2P2rAeVQM8ephHagZMxEMo1UGg5ZOf9aWQ5A9WwM0mw7nj2bwrnWL
h5yWFbsr5POqLkGC177P7PFYhho3YUT3TLt1DdqqEmDmA6VGLSoz4nfthQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcaAX0xQpqcsNPgTQSfTu04tTp8MB8GA1UdIwQY
MBaAFALaBiWVNNxFIInSka0nfurBbNQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRvR0paVTAzRVVnaWRLUnJTZC02c0ZzMUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zZjVjMjEtN2IzYi00MGY3LTg4NTEt
Y2QzMmYwZDQwODZiLzEvbHhvQmZURkNtcHl3MC1CTkJKOU83VGkxT253LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zZjVjMjEtN2IzYi00MGY3LTg4NTEtY2QzMmYwZDQwODZi
LzEvQXRvR0paVTAzRVVnaWRLUnJTZC02c0ZzMUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVvgMA0G
CSqGSIb3DQEBCwUAA4IBAQAjczzfYltcVHYdhXKrLVwI8gJX7wlTrp0SB1rjegV9
tqDgN4TMiAPnwS4nz4U7PICHn9g70r7xYWy5o4TmpYyc4VEl8+wu6sXBOoWxWxsG
MNuPwI7XTuX4QskftYL6fApCKNjAwNrg4sw91MXUFw+wQiG3T9h4ZrTQHISlQakt
Dgqrk+82HNHHEaXQaC1BgukGl+y1hxVmrqjcM0/zlRRcXWjofgLKSCTD+KVWQwmo
BV0Ji6bBc9Soy/meIoZTUyq0n71lIWUKE9MTaznBZLkJwHKB3MSiKLBZIYxdW0vw
YN5UL+d432fwjiVq2xzmk8wXtMOZon5XRbS1lIknuL/z
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:18:28 2025 by rpki-client