Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/LXtV1SOyemLIBBZI_VMF85otBtE.roa
File: LXtV1SOyemLIBBZI_VMF85otBtE.roa (raw, json)
Hash identifier: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=
Subject key identifier: 2D:7B:55:D5:23:B2:7A:62:C8:04:16:48:FD:53:05:F3:9A:2D:06:D1
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019424B26FDE277B5E2BD82B25ADAB4D64B7
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/LXtV1SOyemLIBBZI_VMF85otBtE.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199165
IP address blocks: 91.241.56.0/24 maxlen: 24
2001:67c:2e7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6f:de:27:7b:5e:2b:d8:2b:25:ad:ab:4d:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d7b55d523b27a62c8041648fd5305f39a2d06d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:9f:5d:44:29:e8:63:e5:e9:bd:75:39:27:
3f:8f:f5:ac:2e:04:7b:05:52:8e:2d:5b:25:ed:5b:
63:b0:bd:c1:c5:29:65:6c:8a:29:3d:dd:95:10:fb:
04:52:5e:f2:1e:58:1d:96:b0:72:6d:a3:08:6b:b6:
dd:6d:a8:f6:df:7b:ea:d1:eb:ed:52:74:a8:9e:32:
77:af:f2:e4:85:3a:5a:e0:01:54:f7:df:4e:80:1e:
02:80:a9:e9:e8:8d:0c:c1:94:f5:97:52:97:ce:3a:
3a:5c:5b:8a:25:7a:97:97:22:78:cb:b4:75:45:cf:
a4:85:ca:d9:58:fe:72:91:ba:2d:00:10:2c:09:c7:
16:e1:e4:06:b1:c8:62:53:21:72:a1:b7:fc:35:9a:
4b:02:0f:58:37:e7:65:c6:c2:bc:02:f7:f6:2c:eb:
76:06:4b:c8:ce:a4:9f:0e:6e:bd:ca:93:84:ed:43:
d2:31:3b:29:de:a9:85:17:0d:33:3c:74:1e:6e:c4:
bd:67:c1:10:5e:d9:c4:f5:b2:4b:f8:e8:9e:b3:74:
da:ba:bb:39:3a:dc:b7:24:12:b6:e8:2b:21:cf:80:
7e:45:22:42:44:a9:c1:f4:80:7b:76:c4:61:fc:69:
f7:f7:0c:ae:9a:ae:17:18:5b:b8:64:8a:30:be:1a:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:55:D5:23:B2:7A:62:C8:04:16:48:FD:53:05:F3:9A:2D:06:D1
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/LXtV1SOyemLIBBZI_VMF85otBtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.56.0/24
IPv6:
2001:67c:2e7c::/48
Signature Algorithm: sha256WithRSAEncryption
5e:07:60:26:46:7d:94:55:99:e5:c8:98:55:f7:cd:bc:eb:bc:
f1:4a:48:e4:97:c3:0d:d2:9e:9f:4a:7b:21:ad:e8:51:4d:26:
c1:fe:b0:c4:39:bb:58:07:65:9c:71:ce:c3:6f:a8:24:26:c0:
cd:7e:1d:88:d3:09:bd:18:65:f8:4f:a1:c5:94:61:03:24:b4:
c2:83:57:dc:1b:29:98:b1:71:ae:9a:9c:4d:d8:ae:00:a6:10:
9e:02:fd:12:1f:25:aa:70:65:84:09:2c:4e:3e:ed:d0:56:e2:
cb:a5:21:18:d9:81:db:41:61:fb:f9:96:87:c9:fc:66:0c:5d:
b0:ea:f5:53:a4:ba:a7:2e:0b:91:3c:51:76:10:fd:d0:b5:65:
b5:0e:d9:3e:b9:0c:c1:7d:fc:67:46:a5:cd:81:8d:cd:99:d6:
f2:31:9f:48:5f:8a:e4:c4:ad:05:71:1f:de:28:cd:69:e4:80:
2f:63:e7:0d:68:45:49:75:45:54:04:dc:34:b1:50:2f:ad:fe:
4d:01:12:92:42:a4:59:aa:a6:a5:7c:8f:be:36:d7:56:be:25:
05:93:98:98:3c:73:13:aa:a7:ef:49:99:4a:c9:fb:ea:fb:fd:
49:d9:87:09:81:ff:75:63:2c:78:3b:50:db:d7:f5:86:10:aa:
49:57:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net