Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lV9LebBShRB0HH3lnGzpxjSkptk.roa
File: lV9LebBShRB0HH3lnGzpxjSkptk.roa (raw, json)
Hash identifier: d7U9tTl6mqS9fAJxxqd3DGiQEGtIqQQjBS7yJGPYAh0=
Subject key identifier: 95:5F:4B:79:B0:52:85:10:74:1C:7D:E5:9C:6C:E9:C6:34:A4:A6:D9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A51EC53D329BF79A8DA8DA34D013
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lV9LebBShRB0HH3lnGzpxjSkptk.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398127
IP address blocks: 45.133.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a5:1e:c5:3d:32:9b:f7:9a:8d:a8:da:34:d0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=955f4b79b0528510741c7de59c6ce9c634a4a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:0f:de:74:e7:47:6d:c1:fa:d0:2e:64:78:
64:7e:b4:9e:44:4d:04:80:84:52:49:e1:3c:89:b3:
b4:48:26:e1:21:e4:4a:31:44:2a:d1:16:1e:ee:dd:
f4:ca:fa:38:ab:d7:58:62:46:c3:85:31:e4:e5:83:
86:a5:05:9e:c0:c9:dd:2d:88:4f:0d:11:ce:72:4d:
41:68:35:2d:9c:8f:7e:c6:76:62:37:77:2b:7b:3d:
53:63:2d:4b:52:4f:1f:60:71:72:8d:3b:d0:dc:90:
35:c9:e8:d2:56:f5:47:f3:87:6e:c0:ce:79:a3:f6:
12:23:7d:39:62:e3:70:1b:fa:f1:e8:7a:f5:f2:2e:
15:f5:1e:dc:83:e7:7e:0e:00:f9:46:97:2e:64:b2:
af:ad:c0:7d:7d:b9:9c:6b:4f:7d:0a:3d:da:06:5f:
c2:1d:41:41:b1:b6:cd:fa:e3:3c:5c:63:18:ac:3d:
9a:4b:1a:83:4e:5a:72:89:47:b5:da:49:26:d8:b1:
42:6a:38:17:85:86:f4:71:11:60:2a:40:a8:b4:e1:
08:29:53:92:c3:89:6c:78:8b:79:5f:0a:f5:6c:22:
b8:33:73:35:80:5d:29:38:38:b8:8d:18:29:c6:49:
54:73:55:53:5d:1e:67:46:d7:58:2a:51:0d:50:ec:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:4B:79:B0:52:85:10:74:1C:7D:E5:9C:6C:E9:C6:34:A4:A6:D9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lV9LebBShRB0HH3lnGzpxjSkptk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
25:aa:d5:79:23:7a:e3:0e:8a:df:f5:b7:3e:d4:18:6c:f4:0f:
98:74:5a:e9:b4:e5:e5:6b:64:20:fa:c5:5f:9f:72:cc:74:39:
62:92:92:1e:81:1b:23:42:d6:cb:c5:6f:c1:89:c8:ed:8c:73:
f9:93:89:73:de:1e:ca:66:11:cd:99:ca:68:59:22:35:39:e4:
98:4b:e8:d4:a3:ca:72:30:d6:01:60:bd:06:33:16:d1:a7:92:
ba:c2:28:69:72:62:13:59:38:53:8e:2c:a4:85:e2:5b:ac:a5:
ba:d7:c4:ed:e2:1f:a1:6c:f6:f2:b3:29:fa:f4:c4:99:02:e1:
3b:ad:20:23:b2:fe:5a:cf:d6:0f:61:f1:c0:2a:fc:f1:cd:94:
8b:6b:1b:41:2c:52:b0:50:0a:26:da:ce:74:5e:5c:0d:42:f8:
da:c3:7c:93:be:7d:a2:cc:ac:4b:ac:a6:f1:ca:be:d3:9e:fb:
03:f6:1a:d8:47:5f:d7:17:10:ab:2d:e1:bf:0e:e6:54:30:d8:
61:9e:42:0f:ed:33:7b:58:67:a6:ad:54:c5:5d:25:ca:df:a7:
9e:f5:4b:fc:bb:52:7e:da:f2:39:54:76:1f:13:b6:42:84:c7:
00:33:15:52:81:5d:24:1a:cb:81:dd:c2:09:18:d4:a6:f5:12:
32:72:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:22:23 2025 by rpki-client