Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/LPmwSEr2cec7eKNG65DFfjhgZlg.roa
File: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (raw, json)
Hash identifier: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=
Subject key identifier: 2C:F9:B0:48:4A:F6:71:E7:3B:78:A3:46:EB:90:C5:7E:38:60:66:58
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019425FD9D710AE382C04D64CDA949BF5E80
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/LPmwSEr2cec7eKNG65DFfjhgZlg.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203046
IP address blocks: 91.208.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9d:71:0a:e3:82:c0:4d:64:cd:a9:49:bf:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cf9b0484af671e73b78a346eb90c57e38606658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:8b:42:24:c7:5e:a5:90:6d:0b:04:14:aa:
49:c1:e8:79:12:50:5c:4d:0b:7e:85:bb:d2:8c:38:
a0:20:37:32:98:36:34:71:02:64:55:a0:0f:3e:93:
a3:84:ff:26:73:36:77:97:75:33:af:66:31:fd:77:
d3:37:ad:95:ef:b4:0a:3d:8c:d3:1f:ae:cf:e0:c8:
d7:9d:57:64:37:e7:0f:b3:0c:66:2c:d4:51:87:2c:
39:44:a0:6c:95:6a:4e:bb:80:f4:6f:32:25:55:e6:
3a:ec:e6:6e:f2:87:be:0b:5b:18:f6:59:0e:76:fc:
8b:00:ed:31:dd:1c:69:83:a1:80:4f:71:25:0e:3e:
25:cd:c6:f2:bf:77:d7:1e:eb:11:9d:a9:d3:48:97:
5f:3a:9c:3d:5b:c5:ff:56:13:87:04:b8:80:71:92:
d3:ac:40:f8:70:8a:1d:8e:51:5e:5f:6f:42:eb:3c:
15:e6:2b:b4:35:ed:7d:b2:d2:e5:ae:ca:0b:be:e7:
7f:a7:d8:b5:34:1e:d9:2b:db:0b:4e:86:2c:8c:23:
0d:7f:31:e0:52:14:0e:74:cf:b0:5b:cc:b5:14:78:
6f:84:3b:1b:52:fd:89:b6:bb:30:e7:21:5a:0b:cb:
b2:be:ae:d9:24:96:ad:54:05:74:56:12:3e:e3:df:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:B0:48:4A:F6:71:E7:3B:78:A3:46:EB:90:C5:7E:38:60:66:58
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/LPmwSEr2cec7eKNG65DFfjhgZlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
90:69:2d:12:8e:bb:98:4a:70:eb:91:a4:c6:c9:e1:e6:cd:9c:
0b:3e:89:37:49:d3:92:b0:2d:3f:da:c3:05:4b:54:d1:cd:30:
73:15:d5:22:51:bc:cb:1e:aa:7d:c1:3c:67:ca:17:a4:e3:ca:
f8:07:93:71:f8:0a:1b:04:7a:0c:01:d7:76:39:7d:86:c9:00:
72:5a:19:91:41:0d:4e:7f:28:c6:d8:00:d4:b8:db:ac:9f:57:
bc:45:87:41:cb:7a:0d:30:49:5e:28:60:29:dc:5f:57:70:23:
08:4d:1a:52:7b:ac:fb:e1:22:c8:c3:91:dd:d6:bd:62:b0:e7:
b7:00:f3:38:01:75:82:42:6b:fc:81:fb:4b:34:ec:a2:b7:1d:
2e:2a:3a:17:12:5c:b6:bc:b4:76:a2:bc:56:c2:5c:27:04:e2:
e2:90:c4:a7:fc:fa:51:82:e9:35:92:06:19:97:02:33:58:f2:
9a:80:c8:fe:8f:c6:8d:3c:f2:b7:41:64:f2:a2:26:27:94:80:
3e:01:dc:84:53:cb:9b:67:49:15:57:41:95:c1:fc:3c:d7:d3:
40:b2:cd:59:7c:f2:89:bb:b4:90:06:8f:a9:ed:7c:ed:46:98:
e1:6e:b5:0e:aa:fa:d3:17:3b:c9:0f:c6:3c:90:63:b5:07:c1:
d5:ce:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net