Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lmTp5fWEoUQ2J57Qxwmu6MO5aDk.roa
File: lmTp5fWEoUQ2J57Qxwmu6MO5aDk.roa (raw, json)
Hash identifier: tnneRwJxt/HNPvVUNM+cRk2kS+WE2Tz0LPasdksd74I=
Subject key identifier: 96:64:E9:E5:F5:84:A1:44:36:27:9E:D0:C7:09:AE:E8:C3:B9:68:39
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0186322284C144906A4962A3258BF1213BF7
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lmTp5fWEoUQ2J57Qxwmu6MO5aDk.roa
Signing time: Wed 08 Feb 2023 17:46:08 +0000
ROA not before: Wed 08 Feb 2023 17:46:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 91.250.244.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:22:84:c1:44:90:6a:49:62:a3:25:8b:f1:21:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 8 17:46:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9664e9e5f584a14436279ed0c709aee8c3b96839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:b8:f4:34:87:0a:19:fb:4b:83:d0:d9:f6:
59:c6:c2:24:61:83:53:9d:b7:10:d7:12:a3:84:cb:
18:70:0b:2e:b0:f2:56:98:89:47:dd:c3:42:8c:66:
83:21:40:30:8e:c9:8b:a7:f1:55:3b:55:1e:96:bd:
c6:37:49:09:00:f4:5a:48:00:61:e6:9d:58:0f:cc:
a0:66:4e:fb:1a:4d:8e:32:af:1e:11:08:22:6d:3e:
cd:7f:b8:43:94:9b:c6:d1:4d:84:56:f8:1e:e2:6c:
84:00:5e:61:ea:b4:07:78:09:f0:2f:b9:8e:03:32:
19:b5:72:b9:83:5c:b4:d3:a2:83:fd:09:60:0e:9f:
79:34:2e:d5:97:b8:31:69:90:55:18:a0:d7:07:1c:
f3:89:56:28:21:0f:83:14:46:14:a4:bb:74:68:ef:
f6:17:fd:ce:ff:e7:4d:c0:18:c9:42:85:f9:05:38:
e9:80:54:2f:e3:96:6e:ce:33:7f:b1:a2:49:4b:b3:
b0:ba:a7:1e:f8:73:92:40:38:eb:f3:f0:3b:58:6d:
c9:af:c8:05:c3:52:88:10:4c:96:08:51:9f:2d:dc:
ed:53:89:20:70:47:27:3e:60:cc:89:a4:a9:fc:30:
76:9f:47:db:99:e9:5c:84:0f:a0:cd:8d:f1:04:e0:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:E9:E5:F5:84:A1:44:36:27:9E:D0:C7:09:AE:E8:C3:B9:68:39
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lmTp5fWEoUQ2J57Qxwmu6MO5aDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.128.0/24
91.250.244.0/24
Signature Algorithm: sha256WithRSAEncryption
80:34:47:c4:2e:6e:64:f1:6b:41:17:f6:80:9c:27:74:4c:ef:
e1:9a:5f:1a:14:0e:03:f2:4a:1b:b7:60:a2:37:15:b7:73:b2:
45:94:99:71:30:84:f2:8c:a2:5b:dc:c5:d7:25:60:bf:bb:94:
b0:e8:2f:a5:f2:87:a3:98:a9:30:b2:0c:82:68:ea:ef:29:b5:
5a:6b:ee:19:57:b2:c3:d5:aa:ed:c1:63:a9:b1:55:1f:71:99:
8a:f4:0c:5c:c0:0b:3a:db:b8:b7:26:58:77:84:f8:f0:e3:c9:
0c:13:bf:60:f4:9e:cd:9d:8a:76:25:cf:5c:a2:06:df:00:3d:
87:d1:73:fc:01:f8:ba:91:19:79:3c:cb:f3:9a:95:8f:ab:60:
b4:d2:f7:d6:26:2b:3c:c1:ea:78:ca:3b:df:7d:b4:96:ce:59:
7c:53:37:80:f5:f0:6d:93:f9:d1:73:f8:8b:9f:86:ab:78:af:
a2:c7:c5:3f:db:f1:0a:96:9f:59:6a:fd:68:f5:9c:8d:88:b2:
86:2f:c0:55:13:2f:9f:87:30:45:ad:0a:65:f4:eb:e5:7a:e6:
90:cd:36:13:7d:ac:db:c8:46:1f:2e:c1:e5:be:70:27:74:f5:
e8:81:45:40:6b:1b:9e:75:63:21:cc:a5:20:3f:ff:9d:e2:c3:
f3:92:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:37 2025 by rpki-client