Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/T-lrle-lMMn_3ceJvqi204wvJBg.roa
File: T-lrle-lMMn_3ceJvqi204wvJBg.roa (raw, json)
Hash identifier: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=
Subject key identifier: 4F:E9:6B:95:EF:A5:30:C9:FF:DD:C7:89:BE:A8:B6:D3:8C:2F:24:18
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D72AE0D594CE5B0A9A63109FC72B14
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/T-lrle-lMMn_3ceJvqi204wvJBg.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208612
IP address blocks: 45.92.43.0/24 maxlen: 24
2a0e:1cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2a:e0:d5:94:ce:5b:0a:9a:63:10:9f:c7:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fe96b95efa530c9ffddc789bea8b6d38c2f2418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:c9:1f:74:9d:73:4c:96:00:13:04:ca:e2:
3a:c0:0b:0b:b4:62:86:52:96:6a:94:1c:b7:20:e8:
99:90:66:ba:22:49:52:8a:d6:8e:ce:da:e4:82:65:
ce:53:18:cf:50:99:47:2c:c2:26:23:1c:4e:4a:e4:
e2:68:c1:ed:5c:24:a9:be:8c:a4:8f:e7:61:f3:60:
d3:b8:ef:c3:38:12:aa:6e:75:db:86:86:b8:d8:a9:
95:4c:1e:80:66:53:8d:98:43:e2:d1:76:7a:1a:a4:
d5:4f:7b:b4:d9:2e:b6:3e:59:78:1e:1c:1d:69:e6:
d3:f6:26:83:8a:a5:75:30:1f:c7:53:6b:c1:1e:79:
aa:3a:cd:aa:7a:8a:68:17:5f:4f:cc:8b:fe:b3:2e:
aa:94:04:5e:b7:28:8d:3b:70:1e:ff:99:e8:f4:16:
02:17:9a:7a:44:dc:c4:64:bd:29:5c:89:4e:9c:7a:
72:05:4b:66:55:ca:ce:6b:39:9d:8a:2c:ae:9b:2a:
ae:e6:78:79:24:bb:16:cd:f8:c6:d8:df:8d:75:62:
a5:2d:34:57:28:80:94:1c:96:be:b6:17:1d:11:71:
b3:e0:28:12:95:33:a0:c8:03:92:fe:37:84:b5:e2:
28:97:3b:19:66:57:96:3d:6a:f2:cc:b1:2c:ca:ba:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:6B:95:EF:A5:30:C9:FF:DD:C7:89:BE:A8:B6:D3:8C:2F:24:18
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/T-lrle-lMMn_3ceJvqi204wvJBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.43.0/24
IPv6:
2a0e:1cc0::/48
Signature Algorithm: sha256WithRSAEncryption
51:41:2e:bf:69:06:c6:44:2d:bd:01:5b:d3:c1:88:1e:60:43:
ca:6a:fb:9d:46:84:c2:d4:10:67:5f:9b:c2:3e:96:6d:59:b8:
5d:89:a7:79:2c:6c:dd:a3:a1:bd:d4:02:55:77:f8:d0:9b:e6:
30:dd:ab:5c:63:8d:50:d2:44:d5:95:6b:4d:3a:e4:ff:77:51:
04:71:ec:98:29:f6:a2:ae:27:36:ec:cc:49:9a:15:06:9d:24:
7e:5c:a6:fb:c9:74:00:88:4d:2a:e2:ec:54:c1:70:56:bf:06:
58:3f:c2:97:3a:aa:f5:2a:21:7f:76:31:0d:93:92:59:e2:f0:
d0:37:17:b4:3e:e1:3a:29:5c:75:4a:f4:41:01:71:06:ef:72:
e2:b8:6c:29:87:1e:54:6f:57:56:3b:0d:79:cd:d7:2d:17:9a:
09:92:51:76:8b:7f:e8:5f:fe:d0:36:e3:c9:ef:57:f9:e1:ba:
81:5a:06:44:b4:c2:d1:0f:53:df:76:a2:01:37:93:0d:03:9b:
ba:8f:3a:87:e2:07:d9:11:99:39:a2:e7:e2:ee:02:b2:8f:66:
25:d1:45:da:ae:d5:d2:9b:50:f2:37:c4:48:94:e3:7e:dd:ad:
4b:77:31:60:3e:43:0a:ed:cf:f6:19:70:bf:e1:36:d3:30:5d:
58:0e:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:56 2025 by rpki-client