Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa
File: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (raw, json)
Hash identifier: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=
Subject key identifier: 95:B8:D3:3D:52:7C:90:CB:EA:DC:3F:2D:24:18:1E:1F:C9:17:6C:EF
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 019420D659D84DFFF4E0B3139773FED07067
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 45.66.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:59:d8:4d:ff:f4:e0:b3:13:97:73:fe:d0:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b8d33d527c90cbeadc3f2d24181e1fc9176cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:51:f2:c2:90:7e:58:d1:e5:57:01:d9:48:
99:af:17:7f:5c:0f:74:29:f8:c6:11:3d:3f:88:c1:
62:d1:6a:f6:3a:51:82:f7:e4:6b:4f:a6:3e:4a:88:
63:20:73:59:cc:f1:c1:9d:0c:bd:6a:cd:5a:e2:0c:
d0:84:9d:7e:80:ed:fc:c9:4a:b3:2b:a8:21:31:bb:
6e:ef:ad:a5:a4:25:f2:65:46:c2:a0:2e:0c:4b:ab:
dc:a0:3c:55:8a:35:88:5e:3a:fe:87:e5:98:d0:69:
73:b0:79:9b:8b:5c:d8:a4:50:95:2a:a9:c2:b8:67:
ae:7d:87:b7:94:4d:9e:41:75:71:ef:ed:2c:ff:92:
f8:ae:f8:3e:ca:c8:73:a2:f8:dd:8e:a2:7a:5a:5c:
9f:22:ce:be:d6:d4:ee:6b:35:66:36:7a:be:e3:c8:
d3:f9:22:0d:4b:b1:6e:65:8a:f5:5a:53:f0:85:36:
05:28:c0:95:57:6a:78:81:57:e3:e1:ec:b6:5c:62:
fd:0c:52:99:ca:bd:03:bf:f3:1c:c7:eb:18:f6:be:
a8:f5:cc:0d:15:39:6b:b0:fa:f6:0e:95:4c:26:14:
5e:0e:7f:17:01:11:de:01:5e:a2:d1:55:fc:5e:52:
db:75:2a:3f:2b:49:8a:fd:df:38:4a:02:3e:26:bc:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:D3:3D:52:7C:90:CB:EA:DC:3F:2D:24:18:1E:1F:C9:17:6C:EF
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a3:97:34:02:e0:a4:eb:70:42:28:af:77:30:59:ac:33:7d:
94:ad:a7:c5:93:e7:fe:f9:fa:19:3e:71:69:01:02:41:41:23:
82:20:61:15:25:ee:66:27:7d:1c:a2:20:55:eb:03:d5:2b:38:
dc:56:41:bd:70:62:7d:ee:4f:e2:e9:fc:11:4a:12:0c:d9:ad:
d5:71:b6:89:04:18:07:1b:d8:fd:74:54:df:63:de:54:bb:c0:
ef:4f:73:08:6b:f9:7a:ea:72:32:32:c7:71:26:7d:d6:ec:5d:
52:19:5f:7e:2b:98:3a:b4:7d:f8:6c:b3:44:d5:cf:d0:19:b6:
45:8d:91:f6:af:a4:7f:75:91:09:14:a6:3b:c3:98:93:a9:be:
26:c3:93:a3:8d:c0:fe:1d:f0:c8:ad:1f:e9:22:29:33:62:88:
a4:cb:d9:11:67:6a:fb:ed:4d:1c:b6:0c:95:63:b7:30:7f:80:
70:cc:c0:67:ac:6b:bb:45:18:23:d7:e6:84:fb:31:b6:1c:28:
bf:94:3e:2b:f7:cc:20:54:5f:b6:d6:6b:0b:17:5e:f4:47:37:
79:75:ba:b8:6b:33:21:39:95:1b:09:54:61:90:30:de:6c:c5:
c9:ac:97:83:9e:38:f5:a9:0b:91:38:6c:27:c8:68:d8:8b:f7:
f7:dc:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:07 2025 by rpki-client