Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/lw90sey6Y2XkP3Sip6ebzWQtTKU.roa
File: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (raw, json)
Hash identifier: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=
Subject key identifier: 97:0F:74:B1:EC:BA:63:65:E4:3F:74:A2:A7:A7:9B:CD:64:2D:4C:A5
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019426D996EB436A105C6DF5F310D3CBA808
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/lw90sey6Y2XkP3Sip6ebzWQtTKU.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/22 maxlen: 24
45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:96:eb:43:6a:10:5c:6d:f5:f3:10:d3:cb:a8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=970f74b1ecba6365e43f74a2a7a79bcd642d4ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:f2:c6:9a:30:31:ae:d4:85:39:42:b4:b8:
fc:a9:bc:84:9f:bd:d0:59:35:c1:6d:c4:19:11:75:
c0:40:2b:84:8a:29:a2:ac:c0:0c:7a:94:b9:1a:02:
9e:84:34:33:74:be:84:b2:fc:f0:68:f2:b5:36:a9:
8f:ac:39:df:01:34:c0:98:78:ad:0f:be:58:33:ab:
6e:e3:73:11:a8:fc:33:24:55:0b:85:8c:10:7b:08:
2a:e2:87:d5:08:65:d2:99:45:a1:f1:c3:d4:cd:b0:
78:05:dc:66:78:6e:45:ad:c7:68:c6:4c:11:56:0d:
42:30:47:44:7c:2c:f7:ff:d5:84:48:2d:c5:b5:e0:
1d:cf:c4:2a:d1:49:cf:84:01:b2:04:45:d2:55:ef:
ff:c2:f5:86:81:48:b1:d6:43:34:c1:60:10:a8:ac:
9e:b0:7f:8b:61:ba:fb:97:96:fe:35:f0:10:d2:80:
d2:20:8e:a9:ca:d4:be:2c:54:55:8a:a4:8d:66:c4:
25:6a:c6:78:9a:61:e7:4f:73:99:5a:d2:c2:f8:72:
c0:61:24:41:86:b1:7b:89:c8:de:07:af:b3:11:76:
ab:34:61:6c:ca:d8:c9:9b:6e:44:f4:44:6c:b3:03:
31:f2:34:85:2e:15:ac:a0:ad:7d:ed:1c:6b:8e:7b:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:74:B1:EC:BA:63:65:E4:3F:74:A2:A7:A7:9B:CD:64:2D:4C:A5
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/lw90sey6Y2XkP3Sip6ebzWQtTKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:35:4b:57:1e:08:ff:c2:54:12:8e:5e:f9:d6:dc:5a:1b:28:
25:6d:f1:50:31:de:c9:1f:c0:35:fa:6a:2f:35:55:28:8f:7b:
23:6b:21:eb:5a:e8:1b:03:19:f6:fb:12:1d:1d:e8:ce:a4:1e:
86:c5:3a:42:b7:1c:c9:fa:0f:99:e6:48:e8:c9:95:1e:59:55:
97:33:20:28:e4:ff:fa:d7:39:bd:6a:7e:ed:31:d4:03:72:dc:
b5:a2:75:16:47:69:9c:10:7f:7e:01:a1:75:b5:f9:34:f7:1b:
59:4f:1d:5a:4f:b0:f7:8f:04:83:bb:10:b6:99:e6:f2:25:3b:
01:e6:63:3f:2e:9e:27:a6:36:73:39:59:7b:59:1a:30:93:0a:
64:48:71:91:1e:bb:78:97:59:62:7f:e9:00:2c:b9:f8:2d:84:
28:cc:32:2a:18:3f:71:6f:ce:7b:61:f3:12:7b:e3:78:ff:22:
f3:4b:cc:ef:26:5e:52:35:02:f7:84:1d:ab:b1:32:3e:95:2c:
11:cf:57:01:ae:94:30:b8:3a:7e:d3:b8:c8:a3:2a:02:2c:4e:
64:37:3c:d7:f4:55:18:a1:13:bd:fb:8f:1e:a6:9a:5c:7c:01:
38:7a:3c:2c:72:82:9b:c3:fb:83:c2:4a:fe:89:31:51:c1:a0:
f9:ec:4b:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2ZbrQ2oQXG318xDTy6gIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOWM0NWU0MzYyNTUyMjA4MGFlYzUzOTUyOTg5YTEzYTI4
YWJkMDAwHhcNMjUwMTAyMTE0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzBmNzRiMWVjYmE2MzY1ZTQzZjc0YTJhN2E3OWJjZDY0MmQ0Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlXyxpowMa7UhTlCtLj8qbyEn73Q
WTXBbcQZEXXAQCuEiimirMAMepS5GgKehDQzdL6EsvzwaPK1NqmPrDnfATTAmHit
D75YM6tu43MRqPwzJFULhYwQewgq4ofVCGXSmUWh8cPUzbB4BdxmeG5FrcdoxkwR
Vg1CMEdEfCz3/9WESC3FteAdz8Qq0UnPhAGyBEXSVe//wvWGgUix1kM0wWAQqKye
sH+LYbr7l5b+NfAQ0oDSII6pytS+LFRViqSNZsQlasZ4mmHnT3OZWtLC+HLAYSRB
hrF7icjeB6+zEXarNGFsytjJm25E9ERsswMx8jSFLhWsoK197Rxrjns+4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcPdLHsumNl5D90oqenm81kLUylMB8GA1UdIwQY
MBaAFCOcReQ2JVIggK7FOVKYmhOiir0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvbHc5MHNleTZZMlhrUDNTaXA2ZWJ6V1F0VEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvSTV4RjVEWWxVaUNBcnNVNVVwaWFFNktLdlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVw0MA0G
CSqGSIb3DQEBCwUAA4IBAQANNUtXHgj/wlQSjl751txaGyglbfFQMd7JH8A1+mov
NVUoj3sjayHrWugbAxn2+xIdHejOpB6GxTpCtxzJ+g+Z5kjoyZUeWVWXMyAo5P/6
1zm9an7tMdQDcty1onUWR2mcEH9+AaF1tfk09xtZTx1aT7D3jwSDuxC2mebyJTsB
5mM/Lp4npjZzOVl7WRowkwpkSHGRHrt4l1lif+kALLn4LYQozDIqGD9xb857YfMS
e+N4/yLzS8zvJl5SNQL3hB2rsTI+lSwRz1cBrpQwuDp+07jIoyoCLE5kNzzX9FUY
oRO9+48epppcfAE4ejwscoKbw/uDwkr+iTFRwaD57Etw
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:42 2025 by rpki-client