Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/L4rSOjSJfVwObE_zn4rjrnV1Vq4.roa
File: L4rSOjSJfVwObE_zn4rjrnV1Vq4.roa (raw, json)
Hash identifier: 63AN0sIiuDkrj05T70CvpBRMjk5lu9sLtjBR5koCGyQ=
Subject key identifier: 2F:8A:D2:3A:34:89:7D:5C:0E:6C:4F:F3:9F:8A:E3:AE:75:75:56:AE
Certificate issuer: /CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
Certificate serial: 018CC4244CCFE00444E2AC9D7AFA4F0208F8
Authority key identifier: 11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/L4rSOjSJfVwObE_zn4rjrnV1Vq4.roa
Signing time: Mon 01 Jan 2024 08:29:22 +0000
ROA not before: Mon 01 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 45.11.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4c:cf:e0:04:44:e2:ac:9d:7a:fa:4f:02:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8ad23a34897d5c0e6c4ff39f8ae3ae757556ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:fc:2e:cb:84:44:76:60:5d:74:b9:12:af:
e7:49:d8:80:ca:e7:9c:7a:bc:42:6a:12:ec:2d:cc:
86:9a:c8:6e:bc:2d:e9:34:09:6f:b2:87:e9:90:ca:
cb:95:53:82:b0:ca:e3:46:2b:e4:96:3c:f3:77:95:
5f:82:4b:b1:fa:78:66:b1:07:bb:97:47:2c:d9:8f:
ec:ab:65:0c:3c:e0:0b:61:f6:44:fc:cf:9a:f5:6f:
b4:5c:c1:d3:8e:07:dc:08:93:57:9e:ee:37:8b:04:
6a:a5:d2:b5:56:f6:86:03:d0:3f:6a:af:f3:c4:fe:
55:32:eb:4b:f6:57:18:c6:2e:f6:e8:7a:e0:1c:1f:
b4:08:6e:70:8e:28:70:f2:68:16:8a:8b:cb:ed:47:
5a:c0:26:f6:ad:38:58:83:4f:3e:b0:72:0a:0d:0b:
b7:de:ca:b5:c4:c1:a2:c2:5e:3d:4e:1a:b6:36:ef:
63:f2:a4:72:65:0f:e4:c0:9a:da:04:a0:b5:65:83:
11:ed:01:52:07:32:21:9f:3d:91:37:ba:89:22:e9:
a7:b7:90:ba:25:0b:0d:a3:2b:84:5a:ba:34:50:d8:
e4:f8:79:24:8a:b7:e5:98:fc:7c:33:94:d5:d2:86:
58:f5:e6:32:14:f9:8e:0b:1b:5b:28:1b:ca:cd:2f:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:D2:3A:34:89:7D:5C:0E:6C:4F:F3:9F:8A:E3:AE:75:75:56:AE
X509v3 Authority Key Identifier:
keyid:11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/L4rSOjSJfVwObE_zn4rjrnV1Vq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.196.0/24
Signature Algorithm: sha256WithRSAEncryption
21:11:e7:9b:89:2e:6f:85:46:fa:20:3a:49:37:a9:f3:13:21:
95:18:b5:a3:ba:41:e7:4d:6f:d3:f3:2d:86:ec:b2:9c:0f:03:
a4:c9:49:8a:66:9f:10:8d:69:6d:fe:f5:f1:cc:f8:36:cd:8e:
76:e2:aa:a4:01:c7:e4:67:13:dc:d8:77:51:31:4d:dd:49:f5:
76:4b:99:eb:cb:14:fc:c9:08:80:50:9e:02:58:83:eb:3e:93:
0b:3b:77:a5:88:ab:66:a1:e1:bc:25:e9:10:ad:55:f8:26:b9:
fb:c9:c7:3a:ff:40:f0:c5:92:9d:e6:29:69:20:7c:f3:45:b7:
9c:60:bb:e4:05:22:db:2b:84:3d:d7:a5:d5:fd:f8:59:d1:d7:
ac:c7:14:d1:e9:a8:33:47:98:a7:cc:1e:90:21:b3:45:0d:5c:
24:78:46:02:b6:b2:96:5c:7a:ed:75:ce:81:db:a5:fd:5a:63:
c1:5b:e1:19:5d:8b:7a:41:07:6d:57:3e:64:17:77:fd:4e:1d:
23:90:38:1e:b1:a2:02:9d:51:22:96:3d:d3:6b:d1:5d:5c:d8:
68:ec:e0:a8:4e:01:ea:ce:c6:0b:18:48:d3:dc:b9:d6:95:2a:
5c:ff:a6:0f:69:2e:fb:ed:21:7a:7e:37:1f:e4:61:01:ea:90:
b8:49:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:32:20 2025 by rpki-client