Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/LatVmLe7_3HhJVu7rsLTHeovBKs.roa
File: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (raw, json)
Hash identifier: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=
Subject key identifier: 2D:AB:55:98:B7:BB:FF:71:E1:25:5B:BB:AE:C2:D3:1D:EA:2F:04:AB
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 01941FFA0E35D8289E194E453A7925127257
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/LatVmLe7_3HhJVu7rsLTHeovBKs.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43861
IP address blocks: 45.134.176.0/23 maxlen: 23
45.134.178.0/23 maxlen: 23
91.199.227.0/24 maxlen: 24
2a13:acc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0e:35:d8:28:9e:19:4e:45:3a:79:25:12:72:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dab5598b7bbff71e1255bbbaec2d31dea2f04ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:79:88:d6:80:9e:c7:3e:d1:e1:d4:00:a4:
32:c8:2f:1e:ac:a1:ec:2b:79:55:b7:3d:ba:b1:ca:
e1:c1:c2:57:6b:5d:2b:25:eb:d3:3d:15:a8:3c:38:
8b:23:80:cc:fa:24:8f:f6:c1:01:e5:bc:9f:f5:5c:
96:95:7b:2b:96:08:bd:2e:e3:c6:f5:38:22:ee:d8:
9c:18:a6:82:06:45:87:ca:05:63:e8:4e:e9:3f:5f:
73:77:ac:8e:c3:90:78:72:a7:29:ba:bf:67:df:75:
83:2e:c9:f7:de:10:65:b6:96:de:2a:66:e9:62:be:
2e:48:52:dd:f5:0c:41:ba:b9:a4:e8:61:c9:0d:ba:
42:c5:81:02:ed:2b:e2:da:c8:4c:33:f8:c9:f6:f0:
e0:64:69:e1:ed:02:99:fc:f0:b2:41:cb:dd:20:d1:
48:5e:e1:f5:5a:44:94:9d:b3:04:c5:a8:31:64:14:
4e:b7:e3:67:da:82:26:bc:17:79:92:48:7f:8f:22:
00:7d:64:1a:a7:33:b6:11:d1:20:81:c0:e0:b8:af:
0d:06:8d:88:76:8c:f1:e8:ce:5d:3e:94:2f:e4:3a:
2d:21:5c:02:ec:c7:62:26:31:56:58:cf:57:a0:69:
bb:c6:ea:4a:58:40:34:9e:22:ef:88:11:2e:68:ab:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:55:98:B7:BB:FF:71:E1:25:5B:BB:AE:C2:D3:1D:EA:2F:04:AB
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/LatVmLe7_3HhJVu7rsLTHeovBKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.176.0/22
91.199.227.0/24
IPv6:
2a13:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:df:1f:40:85:5c:3b:01:49:25:07:e7:f6:64:7c:67:a8:2f:
46:ff:69:aa:11:88:de:04:8d:e3:33:02:32:1e:52:a3:ca:20:
c5:c0:83:50:19:2b:87:45:b5:ef:72:0b:64:ca:da:7e:d5:4c:
7a:75:a0:be:d9:9e:31:e1:6f:b6:87:b3:8b:95:9e:d7:d6:d3:
e9:19:3c:a4:de:35:61:80:35:c1:c9:8b:73:bf:a9:a5:b3:08:
d6:cc:e3:4d:8e:7c:97:bb:30:4c:40:d6:6c:b1:d7:d9:c9:18:
55:a4:79:cb:67:37:8a:73:c7:c3:f9:57:f5:8f:8b:dd:45:0c:
02:24:df:4b:db:97:4e:6c:79:57:5b:30:4a:5e:ee:a9:95:16:
7d:4d:2d:42:74:78:fc:c2:26:9d:b9:6d:b2:cf:68:d8:8e:77:
8f:bd:a5:45:f0:c7:1e:86:e9:77:5d:fb:f2:a4:7e:6c:89:36:
75:a0:89:d4:35:86:bb:c1:6c:da:ea:c8:77:74:2e:91:4d:52:
d7:ad:cc:63:5d:1b:cf:cd:c5:a3:62:58:a2:f1:0f:03:fa:3d:
b6:83:78:1c:33:a2:38:5c:50:09:5d:d2:0a:79:35:1c:8c:94:
c2:6a:0c:03:3a:ad:32:cd:c8:07:7b:8e:f6:fc:9c:a8:05:a0:
e3:d8:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:38 2025 by rpki-client