Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/LjvscEK241_TnXIZYmD9gfa2eq0.roa
File: LjvscEK241_TnXIZYmD9gfa2eq0.roa (raw, json)
Hash identifier: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=
Subject key identifier: 2E:3B:EC:70:42:B6:E3:5F:D3:9D:72:19:62:60:FD:81:F6:B6:7A:AD
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019422FAF5090E6CB5BD5BE56E3CFF65F896
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/LjvscEK241_TnXIZYmD9gfa2eq0.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 91.232.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f5:09:0e:6c:b5:bd:5b:e5:6e:3c:ff:65:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3bec7042b6e35fd39d72196260fd81f6b67aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:ae:ea:71:72:7d:df:01:6e:86:e6:fd:0d:
7c:3c:84:d9:b6:80:85:58:2f:89:bd:ea:97:ab:ad:
31:24:7f:a6:92:e8:e0:a6:98:a5:b6:ce:00:f7:2d:
31:ea:9d:72:45:44:cc:f6:27:7b:67:1c:d1:15:f5:
dd:92:5d:24:d5:69:3d:09:48:a9:83:2c:49:c7:2e:
17:fe:cb:bc:a9:9a:0a:12:fd:89:47:33:b0:09:ec:
43:bf:00:06:2c:d3:ee:ff:7e:2c:10:f5:e5:44:82:
e0:9b:b4:62:c9:e1:2f:75:3d:3e:a6:f1:91:06:21:
c4:99:dd:4a:00:e0:6c:e1:6b:5d:7d:2e:16:ec:3c:
80:a0:de:76:79:54:c4:78:96:8e:01:6e:d9:f1:43:
ce:44:eb:6c:d3:ee:be:cc:98:26:23:07:8e:eb:aa:
cb:1a:be:4c:95:25:c1:9b:fe:e2:02:5b:c1:2d:3e:
87:7a:d7:0e:3d:25:19:18:9b:2b:0d:1d:bc:c5:e6:
eb:7c:06:d8:73:89:46:e2:2a:e7:35:52:f6:41:31:
70:e0:ed:d7:91:17:85:4f:01:d6:7c:d8:87:62:0a:
3b:83:bf:7d:5d:67:ae:b2:52:a9:96:b3:02:6c:2b:
de:b8:e9:2f:0d:00:f7:55:84:67:0e:8a:dc:df:89:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3B:EC:70:42:B6:E3:5F:D3:9D:72:19:62:60:FD:81:F6:B6:7A:AD
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/LjvscEK241_TnXIZYmD9gfa2eq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.163.0/24
Signature Algorithm: sha256WithRSAEncryption
69:41:25:0d:19:d4:e4:36:87:82:e3:02:25:a6:8f:09:f5:bb:
89:63:54:03:f1:78:15:6e:1d:4d:9e:94:e3:36:e2:36:39:da:
04:2f:3c:a8:1c:d4:a7:c2:cc:4a:20:f5:77:90:46:fd:94:b9:
8b:4a:ff:e7:8c:f3:92:68:14:ff:0f:50:00:4d:8b:14:71:dd:
45:51:8c:e9:5c:c8:3f:9b:8d:25:17:81:51:01:4c:78:76:54:
9c:06:76:fc:95:fa:96:53:1a:e0:95:9b:70:00:d3:4c:a7:6e:
04:54:1b:0d:f1:e2:39:0b:45:4f:04:bf:35:e8:5a:fc:86:e1:
9a:93:2e:76:51:3b:31:40:0e:35:ec:b2:df:02:12:54:99:7f:
d6:c4:71:7e:56:a3:c5:18:44:5b:b3:c5:dc:5a:9c:5d:3d:54:
cf:4b:43:bf:90:a7:e8:ab:3b:c7:59:83:27:77:0e:ef:1b:0c:
16:49:16:0e:5b:ac:67:8b:56:8d:b0:73:58:0e:dc:f3:1b:65:
90:f7:10:ea:3e:71:cf:3a:b7:72:db:c9:d3:eb:8a:8f:25:63:
fb:47:0b:7c:e8:46:9c:ca:9c:9f:38:d5:06:be:54:da:4a:5f:
5a:0e:78:aa:1c:6d:42:69:02:a0:66:80:4a:a1:92:12:c4:9b:
64:d0:8a:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+vUJDmy1vVvlbjz/ZfiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2
MGNkMGUwHhcNMjUwMTAxMTc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTNiZWM3MDQyYjZlMzVmZDM5ZDcyMTk2MjYwZmQ4MWY2YjY3YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAqu6nFyfd8Bbobm/Q18PITZtoCF
WC+JveqXq60xJH+mkujgppilts4A9y0x6p1yRUTM9id7ZxzRFfXdkl0k1Wk9CUip
gyxJxy4X/su8qZoKEv2JRzOwCexDvwAGLNPu/34sEPXlRILgm7RiyeEvdT0+pvGR
BiHEmd1KAOBs4WtdfS4W7DyAoN52eVTEeJaOAW7Z8UPOROts0+6+zJgmIweO66rL
Gr5MlSXBm/7iAlvBLT6HetcOPSUZGJsrDR28xebrfAbYc4lG4irnNVL2QTFw4O3X
kReFTwHWfNiHYgo7g799XWeuslKplrMCbCveuOkvDQD3VYRnDorc34n1HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC477HBCtuNf051yGWJg/YH2tnqtMB8GA1UdIwQY
MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt
YzIwMmY3MTdkNDQ3LzEvTGp2c2NFSzI0MV9UblhJWlltRDlnZmEyZXEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3
LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+ijMA0G
CSqGSIb3DQEBCwUAA4IBAQBpQSUNGdTkNoeC4wIlpo8J9buJY1QD8XgVbh1NnpTj
NuI2OdoELzyoHNSnwsxKIPV3kEb9lLmLSv/njPOSaBT/D1AATYsUcd1FUYzpXMg/
m40lF4FRAUx4dlScBnb8lfqWUxrglZtwANNMp24EVBsN8eI5C0VPBL816Fr8huGa
ky52UTsxQA417LLfAhJUmX/WxHF+VqPFGERbs8XcWpxdPVTPS0O/kKfoqzvHWYMn
dw7vGwwWSRYOW6xni1aNsHNYDtzzG2WQ9xDqPnHPOrdy28nT64qPJWP7Rwt86Eac
ypyfONUGvlTaSl9aDniqHG1CaQKgZoBKoZISxJtk0IpS
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:55 2025 by rpki-client