Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa
File: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (raw, json)
Hash identifier: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=
Subject key identifier: 96:71:41:3C:4C:18:5F:06:EB:11:B0:5C:FF:55:38:86:A0:48:88:3D
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019426D9CC705AD19E869EAF9A76F0BDBC4C
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24776
IP address blocks: 91.213.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cc:70:5a:d1:9e:86:9e:af:9a:76:f0:bd:bc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9671413c4c185f06eb11b05cff553886a048883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:4e:59:56:55:78:1c:83:b7:28:47:ef:e7:
07:b4:32:c8:ee:07:99:78:2e:32:8a:f5:e5:d6:b4:
7b:0b:05:18:3d:29:ee:7e:65:2a:ee:7b:c0:8e:fb:
4b:69:c2:a4:95:f8:96:a5:18:ae:eb:e6:e0:fc:0a:
76:63:3c:86:0b:7b:fb:f3:1a:03:93:02:d0:05:a2:
71:c7:91:70:ea:0f:e5:2c:71:65:6c:cd:7f:7b:83:
0d:99:fb:9e:54:9b:0d:18:67:f7:d9:81:c4:e2:8d:
bb:3f:a6:1f:04:72:27:a6:69:70:c8:2b:e0:52:33:
9d:2f:63:a2:5e:0c:ab:7b:e5:cb:ae:04:98:74:b2:
b8:5b:11:6c:09:65:ca:06:92:2e:68:e6:19:26:52:
b7:bb:f5:9b:99:9c:fe:3b:6c:fa:31:e7:e5:b8:d8:
3a:38:60:e8:48:37:78:da:63:1c:38:df:c6:c0:17:
00:f3:9d:33:42:b5:9e:8e:d8:36:42:08:21:b7:1b:
92:99:58:72:b7:f6:87:ff:4b:5f:4f:dc:14:81:bf:
d7:2f:6a:00:10:01:2a:39:bc:e8:09:f2:e1:88:cb:
74:ef:9b:a0:1a:15:dc:8c:a9:cb:b8:62:4c:bf:a9:
d2:4a:3a:de:4e:02:96:96:37:a1:b8:74:19:f4:1f:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:41:3C:4C:18:5F:06:EB:11:B0:5C:FF:55:38:86:A0:48:88:3D
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ac:e1:41:b8:21:17:4a:54:fe:85:58:df:db:4e:bb:85:49:
f8:f9:e7:6b:e3:e8:db:4a:fa:09:9e:93:49:80:49:ce:69:41:
84:65:1d:51:f8:32:08:85:f6:71:df:2d:cb:77:a8:af:75:96:
57:63:96:2d:a9:c6:c7:96:3b:26:d0:97:93:9c:ae:30:49:e4:
21:4a:3e:6a:67:00:b2:40:07:f0:ac:44:d7:8b:5c:e9:0e:c9:
9c:0b:c5:e2:0f:67:22:fd:81:f4:05:03:b5:e9:12:a6:58:c9:
dd:b7:34:17:05:f8:14:74:47:cd:a1:c5:55:f2:0a:12:eb:3b:
19:c4:bc:8f:63:0b:83:4a:5c:34:2c:32:cc:0d:57:eb:59:a9:
ef:21:b5:15:28:75:0f:9b:2c:9c:0c:e5:1f:00:41:56:16:7b:
71:55:17:47:ab:cc:c4:22:34:de:71:b0:a0:25:d3:34:e1:bd:
88:54:d0:c2:0d:77:58:d4:3c:0d:c9:de:e2:a8:29:2d:21:45:
08:dd:99:f4:ef:f6:3b:2f:01:71:38:9f:55:d9:20:dc:93:22:
e8:48:61:6f:e9:8e:91:4e:84:79:85:5a:8f:c7:b5:77:01:05:
34:14:9d:69:0c:4b:41:59:da:99:d4:12:92:c8:fb:33:1a:db:
6d:ee:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net