Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LG-gHhY7N_0bJeIZXKOSERzrCXw.roa
File: LG-gHhY7N_0bJeIZXKOSERzrCXw.roa (raw, json)
Hash identifier: F1V6QrkhTH4XKFIWrnXx5eST56X9MRKZ+PZAKNKo01M=
Subject key identifier: 2C:6F:A0:1E:16:3B:37:FD:1B:25:E2:19:5C:A3:92:11:1C:EB:09:7C
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0186364EEE83A1F1D8407CFCD5253914D3A3
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LG-gHhY7N_0bJeIZXKOSERzrCXw.roa
Signing time: Thu 09 Feb 2023 13:13:07 +0000
ROA not before: Thu 09 Feb 2023 13:13:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.87.163.0/24 maxlen: 24
45.87.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:4e:ee:83:a1:f1:d8:40:7c:fc:d5:25:39:14:d3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Feb 9 13:13:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6fa01e163b37fd1b25e2195ca392111ceb097c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8e:fa:67:7b:7e:6f:96:92:6a:94:6f:cf:27:
8f:54:e0:27:b0:eb:60:8f:a4:ed:88:75:e1:96:31:
7a:5d:b7:50:9c:9b:42:b2:21:13:ee:0b:17:d2:fd:
48:35:3e:e7:6b:ec:26:0f:85:59:fe:13:2e:31:9a:
71:64:de:5a:bd:e6:19:5f:fc:a1:31:7d:30:51:6c:
43:07:3c:69:11:dc:6f:7f:b6:4e:a1:c5:39:30:79:
97:b9:b3:cf:b7:e1:1f:11:f7:e1:f5:40:29:0d:b9:
60:40:b6:4f:6f:40:4c:95:e8:e7:ba:f0:a8:bd:4a:
87:5d:a2:9d:71:70:84:d5:5f:55:d8:69:32:59:ad:
21:47:e7:6e:fc:e3:99:e4:17:62:5e:d5:ee:a1:e3:
8d:ec:4a:c1:7c:7c:d7:e6:14:bd:0b:fe:28:90:73:
78:ce:3e:93:74:7d:1b:50:b4:0f:5b:44:7f:c3:b3:
87:05:30:7e:ef:16:c6:34:7b:6e:14:0f:8c:1d:dc:
13:80:95:80:a2:81:47:46:71:cb:27:e3:bd:e3:2c:
09:90:dc:6e:8e:5b:44:47:c0:a8:d2:9d:97:d8:c3:
13:a3:72:e2:fe:4a:10:cd:78:7b:71:7f:f0:91:da:
fd:ee:15:dc:0f:b3:39:f6:95:dc:79:f0:a9:3b:00:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:A0:1E:16:3B:37:FD:1B:25:E2:19:5C:A3:92:11:1C:EB:09:7C
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LG-gHhY7N_0bJeIZXKOSERzrCXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:65:1d:55:18:fa:9f:c4:77:dc:94:52:d3:2d:19:f7:c8:91:
64:c6:ec:c1:26:1e:c2:00:e5:0c:63:dd:5b:93:80:72:3a:24:
de:e5:fa:04:eb:88:bc:b3:c9:ea:0d:70:21:bc:9e:cf:48:ee:
5a:cf:4c:1d:2e:51:8d:07:43:b1:5d:f0:2b:55:83:cb:fa:7c:
43:e5:b0:b6:c7:42:08:fa:9a:60:1b:23:87:2c:44:82:a2:6a:
ab:4b:72:6b:e8:ce:b4:09:78:b1:44:34:7b:22:04:e0:a4:b0:
a8:3a:e0:d8:6b:56:e4:81:80:21:e3:d8:cf:89:7c:35:dc:a4:
f0:c4:55:3b:09:59:b8:3e:20:5a:7c:7f:33:ae:16:2f:98:37:
e1:ab:6e:20:75:70:29:fe:f3:a9:75:8b:ed:7a:7e:7a:06:f8:
d4:a6:47:c1:88:5f:c8:df:55:66:3a:12:17:f4:34:08:e3:8b:
fc:3b:39:a5:7a:9b:9f:6d:9a:23:13:61:91:04:5e:3e:2d:69:
3c:67:74:dd:64:98:ad:b1:cc:71:95:08:b0:1e:24:e8:36:f7:
ca:1e:47:3d:bd:d6:50:2d:c8:bc:19:bf:0c:0a:6e:81:e2:71:
86:6a:a2:60:81:ed:6d:70:c5:fd:f8:34:06:07:36:26:df:4b:
6e:f2:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:43 2025 by rpki-client