Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/LiHwNeaUhk4JTR_69YrU7OqGoYM.roa
File: LiHwNeaUhk4JTR_69YrU7OqGoYM.roa (raw, json)
Hash identifier: YUoAB0d2O64B1oBQTUvh9kstExyKpNoe69qprHd+LAs=
Subject key identifier: 2E:21:F0:35:E6:94:86:4E:09:4D:1F:FA:F5:8A:D4:EC:EA:86:A1:83
Certificate issuer: /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial: 01857142D5F1D32C6F09D97F27D223AF3FF2
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/LiHwNeaUhk4JTR_69YrU7OqGoYM.roa
Signing time: Mon 02 Jan 2023 06:54:43 +0000
ROA not before: Mon 02 Jan 2023 06:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57685
IP address blocks: 91.199.219.0/24 maxlen: 24
171.25.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d5:f1:d3:2c:6f:09:d9:7f:27:d2:23:af:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Validity
Not Before: Jan 2 06:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e21f035e694864e094d1ffaf58ad4ecea86a183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:e7:59:8c:db:0e:18:6b:61:0f:76:7f:e7:
12:b9:af:50:5f:27:59:f9:7a:e7:f0:85:c9:46:e6:
c6:8b:c0:fe:6d:de:aa:bf:17:69:1e:7d:4f:d7:81:
54:62:8e:90:89:8e:de:fe:6a:04:f2:ae:4f:75:16:
53:a1:05:97:d0:23:bf:29:0d:43:ed:49:db:11:5e:
8a:a9:d8:08:0d:59:b9:d8:8c:c8:b9:df:49:b6:88:
cf:c2:5b:a3:b8:c7:9d:c3:03:f9:97:5e:49:3e:7d:
78:58:55:c6:ef:21:6b:58:f5:e3:0f:4a:85:cc:bb:
68:d0:ac:66:78:78:7d:b2:61:72:7d:aa:ed:f3:fc:
53:bd:6a:cc:c7:ff:0c:83:5e:6f:90:3e:4e:6e:d9:
cf:71:6c:67:17:56:cc:18:47:96:95:4e:d2:9e:09:
b2:54:f4:18:8e:86:7c:ba:d8:e9:a2:39:af:3b:f6:
27:34:a0:be:74:ff:36:f0:d9:bc:cc:35:a5:08:bc:
a0:0f:e3:9f:10:3d:8a:8c:72:e3:c4:76:16:6e:24:
46:59:5d:14:26:9f:44:2a:d1:51:13:b7:75:1d:ee:
d5:91:4b:5c:66:45:05:37:5e:23:64:66:38:d6:80:
95:43:77:61:ea:05:ce:ed:cb:8f:35:d3:56:cc:f3:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:F0:35:E6:94:86:4E:09:4D:1F:FA:F5:8A:D4:EC:EA:86:A1:83
X509v3 Authority Key Identifier:
keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/LiHwNeaUhk4JTR_69YrU7OqGoYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.219.0/24
171.25.179.0/24
Signature Algorithm: sha256WithRSAEncryption
09:eb:fd:ee:a0:bc:8a:62:b1:b7:34:e1:ec:a6:1a:1c:48:11:
05:71:f4:f4:76:ff:75:a8:f2:e5:f6:bd:b7:29:3e:48:e8:aa:
1f:5a:3b:09:8c:64:1a:3c:ff:66:52:01:07:64:c9:57:7b:87:
c0:2b:17:8f:b0:99:65:8b:9f:32:a2:5d:bb:e4:ec:52:5e:33:
4e:39:c7:58:ef:e7:26:c7:be:4d:01:6e:bf:47:fe:31:d6:09:
e4:88:a6:fd:00:ae:35:82:57:8e:93:c6:58:3e:13:a7:b3:91:
76:25:7f:bd:fa:f6:17:31:c3:98:f1:bb:a7:cb:77:6f:b8:6f:
4d:e5:8d:a7:17:c8:0c:5a:98:1f:69:52:8b:e9:c0:2a:3c:b7:
f7:dd:71:92:b1:44:c2:7e:9a:69:83:e8:36:3e:6d:91:bf:8b:
44:e1:24:b1:99:ce:df:79:92:90:ff:7d:92:90:29:5e:5c:b4:
40:db:e9:9e:85:86:cf:3a:12:7f:0f:87:36:e3:29:12:1e:c9:
5c:9a:1b:fb:f6:34:92:d8:90:77:c6:61:cd:81:65:f5:f5:cf:
cc:c9:93:d6:da:85:52:4b:48:83:4e:8e:40:60:73:e0:f8:e8:
79:d5:ff:c8:c8:e8:c5:55:cd:96:53:d8:1e:6c:29:c9:2f:a6:
61:16:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:43:49 2025 by rpki-client