Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/LktO0B8qjGLInxw3N5jX_ouyGv4.roa
File: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (raw, json)
Hash identifier: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=
Subject key identifier: 2E:4B:4E:D0:1F:2A:8C:62:C8:9F:1C:37:37:98:D7:FE:8B:B2:1A:FE
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 01942143D3B2192C5C3C4336CCB79429694B
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/LktO0B8qjGLInxw3N5jX_ouyGv4.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200978
IP address blocks: 91.227.98.0/23 maxlen: 23
185.89.228.0/22 maxlen: 22
2a05:d980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d3:b2:19:2c:5c:3c:43:36:cc:b7:94:29:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e4b4ed01f2a8c62c89f1c373798d7fe8bb21afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:39:7a:94:95:21:9c:e8:86:20:5a:79:fe:
8c:6e:a3:19:66:67:f0:f7:c4:78:97:1f:8d:7e:44:
8e:89:8d:9f:aa:0c:ce:b4:58:58:75:c4:19:40:40:
19:6c:a8:0a:a6:c1:c2:5e:53:5c:4e:3b:8c:ee:7a:
16:74:f7:fb:ad:fd:e7:d3:2a:66:5b:c3:86:5c:a0:
2e:a9:4d:6e:62:7a:de:b6:d9:50:4e:4a:08:2b:6b:
e9:58:6c:e0:9c:2b:1c:87:20:cc:8c:cf:6c:95:33:
78:c1:38:61:16:49:9f:fe:39:45:c9:2f:27:6e:8b:
79:9c:d6:ac:2c:d9:fe:dc:a3:10:e2:3b:88:18:67:
41:39:3c:bb:fd:07:45:f7:10:5a:fb:b0:e9:50:71:
8e:31:bd:74:be:d5:60:f5:b5:7c:57:51:4a:e1:59:
6f:a1:a0:52:87:2d:5b:8f:a1:d0:96:a6:f4:3b:33:
0a:84:61:7e:99:9d:bf:52:fc:4e:27:08:5b:60:ba:
ce:27:35:60:d5:6a:0b:e5:28:43:be:d8:c9:3f:2b:
b9:c9:05:8a:4b:aa:e3:f5:ff:72:67:a4:49:69:3a:
6b:3d:09:d6:62:57:5a:d5:20:61:f9:72:bc:1f:18:
99:f4:06:62:c8:4b:82:43:1b:00:ec:20:54:ac:96:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:4E:D0:1F:2A:8C:62:C8:9F:1C:37:37:98:D7:FE:8B:B2:1A:FE
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/LktO0B8qjGLInxw3N5jX_ouyGv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.98.0/23
185.89.228.0/22
IPv6:
2a05:d980::/29
Signature Algorithm: sha256WithRSAEncryption
9c:07:de:ea:04:12:ef:05:1b:f3:ce:ee:2e:eb:be:19:f2:74:
cf:8e:a2:2b:45:54:30:59:ee:f8:08:08:52:31:b6:23:9f:82:
ff:5e:35:de:9f:7a:d0:fe:22:2d:d3:31:19:7c:5d:20:b1:0f:
e0:87:a5:c3:2c:3a:7e:6c:92:79:d8:cb:50:29:85:89:fd:f1:
54:81:aa:7b:a7:b5:cf:63:81:bc:c3:47:b5:aa:37:98:0d:0f:
f5:27:00:23:6d:6c:c6:e4:2f:b9:40:23:e1:6f:03:e8:1f:ed:
23:5d:67:00:6b:03:7b:d2:df:99:79:82:17:3f:da:7d:0d:93:
b1:41:35:33:c7:b9:0b:23:97:ca:1e:df:4a:8c:aa:fe:1c:b6:
6e:6e:c5:24:fd:79:72:5f:f3:b4:bf:c0:a5:9d:10:86:4c:2a:
ed:da:22:70:d7:1f:11:c2:15:f1:7d:b8:f4:a9:d5:0b:d8:30:
23:6c:5a:a6:82:95:74:38:36:ce:b4:dc:bf:c6:34:e6:27:78:
50:f0:df:39:b8:f9:f1:c9:fe:3a:3f:fe:cc:8f:c8:b6:97:c7:
66:56:8d:2c:09:81:c9:c3:ef:ea:92:62:64:de:cc:98:7a:ca:
16:9e:cb:c7:3c:f4:16:ee:ec:b0:60:e9:e3:c8:15:7b:97:81:
91:c2:55:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net