Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/LFFuuAaPymw7mrLkEc1dJw_pneU.roa
File: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (raw, json)
Hash identifier: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=
Subject key identifier: 2C:51:6E:B8:06:8F:CA:6C:3B:9A:B2:E4:11:CD:5D:27:0F:E9:9D:E5
Certificate issuer: /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial: 019423D7B774527B52280CD7C7DEEE90F9F9
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/LFFuuAaPymw7mrLkEc1dJw_pneU.roa
Signing time: Wed 01 Jan 2025 21:48:47 +0000
ROA not before: Wed 01 Jan 2025 21:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198670
IP address blocks: 91.237.252.0/23 maxlen: 23
91.237.252.0/24 maxlen: 24
91.237.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b7:74:52:7b:52:28:0c:d7:c7:de:ee:90:f9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
Validity
Not Before: Jan 1 21:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c516eb8068fca6c3b9ab2e411cd5d270fe99de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:d5:4f:57:e1:2b:9a:9e:48:41:dd:e5:63:
e6:1d:ec:3a:aa:64:b6:69:ab:a8:9f:c1:c0:a4:f4:
48:12:89:9b:15:02:73:01:b5:75:9b:39:ed:b6:1a:
5a:52:75:12:22:3c:c6:ce:cc:f8:37:ce:b9:ec:a2:
e3:74:ab:ae:b6:09:0b:20:4e:cd:9f:0d:3d:36:74:
b7:23:51:60:d3:fa:e5:5f:18:88:b8:ac:8d:ef:99:
fb:53:56:de:28:fa:43:8e:e5:a8:a9:eb:a4:a0:af:
34:6d:25:19:93:3a:4c:6c:28:71:22:92:ff:99:4f:
e4:86:a5:ce:30:19:49:6a:b7:bd:89:5d:66:7e:87:
35:1f:6a:74:7a:73:cb:1b:ff:34:26:33:17:62:59:
04:f6:0c:ad:99:49:5e:23:04:da:4f:47:99:f5:3b:
f9:9e:84:84:f2:0c:76:d2:2e:ac:2e:f6:2f:39:5e:
4a:0a:36:34:b0:69:1a:a0:dc:2e:5a:74:cf:b3:0f:
12:bd:d9:87:08:6f:ef:a9:8e:48:a7:35:cb:8b:54:
13:b6:0e:00:31:98:4c:ba:1d:0c:09:c0:ed:78:1f:
49:4e:f3:72:99:6f:88:fd:20:76:f1:c6:35:05:50:
0a:1f:c9:82:8a:04:e9:28:19:8e:03:a4:11:52:82:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:6E:B8:06:8F:CA:6C:3B:9A:B2:E4:11:CD:5D:27:0F:E9:9D:E5
X509v3 Authority Key Identifier:
keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/LFFuuAaPymw7mrLkEc1dJw_pneU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.252.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:ee:34:b0:7d:b6:f2:bb:94:89:3e:2e:96:dc:0a:3f:35:33:
83:74:24:a0:0f:31:28:83:ce:69:99:0e:b1:40:d6:37:8a:ee:
62:09:6e:a8:4d:b4:ca:f6:41:e7:89:1a:c7:d6:86:7a:29:9f:
3e:37:fa:50:5f:17:55:58:f9:a2:02:d5:20:01:52:46:8b:d6:
f3:7a:14:6e:a5:ac:d6:79:ac:50:04:4b:e6:80:e1:02:9c:b1:
99:ea:24:18:91:a0:7c:a4:e5:08:3e:bb:3c:39:b9:8c:bf:20:
d7:77:b0:bd:32:71:9b:ed:e4:10:ff:33:69:8d:60:e8:4d:52:
c7:8f:05:60:ed:32:47:7f:fe:f1:3a:c0:15:de:e5:e2:98:55:
1e:21:59:3f:9e:21:52:ef:a6:6e:f5:c5:9b:aa:b1:3d:98:56:
9a:74:18:ce:2d:c3:fa:03:7d:21:09:1b:ff:aa:8a:8f:5a:1c:
e9:cf:da:56:65:52:04:88:4f:d6:05:a5:70:d8:37:51:13:d6:
6d:e0:cb:68:2f:0c:48:da:90:df:d7:6c:56:04:e0:e0:91:91:
cd:56:42:c8:80:5e:6f:e0:1d:65:bc:1e:db:dd:81:9d:b4:3e:
f9:f4:0e:1d:82:3b:c2:2b:8d:d8:b5:ca:f5:1e:c2:a9:5f:15:
f3:83:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:21 2025 by rpki-client