Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa
File: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (raw, json)
Hash identifier: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=
Subject key identifier: 97:02:BE:B5:D5:56:31:7A:C7:61:57:5B:9F:89:14:09:30:15:CC:27
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019420683A0927F5A3B060DC46DF183067DB
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203071
IP address blocks: 45.147.94.0/24 maxlen: 24
2a13:4e80::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3a:09:27:f5:a3:b0:60:dc:46:df:18:30:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9702beb5d556317ac761575b9f8914093015cc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:70:6c:53:92:7e:c6:53:b6:05:95:aa:0b:
55:cd:13:9e:dd:a8:46:12:7f:fa:8e:1d:df:29:99:
6a:91:9b:6a:01:79:89:f8:ea:50:c9:c9:a7:ef:09:
43:04:85:fe:94:07:89:87:a6:d0:02:7b:42:b6:a1:
d4:0e:8d:19:b5:90:ef:bb:35:87:dc:75:ae:5b:1f:
e3:47:19:dc:41:3b:8c:da:6c:6f:ab:de:c5:5d:51:
f6:a5:8d:f1:58:40:ad:c4:b6:fd:8a:df:c9:4c:bd:
a1:4b:9f:63:5a:d4:6d:e3:4f:1d:24:1c:79:c9:7e:
3c:79:1f:96:bd:df:93:91:b3:55:ee:8c:f8:f4:70:
ea:f9:37:86:57:50:4b:51:02:08:7f:55:bd:c7:af:
11:02:cb:e6:a4:52:8f:53:79:3c:48:82:75:aa:1e:
79:a5:ea:66:82:eb:36:31:bb:2f:33:51:be:41:63:
3e:46:c2:34:fc:ff:40:ca:bd:7f:b4:ee:3d:88:8f:
81:41:9b:27:13:89:8a:42:af:96:2c:e0:cc:b1:1e:
d3:e9:06:8a:8a:27:24:72:9b:d8:76:c9:3a:59:a5:
20:db:be:ee:42:69:ea:fb:7d:a9:77:c1:86:61:45:
f9:95:46:42:4f:0f:6e:08:00:13:32:3f:e7:41:17:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:BE:B5:D5:56:31:7A:C7:61:57:5B:9F:89:14:09:30:15:CC:27
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.94.0/24
IPv6:
2a13:4e80::/40
Signature Algorithm: sha256WithRSAEncryption
9c:b0:c6:8e:27:f7:02:52:14:3e:ab:10:17:61:de:85:f6:0a:
ea:15:2d:5b:f0:29:56:98:1b:08:74:cd:70:99:3f:27:63:b3:
b7:ac:e6:64:78:cf:cd:af:13:87:76:5c:bb:97:e7:c8:d5:8f:
26:6e:7d:72:d1:84:bc:bd:16:06:94:ed:63:d7:d3:83:9f:34:
aa:1d:22:2c:9f:69:31:17:c9:61:ce:0c:f1:c7:bb:d7:e5:e4:
94:fd:58:ae:c4:7d:23:e2:74:4d:88:e5:ab:19:6d:64:0b:d2:
14:73:3d:14:80:3f:f0:ba:75:1e:9d:12:40:eb:b7:13:b9:b1:
28:df:99:36:eb:de:33:6f:7a:44:fb:5b:4d:19:71:68:74:b5:
60:57:bc:08:e3:9a:a8:f6:da:6d:7c:bd:54:3c:0f:f2:d3:41:
87:6d:dd:4a:ed:15:ed:65:59:8a:46:ea:d4:9a:d7:90:04:44:
d3:a3:ea:53:19:28:4b:dd:2a:f9:7b:6c:a5:de:4c:00:0f:fb:
43:ec:7d:a0:50:7d:f4:98:6f:32:56:e8:49:e6:3a:9a:46:c4:
e9:dc:36:81:2d:a0:91:63:71:91:51:42:a1:50:56:2e:d2:77:
87:73:3b:c3:1a:92:e5:1e:c3:40:9b:8d:66:da:29:d5:17:44:
88:b8:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:48 2025 by rpki-client