Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/LRjWG2C0sY70ttFU6yLHd0oTEf4.roa
File: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (raw, json)
Hash identifier: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=
Subject key identifier: 2D:18:D6:1B:60:B4:B1:8E:F4:B6:D1:54:EB:22:C7:77:4A:13:11:FE
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 019426D957723C29874430DBE0C9E543BF78
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/LRjWG2C0sY70ttFU6yLHd0oTEf4.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200617
IP address blocks: 45.145.36.0/24 maxlen: 24
2a13:5840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:57:72:3c:29:87:44:30:db:e0:c9:e5:43:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d18d61b60b4b18ef4b6d154eb22c7774a1311fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:0f:8d:7b:85:71:83:76:d9:97:b9:20:6e:
c4:5f:95:81:d0:27:64:80:7c:34:b5:f7:aa:0a:4f:
bc:2c:67:f0:84:c7:fb:d6:0c:84:11:d8:f7:f3:eb:
27:81:5a:80:da:ac:03:40:33:c3:22:c8:66:f3:2e:
23:b0:49:61:81:2e:a5:e0:50:20:61:b6:b1:81:65:
0c:78:b6:09:b4:e1:06:8c:72:95:50:c4:2d:ae:82:
ef:13:7e:20:b9:66:b2:3a:16:67:12:c8:fb:8e:73:
20:d4:b6:a4:98:ec:32:b7:ba:5a:34:8e:0d:9b:47:
b8:65:6f:cf:1c:17:de:91:8c:0e:18:51:01:83:9c:
24:ce:31:27:5d:20:f7:43:95:a6:cc:74:6b:35:18:
9e:62:70:0c:5b:ae:5d:fb:c4:ad:fc:27:01:68:d3:
1f:13:7c:a2:6e:df:11:fa:6d:ce:66:fa:fc:a6:00:
42:b9:e2:de:d5:6b:bb:6c:61:45:4f:0d:be:b5:bf:
88:45:89:8e:94:70:9b:02:1c:2a:0a:04:89:ae:30:
3a:d1:71:8c:a9:74:5a:49:aa:0a:07:29:c7:96:db:
db:88:5e:f0:58:d9:4a:dd:43:01:d5:ac:61:dd:7f:
26:8d:e2:75:0c:ec:50:7d:0a:9b:9c:a0:40:13:5e:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:D6:1B:60:B4:B1:8E:F4:B6:D1:54:EB:22:C7:77:4A:13:11:FE
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/LRjWG2C0sY70ttFU6yLHd0oTEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.36.0/24
IPv6:
2a13:5840::/29
Signature Algorithm: sha256WithRSAEncryption
31:e6:5e:3b:9d:1f:96:02:cb:f9:c0:57:85:58:aa:73:6f:92:
38:7a:39:97:dc:86:6e:eb:bf:00:17:72:4e:9c:6c:ba:1c:04:
ed:9d:91:3e:76:8d:88:9b:ca:ce:4d:26:a5:38:75:79:5c:dc:
5a:75:b6:4c:bb:e1:a3:0b:11:28:9b:13:c4:18:77:63:b0:41:
30:67:2a:d6:64:24:dc:a7:77:79:7f:ae:9b:55:f3:8f:41:36:
1c:57:89:09:0e:c8:65:35:41:b0:4e:2d:59:6e:0f:0f:be:76:
ec:5b:64:a1:5b:9c:be:70:93:04:44:9a:70:32:09:24:45:11:
58:78:f0:00:bb:3f:c8:81:d7:e2:36:37:b6:d8:c2:46:da:44:
31:15:2b:cd:cf:cf:e8:6e:ae:b7:88:1f:07:ac:d9:cc:b4:03:
16:89:42:90:da:55:db:c0:7d:5d:48:6e:3f:92:0f:56:a5:7e:
8d:25:57:6a:03:9c:11:eb:50:e9:13:25:c7:0d:f9:68:1a:8a:
34:49:ff:90:29:7b:51:22:b2:89:9b:c1:aa:b9:d6:35:f3:8f:
64:f8:26:b7:b3:44:45:ea:b9:20:c6:fe:2b:dc:d3:37:44:cc:
5c:bb:9a:0c:10:bb:11:7a:ac:89:98:6c:7c:9e:75:72:06:f1:
0f:34:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:55:59 2025 by rpki-client