Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/LbOvYceSTIynIMCrLX6ZQ5TJjug.roa
File: LbOvYceSTIynIMCrLX6ZQ5TJjug.roa (raw, json)
Hash identifier: 3rF9oh0b0058htJNjG4wEt+X1YSMVZ0kahp9A39qMf0=
Subject key identifier: 2D:B3:AF:61:C7:92:4C:8C:A7:20:C0:AB:2D:7E:99:43:94:C9:8E:E8
Certificate issuer: /CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Certificate serial: 0182249F1BA3C4BBBD8C6D446E3BB494321F
Authority key identifier: 9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/LbOvYceSTIynIMCrLX6ZQ5TJjug.roa
Signing time: Fri 22 Jul 2022 06:36:23 +0000
ROA not before: Fri 22 Jul 2022 06:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.128.97.0/24 maxlen: 24
45.128.98.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:9f:1b:a3:c4:bb:bd:8c:6d:44:6e:3b:b4:94:32:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Validity
Not Before: Jul 22 06:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db3af61c7924c8ca720c0ab2d7e994394c98ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:7a:4d:8d:e5:3d:d5:fa:98:30:58:4e:1a:
87:84:bd:e4:ad:83:8f:76:38:46:8a:c2:05:9a:57:
7e:fa:c1:7a:46:fa:4d:8d:a8:f6:8b:1e:c6:9e:0e:
1f:2f:7a:1e:35:5e:90:2b:da:79:24:84:24:bc:56:
ec:78:ff:e1:28:fd:ff:8a:3c:98:75:37:f6:c1:7c:
4c:a1:91:c8:0d:e2:2d:86:b9:28:1d:c9:a0:69:4a:
8f:58:6f:66:03:4b:4d:e8:4f:99:6f:44:9c:ac:71:
02:04:b3:65:22:af:45:92:65:66:88:37:52:99:de:
78:b6:7f:c0:20:c0:6a:96:07:ea:b7:06:b9:81:09:
b5:1f:e9:31:09:7a:2e:51:89:51:69:34:84:28:9d:
5b:d9:50:3a:99:60:c4:5f:5e:e3:5c:37:5b:de:80:
67:21:4c:1a:b2:85:21:aa:79:11:cf:e3:72:93:96:
b5:0b:10:d9:93:cf:5d:3a:29:ca:dc:6a:b4:a5:ea:
eb:bc:48:7c:3d:98:4b:bb:98:56:78:f4:ee:96:f5:
5e:f0:2d:50:a5:fd:3c:32:00:fc:3d:bf:e9:a5:75:
97:a2:93:d0:dc:1c:a2:76:94:fb:b9:89:d7:01:4c:
98:27:e8:47:71:93:c7:a5:18:0f:33:b9:74:9a:13:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:AF:61:C7:92:4C:8C:A7:20:C0:AB:2D:7E:99:43:94:C9:8E:E8
X509v3 Authority Key Identifier:
keyid:9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/LbOvYceSTIynIMCrLX6ZQ5TJjug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0-45.128.98.255
Signature Algorithm: sha256WithRSAEncryption
81:c1:fa:a3:44:e1:41:c5:22:29:3f:89:59:87:7e:43:d6:81:
d1:0e:44:79:0d:36:2c:b4:40:38:03:27:4d:07:79:7f:94:8d:
d5:f8:1a:6a:14:b5:a9:fa:5f:43:7c:9a:36:8d:21:6a:fd:0e:
95:cb:28:2f:45:ef:fc:69:6b:69:f4:d5:e1:80:2f:68:7a:5c:
e4:64:b9:57:fd:85:85:88:44:70:e0:99:9c:a6:32:9e:2b:44:
00:2b:93:ba:79:09:81:d5:1e:0e:70:a7:03:04:6f:bc:07:1e:
a4:7b:a7:70:19:bd:79:60:0a:3e:0b:15:17:bf:1b:9e:03:08:
a1:8c:80:08:74:1b:b3:fa:84:3d:c6:03:96:3c:79:20:ab:22:
96:97:bb:8a:04:10:7f:bb:29:b5:cb:a3:8f:06:8d:b2:a7:0b:
b1:b3:04:49:c0:46:9c:7b:7f:4b:ba:b9:02:35:43:03:1d:e7:
9c:3d:54:ea:c7:66:0b:f2:98:98:f4:db:20:8a:cd:46:f9:8f:
44:8a:f2:a0:4b:6a:a4:f9:9d:c6:81:e0:b4:71:a4:b9:2a:65:
4d:91:65:01:f0:85:26:9f:11:1c:f1:be:ed:f4:1c:51:08:78:
78:77:9b:9c:0d:58:e5:33:43:e9:25:ce:7d:2f:51:07:48:4a:
14:f5:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:23:33 2025 by rpki-client