Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/LPCDu87vvEM5O8HyjWDakdHtl2E.roa
File: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (raw, json)
Hash identifier: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=
Subject key identifier: 2C:F0:83:BB:CE:EF:BC:43:39:3B:C1:F2:8D:60:DA:91:D1:ED:97:61
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 0194274861F2578D307D1ACE177EC74A93B5
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/LPCDu87vvEM5O8HyjWDakdHtl2E.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51195
IP address blocks: 91.216.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:61:f2:57:8d:30:7d:1a:ce:17:7e:c7:4a:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf083bbceefbc43393bc1f28d60da91d1ed9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:0f:8c:71:22:f3:12:c6:fa:7a:55:bc:2a:
c6:a0:18:af:6d:33:15:a0:46:f1:5a:a6:d7:b1:d7:
e5:1e:b1:39:8e:89:94:0c:c5:67:40:6d:7c:03:56:
e4:83:92:eb:32:7b:2d:f8:66:50:6d:f6:b1:4c:d6:
92:ef:32:a9:57:b0:20:8b:1f:e0:ca:e6:59:28:ba:
86:d1:99:5c:28:ba:4c:1d:e2:2c:1d:e5:c5:3e:10:
c0:4f:5f:81:4b:e4:37:ce:63:3d:b4:c6:b5:84:e2:
16:5f:98:63:8e:c4:95:6d:6e:1d:4e:6a:5f:8c:03:
ee:1c:c6:02:bb:fd:be:9f:ca:51:0f:75:ea:08:a0:
f3:52:4c:ec:e9:b5:35:a7:43:15:93:67:3c:fe:10:
2e:a5:7c:1d:d9:6c:fa:89:1d:c9:13:1d:c1:79:41:
2a:30:df:2e:f0:9a:da:54:63:70:b1:0e:f1:c1:da:
23:f5:6e:cc:e4:f1:ad:ab:6a:b3:15:d5:9e:97:ff:
3f:96:b8:45:6d:e5:b3:15:16:81:34:a3:54:90:58:
f2:6b:05:ca:a3:f1:25:08:56:9f:4b:e3:42:f3:1c:
7a:0a:a3:24:4b:97:5d:20:04:9e:f6:dd:d0:ae:d7:
22:65:be:0d:42:29:59:01:2e:c3:92:f2:1f:a9:71:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:83:BB:CE:EF:BC:43:39:3B:C1:F2:8D:60:DA:91:D1:ED:97:61
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/LPCDu87vvEM5O8HyjWDakdHtl2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c6:b9:13:31:e3:97:0e:5b:70:02:f1:91:ab:76:b5:3e:67:
6b:7f:a5:15:7c:c6:bb:2a:eb:21:e9:38:b6:09:b9:04:74:aa:
17:ed:65:21:52:cd:01:1f:ed:31:b5:42:b5:95:87:1c:5b:52:
d9:dd:57:bd:a7:7b:a4:9e:c0:33:6e:b9:47:81:d1:0c:ce:f1:
7d:75:b9:11:d7:06:b5:fd:7f:3d:4b:62:ae:ff:99:68:57:28:
bb:4a:fa:21:8f:79:07:c2:45:66:df:f0:b3:82:54:38:0b:e0:
f6:1f:63:e1:78:7c:f8:b2:12:1a:f3:a0:49:4e:4a:8f:05:32:
f4:0e:35:1e:86:c0:fd:5f:bf:ea:ae:61:42:d7:c0:0a:12:81:
9e:ea:d3:6d:cc:48:52:8b:4d:8f:0a:81:b5:10:2f:4f:54:27:
ba:f3:55:c6:b5:2b:6c:51:26:2e:2a:dd:11:86:8a:11:45:c2:
ab:e3:be:29:a7:29:13:15:e8:b9:a0:d6:a7:83:f5:3b:fa:a8:
98:a2:a7:ee:55:fe:86:48:ee:76:59:f2:e4:34:61:75:13:23:
3a:08:89:a8:b3:fa:51:39:7f:3e:ac:ba:b4:8c:f1:f1:59:67:
86:81:95:81:27:29:0f:64:2b:12:bb:db:e4:4b:38:b3:a8:7b:
69:a1:61:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGHyV40wfRrOF37HSpO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw
OWFkZTAwHhcNMjUwMTAyMTM1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2YwODNiYmNlZWZiYzQzMzkzYmMxZjI4ZDYwZGE5MWQxZWQ5NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWQPjHEi8xLG+npVvCrGoBivbTMV
oEbxWqbXsdflHrE5jomUDMVnQG18A1bkg5LrMnst+GZQbfaxTNaS7zKpV7Agix/g
yuZZKLqG0ZlcKLpMHeIsHeXFPhDAT1+BS+Q3zmM9tMa1hOIWX5hjjsSVbW4dTmpf
jAPuHMYCu/2+n8pRD3XqCKDzUkzs6bU1p0MVk2c8/hAupXwd2Wz6iR3JEx3BeUEq
MN8u8JraVGNwsQ7xwdoj9W7M5PGtq2qzFdWel/8/lrhFbeWzFRaBNKNUkFjyawXK
o/ElCFafS+NC8xx6CqMkS5ddIASe9t3QrtciZb4NQilZAS7DkvIfqXFSnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzwg7vO77xDOTvB8o1g2pHR7ZdhMB8GA1UdIwQY
MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt
NjY1MTdhM2FjMTlkLzEvTFBDRHU4N3Z2RU01TzhIeWpXRGFrZEh0bDJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk
LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jHMA0G
CSqGSIb3DQEBCwUAA4IBAQB7xrkTMeOXDltwAvGRq3a1Pmdrf6UVfMa7Kush6Ti2
CbkEdKoX7WUhUs0BH+0xtUK1lYccW1LZ3Ve9p3uknsAzbrlHgdEMzvF9dbkR1wa1
/X89S2Ku/5loVyi7Svohj3kHwkVm3/CzglQ4C+D2H2PheHz4shIa86BJTkqPBTL0
DjUehsD9X7/qrmFC18AKEoGe6tNtzEhSi02PCoG1EC9PVCe681XGtStsUSYuKt0R
hooRRcKr474ppykTFei5oNang/U7+qiYoqfuVf6GSO52WfLkNGF1EyM6CImos/pR
OX8+rLq0jPHxWWeGgZWBJykPZCsSu9vkSzizqHtpoWH7
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:05 2025 by rpki-client