Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/LB9yxSJR9ouxobcPst7y075Gi24.roa
File: LB9yxSJR9ouxobcPst7y075Gi24.roa (raw, json)
Hash identifier: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=
Subject key identifier: 2C:1F:72:C5:22:51:F6:8B:B1:A1:B7:0F:B2:DE:F2:D3:BE:46:8B:6E
Certificate issuer: /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial: 01941FFA9B7BA88AF853261C4EF3F3F39A3F
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/LB9yxSJR9ouxobcPst7y075Gi24.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208429
IP address blocks: 45.137.164.0/22 maxlen: 22
2a0e:a440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:7b:a8:8a:f8:53:26:1c:4e:f3:f3:f3:9a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c1f72c52251f68bb1a1b70fb2def2d3be468b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:ce:8c:6c:ce:22:2e:57:7f:64:bf:2e:41:
f3:21:4f:f1:8f:79:13:78:b6:8a:c2:e2:a2:3b:fb:
40:4c:85:73:2e:65:b2:4f:70:39:ed:ac:fb:f6:59:
c4:10:e2:46:84:e2:7a:87:83:fb:55:a6:0a:3d:55:
01:51:20:b8:a6:69:0b:b8:73:6c:59:3e:05:9b:1d:
d5:32:51:b4:99:f4:f6:46:55:84:95:2c:18:2c:ef:
c8:f5:d7:99:45:0b:69:de:87:45:eb:bf:8f:8f:e5:
51:fd:00:73:2b:37:3b:56:9a:42:1f:86:4d:7a:91:
bd:3f:0e:f1:6a:d1:ef:6f:b8:f0:c6:61:92:50:c1:
ac:90:0c:64:ad:2e:74:6a:f0:f9:a8:03:40:86:5a:
08:c0:8a:1a:db:93:79:59:3e:ed:a7:a6:1f:05:a1:
8b:21:d2:1f:cc:51:f4:2a:24:21:96:b6:ac:99:40:
dc:7a:c9:18:ca:ee:38:2d:a3:3c:f5:52:ba:e2:ff:
07:18:a0:b2:d9:45:f4:9e:4c:ea:67:19:c0:be:6b:
1e:40:dd:a6:22:50:9f:72:88:b2:04:08:fe:c2:1b:
1d:26:12:14:d5:1f:53:10:6a:ba:0f:67:b7:11:e4:
4d:89:03:fc:f0:94:f7:a0:81:2e:4f:74:ab:96:16:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:72:C5:22:51:F6:8B:B1:A1:B7:0F:B2:DE:F2:D3:BE:46:8B:6E
X509v3 Authority Key Identifier:
keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/LB9yxSJR9ouxobcPst7y075Gi24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.164.0/22
IPv6:
2a0e:a440::/29
Signature Algorithm: sha256WithRSAEncryption
56:5c:0c:f0:c6:b7:4e:a2:ae:e6:98:b5:51:21:fe:df:43:c9:
3e:f2:db:d6:ce:fb:65:e2:77:96:bf:a5:03:24:c8:02:83:1d:
e7:86:10:1a:b6:9b:b0:5c:28:9f:a4:bc:7a:e7:56:af:4f:49:
74:96:1a:9a:9e:24:da:5e:8d:2b:c0:9c:ae:35:c5:d4:ee:eb:
ac:42:19:3b:f2:c8:1c:7c:10:f3:f1:c3:ea:58:78:57:c2:0f:
75:06:b7:a0:af:cb:3f:4e:8a:99:36:d5:5e:3e:eb:6a:f5:2d:
bc:5b:d6:e0:17:1d:d5:39:98:e5:3c:0a:c3:10:37:07:fe:1d:
bb:72:1b:a7:15:c9:80:c7:8b:27:8a:65:7b:5a:6d:28:20:3d:
9d:b3:44:15:51:37:b3:3e:bd:e0:3c:b7:92:2c:a3:86:7b:6e:
43:ce:27:a4:8e:9a:c9:a7:af:ff:33:56:f1:68:a2:fe:36:35:
9e:c2:78:85:b2:15:90:10:cf:1f:52:68:89:2a:11:30:83:49:
62:0d:37:12:28:b1:5a:a0:06:5a:84:c9:20:02:53:26:8d:8d:
74:e3:06:b4:a9:29:a8:c9:33:1e:c3:cc:03:b3:27:5b:25:5d:
39:76:c4:35:71:07:b5:01:54:a0:fd:9f:ea:27:4a:6f:79:f9:
05:39:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:04 2025 by rpki-client