Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/LzSQuYv1x63WY7QfqJCJtkZHVLg.roa
File: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (raw, json)
Hash identifier: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=
Subject key identifier: 2F:34:90:B9:8B:F5:C7:AD:D6:63:B4:1F:A8:90:89:B6:46:47:54:B8
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 019422FC1901C5CE9019F7E95A15533CF77B
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/LzSQuYv1x63WY7QfqJCJtkZHVLg.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197082
IP address blocks: 91.217.225.0/24 maxlen: 24
185.75.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:19:01:c5:ce:90:19:f7:e9:5a:15:53:3c:f7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f3490b98bf5c7add663b41fa89089b6464754b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:7e:86:41:0c:d1:a1:85:92:50:1e:ff:e0:
4b:9c:ec:ee:cd:66:a9:e1:80:4f:1c:be:dd:0e:5e:
15:62:85:99:5a:da:ef:60:9a:21:f1:a0:72:80:92:
76:3f:48:ec:3b:1c:0c:4e:f4:e2:11:68:a0:f8:cf:
b5:4d:20:54:5e:ea:5b:68:71:4e:10:b7:7b:7f:07:
1f:6d:24:de:f9:b5:b3:7b:a2:c1:f5:c3:62:f3:fd:
31:66:a4:a8:a8:d8:42:6e:14:05:ca:9d:39:99:fb:
95:7d:19:e8:23:bc:5d:47:7e:da:74:d3:f1:07:85:
8f:4d:70:0a:58:75:c2:2d:dc:ea:9e:59:1d:3a:9a:
cf:9e:e7:d3:07:3d:05:99:b1:98:b3:2d:48:80:73:
aa:a5:2b:4c:e2:77:48:af:d4:80:28:54:a3:66:47:
51:af:77:d6:9c:05:f8:01:c9:bf:50:d0:1f:5e:df:
0c:74:7b:07:da:19:4b:15:57:5e:6a:c7:5c:b9:57:
9f:ae:81:54:25:db:fa:87:61:fb:e1:e2:39:bd:0b:
37:07:41:17:5a:04:58:e0:26:22:6f:83:2e:cd:fe:
5e:d6:51:a6:c8:82:c9:a7:db:ef:8c:0a:20:59:0d:
60:3d:34:06:63:84:f1:12:be:d9:ac:1f:dd:55:be:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:90:B9:8B:F5:C7:AD:D6:63:B4:1F:A8:90:89:B6:46:47:54:B8
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/LzSQuYv1x63WY7QfqJCJtkZHVLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.225.0/24
185.75.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:b7:e5:1e:da:c3:3d:6f:ef:b0:8f:f0:5b:3f:66:38:44:29:
0e:09:54:1f:3d:ab:32:41:dd:b3:e7:eb:0d:b3:e3:f8:73:2f:
d4:35:ec:b0:6b:db:49:29:7a:c9:ee:f4:82:e4:04:5b:a0:49:
bf:cb:61:5f:97:a7:02:04:f8:01:1f:d8:ef:76:4b:1d:f2:76:
7f:0a:43:c7:9d:4d:39:93:60:18:95:40:40:3b:d2:98:46:a9:
99:d7:29:f5:8f:e6:b1:1e:98:48:86:a2:9a:99:c4:ad:be:7a:
c5:8f:e7:d1:0a:19:42:a1:04:4a:28:93:35:09:22:76:7d:4c:
f3:49:1b:c6:b3:c2:38:c4:79:e5:c8:95:04:ab:db:f2:d3:c5:
63:e4:70:26:96:30:eb:e9:04:20:4f:0e:a8:99:95:ac:aa:a1:
7c:f7:29:d2:88:b8:16:19:fe:f0:55:d5:17:4e:4f:1b:a0:d6:
48:39:b4:27:34:26:08:77:94:5f:3d:a3:52:6c:93:19:0d:fb:
66:b6:27:e5:b5:7b:bb:95:b4:29:32:41:89:8c:c2:57:12:3e:
67:c6:49:5e:b5:da:2a:66:10:22:d2:20:f9:52:2a:22:4c:a2:
bd:f9:26:cc:db:7a:df:39:cc:46:63:a2:3d:5d:d1:e4:54:1f:
38:c7:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net