Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LnwM4nBTi0vqbHYhg3ZutGw9GK0.roa
File: LnwM4nBTi0vqbHYhg3ZutGw9GK0.roa (raw, json)
Hash identifier: BFCNpYb4iJCOfC9M+kAjWLcI8mxEUPp/CPumlvSCIV4=
Subject key identifier: 2E:7C:0C:E2:70:53:8B:4B:EA:6C:76:21:83:76:6E:B4:6C:3D:18:AD
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B246B239BD847A8F4B0A23CC969444
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LnwM4nBTi0vqbHYhg3ZutGw9GK0.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203470
IP address blocks: 45.8.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:b2:39:bd:84:7a:8f:4b:0a:23:cc:96:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7c0ce270538b4bea6c762183766eb46c3d18ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:43:70:76:35:2e:bc:19:c3:27:5f:8b:ab:
b7:55:17:79:16:a5:b4:25:da:b8:2a:39:37:ab:ab:
48:01:c8:c4:e4:0a:fd:33:88:14:94:63:fa:e5:6d:
36:d2:42:d0:17:47:5e:64:da:0f:d1:90:d7:cd:96:
e7:53:ce:3a:a6:f4:15:6b:d6:a5:ff:17:83:4c:6f:
61:1d:6e:88:0c:b7:9f:62:2e:d7:99:b8:e2:c2:1d:
1d:e3:3d:28:05:66:b9:48:f8:6c:42:93:9b:d1:2c:
05:04:07:51:a1:0f:7b:7a:e3:06:cd:76:87:c9:33:
75:e1:29:c6:ec:fb:9c:d3:d5:65:35:e2:01:6a:6f:
a3:b6:4d:54:87:65:8d:51:d2:f7:c0:d0:42:b2:16:
1e:f9:cc:2d:4c:77:e7:27:78:1d:82:2c:2e:82:c4:
73:33:6f:51:c4:b1:b2:e8:fa:6b:a1:a5:ae:e1:e4:
e9:4b:05:fd:50:5f:7e:95:33:4c:39:0d:08:34:74:
6d:10:aa:ea:e7:04:98:e9:83:23:06:e7:d0:01:d0:
92:fa:bf:52:ac:d7:50:90:96:45:ed:6d:72:d8:ac:
93:1f:98:04:50:be:eb:37:d6:f6:4b:4c:c4:b9:ea:
bb:c6:3e:39:12:6f:5f:60:70:cf:1f:0e:f9:9d:f7:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:0C:E2:70:53:8B:4B:EA:6C:76:21:83:76:6E:B4:6C:3D:18:AD
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LnwM4nBTi0vqbHYhg3ZutGw9GK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3a:e1:e3:2e:5a:59:07:7f:9e:92:0d:1b:9e:13:bf:65:b0:
43:53:83:14:63:e8:a2:52:fb:9e:3a:a1:10:bc:6b:e7:bc:7f:
65:66:54:76:b8:6c:8a:89:ef:b9:f4:e2:77:0a:98:37:a3:54:
f0:4e:80:75:9c:ae:cb:38:c1:8e:2a:79:61:9f:86:e0:ff:56:
87:b8:c4:7b:06:2a:5a:9c:0c:28:08:32:0c:32:d4:ca:25:e5:
2a:09:2c:66:92:3d:49:d9:35:e8:9f:2c:7e:82:f5:64:d9:f7:
d5:e1:71:5a:b0:1c:0a:84:b7:c6:33:f7:bc:75:19:2b:94:30:
c2:29:1f:2e:8e:63:b8:09:7e:b5:72:be:6c:09:9f:df:4e:69:
eb:71:19:67:b4:2e:8d:65:ea:39:be:05:ad:ca:4b:a9:17:b5:
d1:9e:1a:70:3c:d8:3c:86:ea:23:7c:d5:8f:63:8a:d7:29:bc:
72:f3:0b:31:00:0d:73:d8:73:db:34:69:31:66:5c:c3:a7:96:
ac:13:07:7c:2d:7d:bb:9d:b1:c2:2e:20:19:d2:fd:64:fd:82:
33:3c:fb:53:cc:41:3a:79:f2:a3:2c:fa:df:2c:4d:55:62:e0:
4b:73:3b:35:2b:e2:32:47:63:c4:34:ce:b2:e5:7c:27:89:38:
e1:67:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:07 2025 by rpki-client