Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/Lirq-zsF2DJ9HSd8FBwZm-dq_PM.roa
File: Lirq-zsF2DJ9HSd8FBwZm-dq_PM.roa (raw, json)
Hash identifier: DEsCxQ0UWNIneJAQeHuxPuouMfS+o3gP/21W0HHwfiM=
Subject key identifier: 2E:2A:EA:FB:3B:05:D8:32:7D:1D:27:7C:14:1C:19:9B:E7:6A:FC:F3
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 019425FC9F36867DB6962B5045C91A3E0EE7
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/Lirq-zsF2DJ9HSd8FBwZm-dq_PM.roa
Signing time: Thu 02 Jan 2025 07:48:20 +0000
ROA not before: Thu 02 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30081
IP address blocks: 45.88.132.0/22 maxlen: 24
2a07:9a40::/29 maxlen: 48
2a07:9a40:dca::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9f:36:86:7d:b6:96:2b:50:45:c9:1a:3e:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Jan 2 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2aeafb3b05d8327d1d277c141c199be76afcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:07:e5:0b:4a:2a:df:9b:f1:3f:2d:7c:95:
01:a8:6e:77:fc:fa:2d:4b:c6:2a:75:f6:1f:d8:fd:
cc:59:ad:5b:b5:3e:ba:15:28:ec:ef:de:89:46:16:
7b:41:17:ec:23:76:7c:32:b7:bb:0d:6e:be:d4:04:
27:c5:fe:ba:b9:28:c4:55:05:f7:72:3a:0b:53:d2:
0d:fb:22:2e:fb:52:65:4f:1f:21:58:26:3d:38:2f:
0b:7b:df:27:db:b4:59:ba:e0:1d:5c:84:93:5b:f4:
b9:69:7b:a0:80:d2:c1:ba:c4:f0:4a:e4:0f:76:34:
22:58:dd:1c:af:79:b1:a3:66:5d:f1:a1:72:f3:46:
35:b5:17:cf:51:41:a9:48:8e:ed:8c:d3:bd:32:02:
08:00:fc:21:bf:7b:15:51:6a:e7:20:c6:f9:3e:c5:
a7:63:c8:54:e9:5c:70:c3:95:1e:bf:1e:07:c0:68:
b2:a7:55:b5:83:66:15:94:c7:95:40:a0:7e:d3:6c:
e9:b4:55:a6:47:d7:bf:4e:55:e7:74:21:e3:b2:df:
f0:33:5e:b6:95:f8:02:e7:59:47:06:11:e4:2d:3c:
62:4c:ef:24:c3:e1:e6:65:0a:ac:d2:1b:5e:69:89:
79:39:8b:08:a6:f5:94:0b:20:22:37:3e:9c:ee:bb:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2A:EA:FB:3B:05:D8:32:7D:1D:27:7C:14:1C:19:9B:E7:6A:FC:F3
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/Lirq-zsF2DJ9HSd8FBwZm-dq_PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.132.0/22
IPv6:
2a07:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
82:a9:79:6b:fc:3d:5c:48:b7:0d:1c:6b:f1:e2:71:95:5c:9d:
a2:56:34:a4:4b:5a:3b:55:a0:5e:fb:69:d2:97:d4:da:d1:81:
53:52:cb:ac:9d:8e:c7:9f:84:e6:44:3a:19:d7:43:86:9a:79:
16:b5:ea:c9:25:16:95:66:23:ab:ac:4b:bd:f5:76:67:ff:a6:
f3:62:9e:16:a0:16:d6:84:7a:56:20:a4:a8:31:68:93:af:6f:
8c:66:46:fa:fa:22:4b:60:4e:c3:12:3d:1b:dc:1e:ce:2a:59:
37:41:2e:38:9b:49:e6:e1:9e:76:c9:2a:4d:e9:ac:c3:fc:c4:
87:02:6f:d5:34:ff:1a:d2:8c:d0:c9:55:2f:bd:13:83:8b:5c:
1e:52:b5:19:af:fe:ec:e6:fb:e1:9e:17:7d:59:81:96:67:43:
44:c3:ea:be:44:97:66:44:02:f8:e7:5c:5f:62:ed:8f:5f:2f:
11:ad:b0:76:1b:80:c0:5d:6c:ce:9f:7a:3e:4b:f0:09:b9:38:
3a:97:eb:0b:e3:b3:d6:b4:30:1c:72:ba:98:65:63:47:11:9c:
2a:62:1c:55:0a:b1:27:9a:fb:96:66:97:a4:0a:cf:31:62:1b:
f1:ed:cf:57:dc:72:45:46:1f:eb:bc:b2:ed:ef:ed:97:09:7e:
ad:f1:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:19 2025 by rpki-client