Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LgyeVhb60AJRIPJ13YatbxO4AsM.roa
File: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (raw, json)
Hash identifier: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=
Subject key identifier: 2E:0C:9E:56:16:FA:D0:02:51:20:F2:75:DD:86:AD:6F:13:B8:02:C3
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019426D915C8616C002C55AA9E7DE0B55E5E
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LgyeVhb60AJRIPJ13YatbxO4AsM.roa
Signing time: Thu 02 Jan 2025 11:49:08 +0000
ROA not before: Thu 02 Jan 2025 11:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 91.200.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:15:c8:61:6c:00:2c:55:aa:9e:7d:e0:b5:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e0c9e5616fad0025120f275dd86ad6f13b802c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:d4:a0:57:26:20:9d:70:c9:12:41:87:0c:
79:e5:ba:c8:67:30:44:6b:91:32:cd:2e:ff:a7:97:
70:1a:28:50:65:f2:7a:0c:bc:2f:d3:15:64:1d:7b:
1a:13:de:64:7c:34:32:4c:99:cb:1d:0a:35:f0:bf:
23:4c:54:b3:27:32:e1:0f:fc:54:88:4a:60:a9:b2:
f3:7c:f3:e0:5a:d5:7f:46:aa:b3:ef:a9:eb:3c:db:
a3:4d:f9:8f:63:55:bf:7e:49:8a:82:1f:f0:52:2c:
e8:33:80:33:c0:e2:d4:69:ee:ca:83:c9:32:6a:cd:
ec:8d:3f:f3:94:c3:3c:5f:ee:e2:c3:fe:60:96:a0:
31:28:4c:29:9f:70:a2:5b:58:a4:9d:1f:f3:45:3d:
b4:a5:c0:b4:8f:9d:72:b2:14:ca:a3:17:05:78:1e:
da:78:57:3c:ea:ac:6b:bb:16:aa:bb:08:a8:98:3b:
cb:3d:d5:80:20:93:0e:d5:3d:76:f0:a6:6b:e4:92:
18:de:75:77:10:c2:b3:8e:0e:9e:59:ab:b3:5a:f9:
86:1c:66:4a:13:1e:e6:dc:f8:34:e0:80:e4:3f:f7:
13:83:96:67:4b:12:54:46:4a:b2:c3:5f:77:05:51:
f0:70:e1:0f:a2:00:9d:23:40:21:bb:b9:fe:b4:6c:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:9E:56:16:FA:D0:02:51:20:F2:75:DD:86:AD:6F:13:B8:02:C3
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LgyeVhb60AJRIPJ13YatbxO4AsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.75.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9e:44:19:c9:72:69:0a:a8:28:da:d0:fe:06:0b:ea:a1:32:
53:da:b9:63:cd:49:0e:97:8f:a9:ea:cb:2b:8c:c7:88:20:b5:
73:08:54:2f:e8:99:3a:02:50:82:d6:8f:ea:d9:74:91:12:d1:
f5:42:c0:1c:e6:74:65:71:61:13:0c:69:62:70:33:ae:15:44:
87:9d:b2:fe:0e:2d:f3:9e:be:25:ce:44:46:5a:f4:05:3d:5f:
56:59:4f:6e:e0:53:d6:fa:d5:5a:72:b5:dd:52:f1:bc:74:74:
e3:3b:63:cd:2b:e9:c1:d0:a3:ec:4d:97:e6:46:2f:9d:42:b5:
5f:71:f9:06:47:49:00:9f:d9:22:dd:3b:1e:34:94:f0:d7:0c:
6e:c9:64:85:2d:1d:0c:56:c9:95:58:67:36:b3:62:d8:c2:39:
c1:d5:b5:24:e2:d3:43:50:64:55:2a:af:28:a1:d6:4e:87:ee:
20:4e:fb:12:23:0c:6b:b5:b9:6e:6d:fb:43:40:b7:e5:2f:7d:
d2:26:f7:13:02:75:b4:a1:57:16:25:5b:a4:df:66:19:0f:fa:
5b:27:d2:a9:c9:db:00:dc:0a:6d:58:03:ac:be:07:fa:2e:9f:
00:84:a7:54:7e:a7:eb:66:d6:1c:b9:84:03:17:03:df:1f:e0:
9f:2a:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:06:22 2025 by rpki-client