Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lsgedL43d-ok7aifYKEbx-CYrtc.roa
File: lsgedL43d-ok7aifYKEbx-CYrtc.roa (raw, json)
Hash identifier: 8WCbfp79zs4mhXPKyv7MNI0qE3yJgQ+W2widiZRQ41c=
Subject key identifier: 96:C8:1E:74:BE:37:77:EA:24:ED:A8:9F:60:A1:1B:C7:E0:98:AE:D7
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01910B218BED83854B2CD306F80FCAF3DAA7
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lsgedL43d-ok7aifYKEbx-CYrtc.roa
Signing time: Wed 31 Jul 2024 23:30:33 +0000
ROA not before: Wed 31 Jul 2024 23:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.97.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0b:21:8b:ed:83:85:4b:2c:d3:06:f8:0f:ca:f3:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 31 23:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c81e74be3777ea24eda89f60a11bc7e098aed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:2a:de:2a:3a:8a:5d:a8:85:b3:2c:41:9c:
91:87:4b:b5:e5:76:b3:04:a6:de:30:25:30:ba:a6:
d0:f1:cc:75:8f:ec:6a:fe:e1:81:24:8f:2b:a8:98:
bb:ac:bb:8a:8b:81:98:67:bc:2f:61:ef:54:7e:54:
63:7d:c7:d2:9b:0f:73:06:2f:e2:71:17:ac:18:db:
c3:0b:b5:37:bf:cb:de:9a:4e:ee:39:d6:4c:52:8c:
d5:cb:47:22:d7:5b:08:29:23:3e:27:6f:3a:d3:cb:
34:a0:35:2b:6d:02:37:9b:c2:d7:eb:89:91:ad:f3:
c4:94:b2:44:d3:ea:df:2c:f3:f9:75:cb:58:b4:d8:
c3:0a:da:47:e3:77:a0:03:b9:5b:9c:f5:39:2c:89:
6d:77:00:9f:7b:4d:f7:ca:2b:58:be:0c:14:7a:6c:
2d:eb:f1:a9:5b:2e:bc:66:b2:9a:05:b9:8e:f4:5a:
f5:33:0d:9c:70:98:82:a8:5f:3f:79:7b:24:e4:5d:
5e:a9:22:bb:61:04:d7:ba:e7:3d:48:76:ae:d7:e5:
5c:70:7c:3a:f3:5c:3d:67:dc:7d:e5:be:4c:7c:d5:
a7:4a:60:c3:76:b4:53:1e:be:95:27:72:fc:3f:cb:
cc:bf:fb:af:86:4f:ac:7c:9f:e0:34:07:54:c1:33:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:1E:74:BE:37:77:EA:24:ED:A8:9F:60:A1:1B:C7:E0:98:AE:D7
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lsgedL43d-ok7aifYKEbx-CYrtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0/24
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
42:53:40:55:d7:23:14:70:33:9e:00:24:88:03:1f:e7:d8:40:
b3:42:4a:3b:d8:7d:de:43:1e:b5:10:f4:07:82:03:4b:de:ef:
e8:4b:ff:56:0e:2c:29:60:4a:42:27:a3:7c:8d:ae:07:b7:e1:
ce:80:de:a1:e7:0f:fa:58:69:a2:98:cb:26:9b:81:53:a8:ec:
cd:cf:9c:d3:f7:8c:01:e2:a4:44:49:fc:83:52:1a:06:a8:62:
dd:7d:b0:2a:fc:11:da:60:57:08:58:e9:78:a4:52:59:39:f1:
ad:1a:5a:71:76:44:1a:14:f6:a1:50:3e:ee:21:6f:b1:2f:96:
e8:04:f6:64:b8:e4:fc:61:24:8b:ff:f4:9c:cb:63:f3:e0:4f:
9b:46:1e:cc:61:1f:f1:da:48:b4:3b:3b:6e:cd:ff:30:12:98:
d0:52:ac:f0:91:fe:b0:1c:78:b5:4f:df:75:68:41:67:00:d5:
3f:dc:cf:50:62:b0:b2:71:4b:82:e1:85:33:56:97:84:5b:91:
ae:29:df:c7:03:8d:1e:29:9d:3d:cf:20:41:b2:6c:39:34:fd:
43:9b:55:8a:e7:24:eb:0c:62:b1:49:6e:65:bc:4c:45:27:e1:
5b:01:10:53:a8:c0:b6:b1:e2:97:d6:1d:55:39:ca:57:bc:fe:
28:60:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:25 2025 by rpki-client