Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/LASNDVJFR7nISIIuLJuen3qOehA.roa
File: LASNDVJFR7nISIIuLJuen3qOehA.roa (raw, json)
Hash identifier: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=
Subject key identifier: 2C:04:8D:0D:52:45:47:B9:C8:48:82:2E:2C:9B:9E:9F:7A:8E:7A:10
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 0194221FC90132ED5D0D06562E8FC75BBC9C
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/LASNDVJFR7nISIIuLJuen3qOehA.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29423
IP address blocks: 91.217.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c9:01:32:ed:5d:0d:06:56:2e:8f:c7:5b:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c048d0d524547b9c848822e2c9b9e9f7a8e7a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:ea:ef:2f:c8:bb:7b:d7:50:8c:f8:56:e5:
87:0a:0d:0d:38:23:33:d2:c6:0f:c6:c7:57:6a:13:
30:a2:c3:2b:66:66:68:93:aa:65:4f:2a:3b:4a:60:
12:43:af:22:58:af:1c:96:24:a9:29:dd:06:21:59:
05:5c:f2:29:1c:dd:07:78:45:d6:b6:54:5b:0e:db:
f0:be:9b:6d:7d:d9:e1:0d:0b:e4:61:43:af:4a:e8:
df:1e:24:26:fd:bf:28:db:4e:a9:1a:6e:9f:13:69:
6e:02:52:12:0c:1e:52:08:b5:1b:d7:06:fb:32:74:
bf:21:46:a9:db:d8:6d:33:42:f6:99:c7:87:91:ff:
d0:da:10:17:25:c1:64:0d:78:0f:64:7c:fd:d2:53:
2e:0d:b1:ed:22:d1:e0:55:53:8d:bf:a1:d0:6e:12:
49:e4:0d:20:b4:a5:4e:0c:6b:04:4e:b7:00:f2:fa:
79:c3:d4:69:76:8d:8e:87:b6:5c:df:b3:3c:6b:1a:
4d:8d:73:6e:69:d1:85:e1:a4:c0:b5:af:8d:32:de:
7d:bb:91:d2:7d:81:9e:f4:cc:98:22:a0:b4:61:c9:
ad:7e:62:67:c9:da:b5:c5:83:76:38:6b:20:bd:1e:
80:97:c1:4c:13:9b:33:5a:13:ca:15:62:57:b7:b0:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:8D:0D:52:45:47:B9:C8:48:82:2E:2C:9B:9E:9F:7A:8E:7A:10
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/LASNDVJFR7nISIIuLJuen3qOehA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8e:c0:c6:4e:5f:da:a6:e5:ed:86:2e:67:4e:93:8f:e8:d5:
8a:1e:f7:7a:6f:99:01:35:ad:0b:7f:ee:0f:67:21:ff:63:3c:
04:d6:bf:8a:06:f9:2b:b2:05:b3:89:13:02:eb:e2:17:ff:ce:
9b:fb:30:69:aa:9a:13:a1:a7:54:70:9f:44:42:1c:de:f3:c9:
06:5a:09:64:72:9f:c1:af:4d:b2:59:f3:f5:13:55:d2:0e:0d:
18:eb:ea:25:f1:78:e4:1f:d6:8e:20:0c:b5:9f:2c:02:7c:7c:
55:d2:e7:d5:e2:ff:bb:ee:e8:4b:ef:4a:fd:6a:ed:b3:71:94:
41:7c:95:92:27:ce:44:ec:1e:a7:ec:1c:c7:ee:1a:50:0f:27:
31:a8:e1:58:ea:69:74:81:a4:96:16:66:51:05:45:40:61:a4:
c1:ee:9a:f3:75:07:b1:90:c7:48:86:67:e0:49:7a:c7:ad:99:
38:47:19:c0:8c:6f:cf:20:f6:bb:a5:8a:5f:43:3d:46:d8:de:
68:a8:45:2c:04:fc:ea:81:6d:3a:01:54:c6:b1:d2:8b:80:2f:
ed:c5:e3:69:47:0f:93:9c:10:46:be:4e:9c:cf:74:ed:6b:03:
37:ce:a8:17:37:46:f5:1d:51:49:a2:83:6d:2f:e0:4e:38:b8:
62:c2:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net