Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Ljre19ORDYBEFOUyuoXkd9jD1u0.roa
File: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (raw, json)
Hash identifier: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=
Subject key identifier: 2E:3A:DE:D7:D3:91:0D:80:44:14:E5:32:BA:85:E4:77:D8:C3:D6:ED
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 0194E3D16CFD5D55297886C66357F9C54883
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Ljre19ORDYBEFOUyuoXkd9jD1u0.roa
Signing time: Sat 08 Feb 2025 04:29:00 +0000
ROA not before: Sat 08 Feb 2025 04:29:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 932
IP address blocks: 45.128.146.0/23 maxlen: 24
45.131.179.0/24 maxlen: 24
45.132.238.0/23 maxlen: 24
45.133.238.0/23 maxlen: 24
45.134.82.0/23 maxlen: 24
45.135.118.0/23 maxlen: 24
45.137.10.0/23 maxlen: 24
45.140.90.0/23 maxlen: 24
91.217.162.0/24 maxlen: 24
91.238.203.0/24 maxlen: 24
91.238.207.0/24 maxlen: 24
185.106.176.0/22 maxlen: 24
193.200.130.0/24 maxlen: 24
193.200.134.0/24 maxlen: 24
193.200.149.0/24 maxlen: 24
193.200.152.0/24 maxlen: 24
193.227.103.0/24 maxlen: 24
193.227.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e3:d1:6c:fd:5d:55:29:78:86:c6:63:57:f9:c5:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Feb 8 04:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3aded7d3910d804414e532ba85e477d8c3d6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:2e:ad:00:c0:0c:20:57:a8:f0:d5:74:a9:
1d:3f:74:f9:9b:63:33:1d:d9:21:61:46:ca:48:bc:
8d:29:cf:bd:18:51:c1:32:30:f9:3e:89:9c:67:e3:
51:5d:50:99:dd:66:54:2e:69:9d:8d:f9:53:6d:f7:
85:dd:9e:e0:94:08:3d:6b:0a:df:75:25:1b:3c:69:
4d:62:bb:d2:05:40:93:81:75:df:2f:d5:3a:17:30:
cc:39:60:b5:f1:42:d5:2e:f4:c2:6d:78:46:00:f3:
f4:b4:42:d8:fa:15:80:20:5e:22:3b:c5:56:39:9f:
3d:3c:d9:05:a4:ff:df:18:4a:bb:97:d9:e4:41:be:
91:0c:7a:61:6f:ac:11:58:dc:55:b1:44:65:5c:71:
29:f3:67:2f:c6:40:03:fb:91:0f:fa:27:9b:b9:87:
e0:cb:db:86:db:44:13:7c:3f:8c:30:61:bf:ec:71:
f1:ab:26:e5:03:4e:53:ed:ff:2b:f6:eb:ee:c7:cc:
db:9c:a1:47:ac:c7:91:47:f2:c4:02:7c:df:c6:4d:
30:18:b1:5e:61:ee:ed:fb:4a:42:6a:48:82:f8:d8:
1c:59:6d:8a:db:67:aa:13:d7:22:9a:a1:63:c7:1e:
49:a8:ac:92:51:b9:65:3e:75:75:01:7e:b0:7d:d6:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:DE:D7:D3:91:0D:80:44:14:E5:32:BA:85:E4:77:D8:C3:D6:ED
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Ljre19ORDYBEFOUyuoXkd9jD1u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.146.0/23
45.131.179.0/24
45.132.238.0/23
45.133.238.0/23
45.134.82.0/23
45.135.118.0/23
45.137.10.0/23
45.140.90.0/23
91.217.162.0/24
91.238.203.0/24
91.238.207.0/24
185.106.176.0/22
193.200.130.0/24
193.200.134.0/24
193.200.149.0/24
193.200.152.0/24
193.227.103.0/24
193.227.109.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ba:72:2b:70:e6:96:6f:59:c2:49:b7:38:fa:be:2e:aa:64:
02:25:86:db:90:67:66:08:e2:39:42:46:4e:92:53:44:29:88:
13:08:fe:5b:3b:af:86:39:3f:5f:d2:f9:79:ae:f9:c6:1c:a3:
8d:c6:3e:2b:29:a4:08:5f:5b:bb:c8:30:26:60:f6:dc:14:48:
c1:e8:32:89:81:25:b7:55:37:50:ea:66:d3:dd:24:65:41:06:
31:8c:6f:28:49:2b:5b:35:c0:16:04:b8:73:1b:a9:a4:f0:2a:
1b:ce:b9:f9:d8:cc:75:25:ef:a7:35:7f:11:ad:8c:a7:ba:6a:
71:26:48:5e:c9:1f:19:7f:62:c3:78:8b:3f:e1:f1:92:fc:4b:
21:40:f7:d5:16:78:c7:b4:07:52:b0:dd:90:c5:ce:55:92:59:
14:37:33:20:26:c6:d9:58:f8:21:36:27:2f:96:4d:79:6d:2e:
f6:88:99:c6:f7:ac:db:e3:c0:34:f9:6a:d5:5c:d8:7d:a3:22:
06:ca:dd:9d:25:fb:43:8b:ad:4b:00:04:86:99:ec:e4:bf:5c:
bf:91:04:9b:b7:f1:e3:da:b7:03:b9:2a:fe:87:87:6d:90:7f:
bd:17:be:4f:c3:58:10:1a:d4:e7:14:a2:25:1f:f4:71:22:bb:
66:1c:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:49 2025 by rpki-client