Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/LjJr0jG8IWn5F-KGohH0IZy5axI.roa
File: LjJr0jG8IWn5F-KGohH0IZy5axI.roa (raw, json)
Hash identifier: E5GNTNFsgCt4UPJBX/ykIm4fhBcRks3UlIw1czWo3AU=
Subject key identifier: 2E:32:6B:D2:31:BC:21:69:F9:17:E2:86:A2:11:F4:21:9C:B9:6B:12
Certificate issuer: /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial: 0184D478F95913F034AA76809B653E822270
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/LjJr0jG8IWn5F-KGohH0IZy5axI.roa
Signing time: Fri 02 Dec 2022 20:13:28 +0000
ROA not before: Fri 02 Dec 2022 20:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.241.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:78:f9:59:13:f0:34:aa:76:80:9b:65:3e:82:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Validity
Not Before: Dec 2 20:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e326bd231bc2169f917e286a211f4219cb96b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:a0:07:5d:d8:b5:0c:5c:9d:0f:70:b6:07:
4c:2d:9f:cd:b1:39:66:10:e9:78:68:58:8c:10:94:
de:36:5f:16:6a:40:73:cf:2d:92:56:a4:9a:54:ac:
4c:2f:07:88:42:4a:7a:0c:1c:f5:4e:7c:ba:13:90:
ef:31:43:93:4d:41:9c:12:17:d6:45:9b:2e:9f:25:
bf:56:9f:1a:70:8b:cb:38:24:57:eb:d9:fe:ad:53:
85:a8:b7:a2:a8:a3:57:9a:d1:cc:df:68:c6:69:a4:
75:e0:bb:87:0c:87:ab:64:b5:96:2a:49:c6:4d:da:
9c:20:8c:bf:03:59:dd:39:fa:5e:bf:a9:9a:c0:67:
aa:38:a6:1d:11:4f:28:3e:4d:fc:f5:61:c5:c4:5b:
b8:5a:0f:cc:78:cc:05:a2:d0:6f:eb:df:47:5a:e0:
a4:0b:75:c3:b5:c1:b5:59:88:41:b0:30:7d:78:b7:
05:6e:be:b5:fb:c5:62:c9:53:ce:ee:e5:31:4a:a8:
48:36:65:8f:d8:a2:97:65:c3:a2:7d:6a:ee:a5:b5:
2e:69:f0:38:3c:7b:31:e6:cb:e0:14:e5:bc:ae:6b:
67:8c:d8:20:e4:40:9a:40:ce:d5:cf:23:97:66:3e:
56:42:14:bb:01:1d:34:04:79:6f:e6:f1:dd:2e:a4:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:6B:D2:31:BC:21:69:F9:17:E2:86:A2:11:F4:21:9C:B9:6B:12
X509v3 Authority Key Identifier:
keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/LjJr0jG8IWn5F-KGohH0IZy5axI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.164.0/24
Signature Algorithm: sha256WithRSAEncryption
04:50:6d:0d:a8:f0:4f:b0:0a:b1:1a:d8:1f:d2:03:42:03:03:
fe:50:44:4f:46:b7:48:51:ce:3a:0d:a6:4a:95:94:83:0c:30:
e5:2c:28:3f:a8:86:b0:63:56:bc:5c:87:bd:11:2c:dc:8f:6b:
a1:49:74:2e:0b:a3:fe:42:ef:c2:4b:3f:98:dd:c2:f3:85:92:
96:86:1f:8e:95:96:ef:8a:f2:73:93:2a:85:7f:dd:ae:5a:1f:
79:15:fd:33:56:f8:4c:2f:06:e6:a2:90:6a:58:6f:0e:86:30:
39:24:be:11:46:e5:0f:7d:72:cf:e1:a0:5a:a8:ab:6e:39:68:
af:82:bb:91:00:3f:02:58:51:46:f2:ef:d2:3d:5f:d2:c9:17:
96:18:64:69:32:4b:fb:c7:ed:83:37:45:d3:fe:b4:49:26:18:
9a:d3:e5:1b:06:81:71:75:04:fd:f6:6f:bc:2f:af:9e:ee:61:
20:c9:6e:fb:cb:ef:7f:64:0c:a5:a6:86:0e:1d:cd:16:d4:dc:
1d:77:bb:99:91:a0:dc:2c:a1:3c:ba:37:ba:46:10:e8:4e:8c:
b8:49:cd:69:87:3b:bf:f9:35:2d:41:00:c7:f9:0d:a6:a8:ab:
d3:76:74:d3:40:63:db:8e:66:70:ad:e6:c9:20:a6:01:61:98:
b2:8a:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:44 2025 by rpki-client