Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/Lmq-65cXmJjYlux89MFz3Iu9Fw8.roa
File: Lmq-65cXmJjYlux89MFz3Iu9Fw8.roa (raw, json)
Hash identifier: qmicYrcQm3Rq08O/DhyLzmuk/28w0SgSGaSRkPUSLmg=
Subject key identifier: 2E:6A:BE:EB:97:17:98:98:D8:96:EC:7C:F4:C1:73:DC:8B:BD:17:0F
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 019421B23325D81D99068D23D2618A3C9AD5
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/Lmq-65cXmJjYlux89MFz3Iu9Fw8.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203446
IP address blocks: 45.157.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:33:25:d8:1d:99:06:8d:23:d2:61:8a:3c:9a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e6abeeb97179898d896ec7cf4c173dc8bbd170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:05:7c:00:c5:55:8d:59:e8:c0:e8:5a:2f:
a4:8c:aa:88:f8:8c:68:9e:2f:de:b7:cd:08:52:6c:
56:9b:b7:21:33:de:2f:cc:11:57:40:5a:48:5d:39:
04:e8:d0:15:94:b6:5b:66:da:89:e2:9a:b0:43:59:
29:a5:b2:22:dc:af:44:56:09:0e:b4:8c:46:cc:b2:
35:48:21:7d:7d:63:ca:fc:70:4c:64:32:b7:40:12:
c6:96:d7:67:12:9d:68:58:15:62:6a:eb:fe:25:fa:
24:20:60:e9:a3:09:ed:0e:81:e2:93:3c:5e:4f:b5:
99:d7:5c:5b:72:ee:6c:08:d0:64:8e:2f:a3:6f:92:
1c:7a:a9:ae:e9:40:5e:2e:06:f0:fc:1d:7a:01:f4:
87:a2:d4:42:24:66:dc:f6:c2:eb:a0:0a:42:ec:c8:
c9:d0:b4:16:98:0e:6b:59:45:0f:8e:23:78:40:6e:
b8:be:78:6f:cc:17:65:99:e4:31:1f:bb:79:4e:39:
6f:e8:31:7b:79:fe:84:7e:17:17:38:83:da:e6:41:
74:18:11:f9:76:df:bb:da:b3:bb:ba:f7:7f:b9:11:
d2:7c:e2:5b:b6:2e:24:40:b8:71:fe:ee:3e:3d:41:
4a:30:4e:7b:64:8a:7a:79:a4:74:7c:f6:d2:d7:d0:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6A:BE:EB:97:17:98:98:D8:96:EC:7C:F4:C1:73:DC:8B:BD:17:0F
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/Lmq-65cXmJjYlux89MFz3Iu9Fw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.11.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0e:9a:e5:1a:77:7b:c5:1c:ad:4f:65:1a:83:6c:fc:14:f7:
73:7d:e5:3c:42:3e:61:a7:e2:c4:e5:45:80:70:eb:3a:2a:79:
91:8a:e6:5f:eb:31:41:58:57:88:9b:af:a2:1e:32:f6:55:c2:
b4:53:f3:3d:e4:89:a2:12:56:2c:6d:30:b3:b6:c5:d2:28:73:
4c:02:ec:97:9d:96:94:0c:b5:8d:d5:e4:31:79:6f:a6:1a:a0:
b6:65:db:de:91:34:86:9a:31:b5:0f:13:f2:53:47:57:0e:7d:
c7:6e:30:fb:c7:fa:da:b8:ac:cb:a2:f0:e4:b5:ec:95:7e:f4:
23:38:db:d2:8f:e3:7e:76:0e:01:d3:95:7d:e9:7b:2b:d3:ab:
50:cd:a5:48:55:7e:1a:a8:c2:0d:fb:81:d7:1a:38:06:de:ce:
e4:82:3d:1d:93:d9:c2:50:78:18:d2:ec:c1:4a:fa:7d:5a:1d:
8c:04:0d:ab:3a:6d:f6:14:57:08:d6:62:36:d5:44:53:85:f1:
9d:b8:d0:fb:08:6b:27:e5:49:e1:46:7d:2f:b2:ee:91:bf:b5:
53:2c:5e:29:ce:9e:34:3b:1a:bd:55:23:37:ea:60:21:f4:e5:
e5:4f:88:30:d5:d0:c4:92:68:56:70:6a:99:cc:9c:9b:d9:dc:
72:1f:7e:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsjMl2B2ZBo0j0mGKPJrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3
ZmRkNDgwHhcNMjUwMTAxMTE0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTZhYmVlYjk3MTc5ODk4ZDg5NmVjN2NmNGMxNzNkYzhiYmQxNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUUFfADFVY1Z6MDoWi+kjKqI+Ixo
ni/et80IUmxWm7chM94vzBFXQFpIXTkE6NAVlLZbZtqJ4pqwQ1kppbIi3K9EVgkO
tIxGzLI1SCF9fWPK/HBMZDK3QBLGltdnEp1oWBViauv+JfokIGDpowntDoHikzxe
T7WZ11xbcu5sCNBkji+jb5Iceqmu6UBeLgbw/B16AfSHotRCJGbc9sLroApC7MjJ
0LQWmA5rWUUPjiN4QG64vnhvzBdlmeQxH7t5Tjlv6DF7ef6EfhcXOIPa5kF0GBH5
dt+72rO7uvd/uRHSfOJbti4kQLhx/u4+PUFKME57ZIp6eaR0fPbS19DI6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5qvuuXF5iY2JbsfPTBc9yLvRcPMB8GA1UdIwQY
MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt
YzVmZWJlNDg3YzQwLzEvTG1xLTY1Y1htSmpZbHV4ODlNRnozSXU5Rnc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw
LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0LMA0G
CSqGSIb3DQEBCwUAA4IBAQAGDprlGnd7xRytT2Uag2z8FPdzfeU8Qj5hp+LE5UWA
cOs6KnmRiuZf6zFBWFeIm6+iHjL2VcK0U/M95ImiElYsbTCztsXSKHNMAuyXnZaU
DLWN1eQxeW+mGqC2ZdvekTSGmjG1DxPyU0dXDn3HbjD7x/rauKzLovDkteyVfvQj
ONvSj+N+dg4B05V96Xsr06tQzaVIVX4aqMIN+4HXGjgG3s7kgj0dk9nCUHgY0uzB
Svp9Wh2MBA2rOm32FFcI1mI21URThfGduND7CGsn5UnhRn0vsu6Rv7VTLF4pzp40
Oxq9VSM36mAh9OXlT4gw1dDEkmhWcGqZzJyb2dxyH36x
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:34 2025 by rpki-client