Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/LYPvA08Q5up42ir_ROLNJePR6WM.roa
File: LYPvA08Q5up42ir_ROLNJePR6WM.roa (raw, json)
Hash identifier: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=
Subject key identifier: 2D:83:EF:03:4F:10:E6:EA:78:DA:2A:FF:44:E2:CD:25:E3:D1:E9:63
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019423D6D3D50071A73715F2EB69D6085BE1
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/LYPvA08Q5up42ir_ROLNJePR6WM.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199141
IP address blocks: 91.245.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d3:d5:00:71:a7:37:15:f2:eb:69:d6:08:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d83ef034f10e6ea78da2aff44e2cd25e3d1e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:34:2a:a1:da:3c:e6:ac:3f:0e:a9:58:38:
64:77:67:51:cd:f5:f0:f4:a0:ae:44:ea:c1:03:40:
4a:b6:42:6f:4e:bc:01:ca:f7:4a:b0:c7:bf:25:48:
0f:e7:8d:4f:f4:22:8b:8f:9c:74:39:22:b4:37:0e:
d5:15:0b:22:b3:a3:dd:8f:06:cf:94:c6:2e:12:e2:
b0:e4:6f:26:7c:ec:3c:6a:bf:66:a1:e2:97:9d:1e:
d6:14:68:6b:b1:53:af:03:3f:db:49:7d:5d:d8:18:
0c:3c:39:98:5e:db:cc:57:e1:ae:c2:fb:87:2e:b5:
69:41:4f:72:ee:53:01:4a:88:51:69:46:1b:bc:e1:
bd:30:5a:cd:f3:3b:a4:42:a5:c8:52:3c:f7:a5:ad:
55:bb:ec:38:b9:d4:21:d6:62:fc:0b:0b:25:b2:92:
73:a4:89:f6:b1:27:15:f2:dd:00:9e:7d:fa:77:f7:
16:03:5a:06:46:35:22:8b:a1:d2:d0:f3:12:e6:27:
f4:b6:06:18:2c:f9:36:3e:bc:a1:7c:ce:86:1e:95:
ee:d0:82:8c:8d:17:e5:4d:f4:00:4c:f2:44:10:8b:
be:04:af:72:77:94:1c:ff:7b:c8:45:7b:46:57:49:
11:95:87:0c:65:ce:96:42:e7:70:ce:f8:3f:a6:8b:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:EF:03:4F:10:E6:EA:78:DA:2A:FF:44:E2:CD:25:E3:D1:E9:63
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/LYPvA08Q5up42ir_ROLNJePR6WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.195.0/24
Signature Algorithm: sha256WithRSAEncryption
44:50:7c:23:55:33:3f:f1:6d:2d:6d:0e:02:95:d9:3e:80:ee:
38:5a:0a:86:fc:5f:7a:1f:ce:d1:1c:64:9e:8a:64:b9:07:12:
c7:b1:3d:b3:52:32:0c:e7:a2:b2:e0:fd:d1:db:58:a6:74:a3:
be:8a:44:c3:32:52:7c:ec:d8:5d:91:31:56:8b:53:3e:0d:d7:
f4:0b:b2:af:26:48:a0:7d:24:c5:29:38:53:22:e0:95:fd:72:
2e:06:b8:3d:60:b3:6e:56:60:cd:c1:eb:c5:6d:97:81:68:58:
50:4e:38:ad:72:61:47:20:ee:34:8f:03:6f:44:93:92:06:2c:
ce:52:1f:2c:af:51:48:79:9a:67:28:d6:77:7a:9e:b5:dc:06:
8b:11:c2:ed:4d:fc:4d:ed:f1:e0:a2:61:2c:f5:8f:49:e2:65:
31:6c:64:58:d9:f8:c7:79:c8:b5:f9:38:7e:3b:79:53:af:54:
f4:9b:ee:a7:d5:5e:cc:47:4a:ad:45:a8:bb:4d:7e:ef:68:a4:
2e:2d:9b:67:72:bf:61:8d:d1:cb:3f:a5:a8:f9:c6:d1:11:59:
f2:2f:1c:0c:8a:c7:c1:ec:c7:a0:2b:d3:02:8f:54:7f:0b:b4:
5b:de:8d:84:84:68:e0:32:b7:85:14:e6:b4:76:50:63:42:07:
d9:44:05:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tPVAHGnNxXy62nWCFvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw
ZGVhYjUwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDgzZWYwMzRmMTBlNmVhNzhkYTJhZmY0NGUyY2QyNWUzZDFlOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx80KqHaPOasPw6pWDhkd2dRzfXw
9KCuROrBA0BKtkJvTrwByvdKsMe/JUgP541P9CKLj5x0OSK0Nw7VFQsis6PdjwbP
lMYuEuKw5G8mfOw8ar9moeKXnR7WFGhrsVOvAz/bSX1d2BgMPDmYXtvMV+GuwvuH
LrVpQU9y7lMBSohRaUYbvOG9MFrN8zukQqXIUjz3pa1Vu+w4udQh1mL8CwslspJz
pIn2sScV8t0Ann36d/cWA1oGRjUii6HS0PMS5if0tgYYLPk2PryhfM6GHpXu0IKM
jRflTfQATPJEEIu+BK9yd5Qc/3vIRXtGV0kRlYcMZc6WQudwzvg/pouG7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2D7wNPEObqeNoq/0TizSXj0eljMB8GA1UdIwQY
MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct
OWNmZjNmZTA1MTgwLzEvTFlQdkEwOFE1dXA0MmlyX1JPTE5KZVBSNldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw
LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XDMA0G
CSqGSIb3DQEBCwUAA4IBAQBEUHwjVTM/8W0tbQ4Cldk+gO44WgqG/F96H87RHGSe
imS5BxLHsT2zUjIM56Ky4P3R21imdKO+ikTDMlJ87NhdkTFWi1M+Ddf0C7KvJkig
fSTFKThTIuCV/XIuBrg9YLNuVmDNwevFbZeBaFhQTjitcmFHIO40jwNvRJOSBizO
Uh8sr1FIeZpnKNZ3ep613AaLEcLtTfxN7fHgomEs9Y9J4mUxbGRY2fjHeci1+Th+
O3lTr1T0m+6n1V7MR0qtRai7TX7vaKQuLZtncr9hjdHLP6Wo+cbREVnyLxwMisfB
7MegK9MCj1R/C7Rb3o2EhGjgMreFFOa0dlBjQgfZRAUy
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net