Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ljRRz0tp8RJKAs8XPl_Gn98v4R0.roa
File: ljRRz0tp8RJKAs8XPl_Gn98v4R0.roa (raw, json)
Hash identifier: aLRBAXla0ihbGnr3HOIAf6K2uVigcEx/vGf7gxvYS94=
Subject key identifier: 96:34:51:CF:4B:69:F1:12:4A:02:CF:17:3E:5F:C6:9F:DF:2F:E1:1D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23BDDE93DC3BC925F7EBA943A033E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ljRRz0tp8RJKAs8XPl_Gn98v4R0.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 45.89.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3b:dd:e9:3d:c3:bc:92:5f:7e:ba:94:3a:03:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=963451cf4b69f1124a02cf173e5fc69fdf2fe11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:58:e3:13:e5:1a:10:17:47:cb:12:21:57:
17:c6:aa:fb:35:5c:ce:2d:59:da:1b:ca:45:8f:51:
24:5d:48:8d:85:ae:c6:3a:3b:ab:1e:1f:a1:ca:69:
7b:cf:ac:e4:fb:6f:d3:6a:bb:17:9e:24:41:a9:2b:
8b:1c:56:0f:5b:e3:c1:b0:c1:a6:d5:37:9a:d1:fb:
94:ce:b2:da:a5:d9:58:09:3e:34:a6:f4:16:92:e4:
6f:c5:6d:57:44:54:08:90:07:0a:e4:fe:67:df:aa:
41:1e:3e:1a:5b:4b:d9:0d:12:9c:18:d7:ac:45:2a:
0a:ed:7e:72:e0:36:ab:77:68:d1:75:fb:ff:66:d9:
23:16:39:26:c7:39:1b:29:49:a0:9e:27:0a:39:7f:
1e:1f:aa:91:2e:ad:d1:05:1b:5a:70:47:a4:19:07:
4a:74:19:ab:12:06:25:5a:c9:d8:7f:67:2f:31:da:
88:c2:57:f6:63:ce:c1:8b:fa:2a:c6:06:2c:fc:e2:
9c:93:1a:1b:07:b9:82:44:e7:29:c0:66:49:12:13:
2f:31:53:b5:8d:61:c1:be:75:29:46:de:8a:ef:88:
5f:57:b3:c5:ab:6f:0f:3c:75:8d:a1:57:3f:a5:b8:
ac:0f:aa:12:8e:da:b4:5f:6d:ba:05:93:34:9e:ca:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:51:CF:4B:69:F1:12:4A:02:CF:17:3E:5F:C6:9F:DF:2F:E1:1D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ljRRz0tp8RJKAs8XPl_Gn98v4R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:45:95:73:69:3c:68:9e:b4:ba:e9:d9:09:2a:a0:65:bc:ad:
bb:22:b8:39:74:ca:94:56:d5:48:ad:ca:d5:8e:6d:c8:cd:61:
e7:4a:11:e7:a7:51:e9:8d:42:e4:eb:d4:56:32:66:bb:4e:c2:
98:ae:db:92:8b:33:e0:fa:cb:5b:e9:5c:ec:66:92:d4:52:d7:
1f:09:16:44:e7:c2:e6:e0:ee:4b:8d:7e:2a:2e:b4:00:d8:fe:
13:3a:d2:71:28:ae:d0:c1:3f:b9:b8:92:e3:b8:ea:75:7b:c1:
aa:11:2e:cc:0c:59:60:c8:9a:cc:a0:9e:a0:c5:d1:b8:4a:19:
4b:65:54:65:9a:ff:d2:b0:61:80:e0:5c:79:22:f9:96:e0:14:
a8:74:a6:dc:6b:c0:32:f4:27:25:36:b0:09:33:9b:4d:e1:b5:
28:73:bf:24:fa:e6:e3:39:83:3f:15:c1:03:ec:d8:d7:e6:b6:
38:df:a9:98:85:1d:cf:07:da:b9:35:c3:bc:5a:25:32:1b:ae:
a9:cd:23:65:8c:6d:90:92:40:5b:94:af:a4:89:92:f7:23:5d:
43:30:59:e7:e7:f6:80:0b:46:51:b2:9b:57:01:10:ed:6f:0f:
2a:11:36:a5:84:af:fc:fb:d0:8f:aa:d2:94:34:49:5a:e9:4b:
1a:9c:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:36:21 2025 by rpki-client