Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/L9WBYojbvLbnk987LNP8zQZEzQg.roa
File: L9WBYojbvLbnk987LNP8zQZEzQg.roa (raw, json)
Hash identifier: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=
Subject key identifier: 2F:D5:81:62:88:DB:BC:B6:E7:93:DF:3B:2C:D3:FC:CD:06:44:CD:08
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01962598E948004FB33BEA9A11912D8C67D0
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/L9WBYojbvLbnk987LNP8zQZEzQg.roa
Signing time: Fri 11 Apr 2025 16:05:00 +0000
ROA not before: Fri 11 Apr 2025 16:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 80.91.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:98:e9:48:00:4f:b3:3b:ea:9a:11:91:2d:8c:67:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Apr 11 16:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd5816288dbbcb6e793df3b2cd3fccd0644cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:b3:71:85:3d:c1:07:6d:31:42:5b:f4:3b:
89:cf:db:55:46:b8:ae:89:db:06:8e:63:2c:69:de:
47:ab:71:3e:da:e1:5e:f3:b2:3a:fa:c4:95:bd:57:
a6:a6:cc:6b:79:be:52:9d:f8:af:3f:30:95:a9:62:
94:e0:80:aa:fe:fe:39:87:1e:66:26:a3:a6:d4:13:
ea:4d:f5:37:c7:f8:96:28:35:5c:66:5c:c4:c1:d1:
f9:44:cc:d2:10:7b:41:25:d1:d9:22:5e:0b:16:4f:
db:b6:36:1f:45:f2:c7:85:3c:dc:07:fb:d6:02:68:
ba:5b:e3:f6:b2:67:fb:0e:47:41:f2:2e:3c:8c:65:
87:86:9a:d1:49:6a:a9:de:2f:5d:0e:9d:e9:66:47:
89:dd:8a:67:73:6b:d6:e6:98:d0:be:2b:bb:c1:a4:
7b:5f:5a:f5:34:2f:81:33:8e:01:13:da:f1:4e:59:
60:16:74:73:f3:04:06:6b:33:53:35:4b:7f:ac:48:
2e:cc:f0:3f:e1:98:e8:c1:c6:1b:71:9f:a5:34:70:
a1:5f:dc:f2:3f:67:68:05:99:c7:c6:af:7d:77:25:
32:b4:41:f6:32:d3:19:5a:d0:fc:5b:84:bd:88:8b:
f8:00:e6:60:ca:98:80:35:cd:9d:f4:7a:a9:98:df:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D5:81:62:88:DB:BC:B6:E7:93:DF:3B:2C:D3:FC:CD:06:44:CD:08
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/L9WBYojbvLbnk987LNP8zQZEzQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.74.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e3:7b:af:d4:11:6b:2a:53:3e:0d:34:63:c2:35:d5:fb:ad:
7a:c3:21:39:f8:2d:7f:a0:9f:5e:7f:52:fc:b8:7d:27:32:60:
3d:7b:ab:4f:ea:6d:0f:5d:c2:31:bc:94:06:37:fc:cf:49:e3:
e9:7c:d8:8b:d6:f3:29:23:68:2a:23:ea:3d:d6:30:b0:3a:23:
43:e6:df:81:9b:f7:55:a6:08:47:a9:1b:43:8d:b3:1f:04:df:
10:3f:48:3d:80:72:e5:8d:08:5f:37:4d:0e:01:e4:10:4b:ae:
8d:5a:23:98:d4:d9:5f:31:a5:22:44:c2:b7:d0:65:0d:30:54:
ff:ea:34:9a:46:59:54:6d:df:53:25:4a:3f:bd:9a:54:22:c1:
51:dd:c4:93:92:16:0c:4a:08:64:f4:9f:29:2e:ec:37:6a:ad:
8a:0f:bf:68:9a:74:90:51:30:41:96:b6:69:69:3c:d6:57:2f:
08:0b:87:e5:65:8c:a5:33:e8:81:fe:f1:4e:07:66:79:a0:d4:
54:d5:53:b0:44:57:b3:6c:51:65:b2:29:a2:cd:18:32:66:37:
6f:e5:6b:f8:58:56:b4:4c:8b:96:c0:fc:80:5e:40:b4:4a:e2:
07:1b:2b:29:14:49:66:9c:a5:4f:b8:ae:91:7e:2c:da:bc:62:
e2:86:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net