Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LSbgrs-j3bhzHoLHvQJBG6rl0rk.roa
File: LSbgrs-j3bhzHoLHvQJBG6rl0rk.roa (raw, json)
Hash identifier: V+46gc/yT9G5fIHpBxDx66hbwSvSECE3I172vPlNN08=
Subject key identifier: 2D:26:E0:AE:CF:A3:DD:B8:73:1E:82:C7:BD:02:41:1B:AA:E5:D2:B9
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019428239562E0F854467F490A983B28330C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LSbgrs-j3bhzHoLHvQJBG6rl0rk.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200193
IP address blocks: 45.154.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:95:62:e0:f8:54:46:7f:49:0a:98:3b:28:33:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d26e0aecfa3ddb8731e82c7bd02411baae5d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:3e:8c:e7:96:f8:a7:d3:8f:5f:a7:8a:53:
db:64:aa:9c:41:81:27:b1:61:55:1e:5d:29:3a:e4:
e9:fa:a8:a9:3f:58:62:de:9f:53:39:19:dc:31:0e:
e3:c1:09:0a:5a:ff:8b:da:03:99:b1:14:85:24:7e:
01:b7:9a:5a:1c:3e:dc:63:c3:20:d8:ef:99:b6:fa:
90:9c:11:a8:de:a5:a5:da:b2:ed:61:5b:b2:6f:6f:
e2:e3:e7:68:39:8a:5d:79:60:ae:77:d4:05:66:ff:
f9:77:54:7c:68:b5:04:0a:92:48:67:8b:2d:25:81:
37:bf:a2:49:e6:f4:6d:8a:7f:9a:d3:f5:04:c4:d9:
d0:59:a0:18:07:91:45:7c:a7:f1:0b:59:99:bf:a7:
9c:27:c5:51:5d:c7:89:d6:a2:65:ab:a6:97:b3:38:
77:e5:8b:a1:a8:6a:c7:fb:71:5b:b6:8c:9a:93:69:
e3:cb:90:3f:f1:ef:a2:44:f9:4c:2c:28:04:df:8d:
57:f4:41:12:69:63:26:12:8f:4d:5c:80:e6:1e:27:
11:76:af:3e:19:b2:20:f3:8c:d9:f6:c5:a9:52:9e:
c6:45:da:49:fb:e5:fb:8c:51:97:6c:7a:60:5c:bd:
26:83:9e:c2:33:ca:7f:01:2c:54:cf:2a:df:56:35:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:26:E0:AE:CF:A3:DD:B8:73:1E:82:C7:BD:02:41:1B:AA:E5:D2:B9
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LSbgrs-j3bhzHoLHvQJBG6rl0rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.156.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5b:f0:ad:66:9f:dd:44:d4:eb:5c:fd:1e:9d:dd:1e:7e:d8:
1d:13:bb:4a:24:3d:2c:ec:94:62:4e:b5:67:64:9e:21:26:0b:
db:ca:9c:71:c6:0f:03:f1:d7:85:84:82:66:9c:84:e3:7b:cd:
ec:eb:c3:60:fa:c0:58:82:e7:59:db:94:72:66:37:f5:ea:8a:
d5:08:df:85:21:8e:bc:ce:72:58:bb:58:71:f4:2e:f3:21:d3:
d4:49:fb:a8:9c:1b:a7:af:27:73:10:97:56:11:12:ab:3d:6d:
94:38:1b:72:a0:13:3e:f9:95:90:73:3c:d6:52:73:24:42:2d:
03:18:c0:34:6c:95:af:4d:66:6d:16:34:2a:ab:39:11:3e:05:
01:13:3c:bb:53:9f:5b:5c:24:fe:4d:f7:b6:9d:3b:20:58:61:
42:16:1c:4b:3f:94:ce:de:d2:cc:dd:e8:4e:41:70:9e:bf:9e:
20:6d:69:59:ac:7b:e5:d9:fc:a6:a7:53:e4:6d:43:5a:c7:04:
22:e6:59:bf:11:ad:65:16:40:da:1d:af:ae:24:ea:52:fe:00:
6e:4f:6f:a7:0a:ba:c7:50:51:9a:ea:d1:09:9c:71:b1:7d:20:
65:bd:1b:51:ab:b1:e4:81:76:97:01:68:ac:c7:96:ea:0a:dd:
04:55:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:03 2025 by rpki-client