Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/LmHDwcZ0P773I2DpMatr3rQ-X-8.roa
File: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (raw, json)
Hash identifier: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=
Subject key identifier: 2E:61:C3:C1:C6:74:3F:BE:F7:23:60:E9:31:AB:6B:DE:B4:3E:5F:EF
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 01941FFA3EC45C55519B383986F05019E4F8
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/LmHDwcZ0P773I2DpMatr3rQ-X-8.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62378
IP address blocks: 91.217.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:c4:5c:55:51:9b:38:39:86:f0:50:19:e4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e61c3c1c6743fbef72360e931ab6bdeb43e5fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:03:6e:50:dc:dd:a4:e9:28:f6:8e:2d:35:
ed:dd:69:ea:e6:bc:c4:f0:ff:ce:f6:47:ad:af:bb:
33:e4:b5:e4:a1:0f:69:31:88:7b:b9:a5:9c:15:05:
c1:82:1c:35:5b:ce:52:32:cc:6e:7b:47:06:fa:5e:
a4:d3:84:0e:b8:ac:bc:97:c8:d3:9b:95:aa:b3:bc:
5c:16:da:d2:ec:fd:b1:73:fa:75:15:d3:f0:10:d2:
65:57:4e:5e:b4:74:af:7f:5e:cf:90:23:eb:6a:cb:
40:31:ae:59:a0:2c:4e:c0:a1:1a:d2:bb:c2:b7:8e:
78:8e:8f:4c:6c:fd:ec:1c:4e:d6:22:6d:7c:44:dd:
00:1d:d8:cc:a7:f8:bc:33:55:1c:0f:d0:16:5e:4b:
e9:ec:60:87:4a:e1:92:c9:a1:16:7b:65:4d:8e:81:
d2:c7:e2:75:60:69:91:5e:ab:8f:1a:d7:c5:84:30:
12:21:b7:18:03:be:cf:a3:c6:53:45:f5:73:1d:b0:
8f:19:1b:00:dd:44:3b:36:b4:93:7e:0d:52:90:12:
c2:e6:72:61:2b:d2:f1:8e:69:63:8b:40:90:be:14:
ea:1e:55:8b:25:c8:98:43:6b:b6:e3:bf:c4:1c:1c:
8b:24:e0:40:8c:56:c8:61:d5:da:50:4d:7b:4f:04:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:C3:C1:C6:74:3F:BE:F7:23:60:E9:31:AB:6B:DE:B4:3E:5F:EF
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/LmHDwcZ0P773I2DpMatr3rQ-X-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:75:0a:39:72:09:5b:df:61:14:c5:9b:60:d5:7e:63:94:da:
cc:3c:2b:32:0a:88:6a:48:c9:37:52:a6:d8:3c:64:ea:ed:a9:
2d:0a:f9:b3:32:21:28:f2:10:6e:65:c9:db:47:9a:1b:fb:9e:
6f:35:d6:d5:69:cb:9e:48:e8:c6:c1:19:1b:18:3d:59:f1:a3:
16:2c:26:cf:80:b8:77:99:73:a0:ad:01:5d:ad:85:a8:61:59:
b9:0b:f8:22:64:d8:e8:02:c4:5f:8f:4b:e7:5f:2b:e9:23:82:
9e:1a:2b:14:72:59:ac:4d:f7:8b:e8:ff:ba:9e:b5:96:29:2f:
92:49:44:29:20:52:ef:2c:d9:c7:19:3d:c8:65:02:95:7b:05:
a1:32:b7:da:7d:c0:d2:ce:0e:92:e1:c9:e2:b9:87:9c:70:fb:
8a:4f:4e:5d:01:d8:17:22:fa:c1:31:6a:c4:30:b5:ec:e4:30:
39:39:39:59:f4:dd:ed:32:fe:22:89:0b:dd:5b:4d:55:57:f8:
e5:85:a8:6e:b9:1c:7a:e7:07:e1:6f:78:f9:40:5a:9b:7c:3c:
78:5e:df:eb:50:2e:7f:5e:db:88:22:58:b7:4f:b6:8b:b9:77:
a1:ad:69:91:66:cf:70:3b:91:89:33:29:af:39:b5:b2:53:a7:
f7:b3:b0:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+j7EXFVRmzg5hvBQGeT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNmE4NzIxNmQ3ZTNjNTkzMTVmNzc4YjJjOGY0YTllZjQ3
OGI5M2UwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTYxYzNjMWM2NzQzZmJlZjcyMzYwZTkzMWFiNmJkZWI0M2U1ZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzkDblDc3aTpKPaOLTXt3Wnq5rzE
8P/O9ketr7sz5LXkoQ9pMYh7uaWcFQXBghw1W85SMsxue0cG+l6k04QOuKy8l8jT
m5Wqs7xcFtrS7P2xc/p1FdPwENJlV05etHSvf17PkCPrastAMa5ZoCxOwKEa0rvC
t454jo9MbP3sHE7WIm18RN0AHdjMp/i8M1UcD9AWXkvp7GCHSuGSyaEWe2VNjoHS
x+J1YGmRXquPGtfFhDASIbcYA77Po8ZTRfVzHbCPGRsA3UQ7NrSTfg1SkBLC5nJh
K9Lxjmlji0CQvhTqHlWLJciYQ2u247/EHByLJOBAjFbIYdXaUE17TwSP/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5hw8HGdD++9yNg6TGra960Pl/vMB8GA1UdIwQY
MBaAFCJqhyFtfjxZMV93iyyPSp70eLk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMjEwMjItMGIyNy00YjRlLWFiMzIt
Yzk5MDAwM2IyNGNhLzEvTG1IRHdjWjBQNzczSTJEcE1hdHIzclEtWC04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wMjEwMjItMGIyNy00YjRlLWFiMzItYzk5MDAwM2IyNGNh
LzEvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9myMA0G
CSqGSIb3DQEBCwUAA4IBAQAPdQo5cglb32EUxZtg1X5jlNrMPCsyCohqSMk3UqbY
PGTq7aktCvmzMiEo8hBuZcnbR5ob+55vNdbVacueSOjGwRkbGD1Z8aMWLCbPgLh3
mXOgrQFdrYWoYVm5C/giZNjoAsRfj0vnXyvpI4KeGisUclmsTfeL6P+6nrWWKS+S
SUQpIFLvLNnHGT3IZQKVewWhMrfafcDSzg6S4cniuYeccPuKT05dAdgXIvrBMWrE
MLXs5DA5OTlZ9N3tMv4iiQvdW01VV/jlhahuuRx65wfhb3j5QFqbfDx4Xt/rUC5/
XtuIIli3T7aLuXehrWmRZs9wO5GJMymvObWyU6f3s7C8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net