Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/LRmAFx6q6erwroYFlG8E6BiVohg.roa
File: LRmAFx6q6erwroYFlG8E6BiVohg.roa (raw, json)
Hash identifier: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=
Subject key identifier: 2D:19:80:17:1E:AA:E9:EA:F0:AE:86:05:94:6F:04:E8:18:95:A2:18
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019423D7FA39198A736F29750A16577A8967
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/LRmAFx6q6erwroYFlG8E6BiVohg.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203546
IP address blocks: 45.150.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:39:19:8a:73:6f:29:75:0a:16:57:7a:89:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d1980171eaae9eaf0ae8605946f04e81895a218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:4e:14:41:38:7a:d0:34:a1:eb:90:cd:d3:
f6:ec:ab:10:d7:44:55:68:c2:f4:c9:98:f4:39:ec:
27:df:24:59:83:a0:51:e5:ab:b8:37:9d:15:66:cb:
8a:de:e3:74:55:b1:fc:17:32:a0:37:68:ac:fc:d6:
5a:00:70:5e:35:25:79:31:10:ab:b3:88:93:67:17:
4d:e1:11:6b:39:91:fe:56:d5:92:db:dd:a2:ff:d8:
5b:43:97:a3:1c:be:4f:7a:4b:de:1a:ab:84:e7:10:
29:d0:c8:f9:cb:8f:c9:1f:26:31:48:5c:e9:84:6f:
fb:b1:b4:fd:69:4d:b9:e7:31:d1:05:ad:f1:ef:ea:
b9:6a:60:d1:bb:ab:a2:2f:75:76:00:25:ce:63:44:
7e:23:b6:ea:14:b7:ec:29:2d:9c:e1:04:e5:c7:a4:
96:7c:59:dc:96:8a:ec:8f:af:60:b7:71:e1:c4:91:
db:b3:d1:95:19:ba:bc:da:22:14:7e:40:03:f4:ec:
03:24:41:ae:65:ac:81:57:88:0f:40:e0:1e:df:c0:
94:9a:10:e7:4c:34:96:d6:30:ba:bc:be:9d:64:18:
a8:37:96:89:77:11:99:b0:81:39:2a:59:8b:ad:78:
b4:81:f5:f5:e2:d5:8b:53:ce:01:b8:9c:da:b7:73:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:19:80:17:1E:AA:E9:EA:F0:AE:86:05:94:6F:04:E8:18:95:A2:18
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/LRmAFx6q6erwroYFlG8E6BiVohg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.69.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2a:05:74:da:fd:c8:6b:e9:7f:c9:42:7a:2d:4f:53:64:4f:
b7:41:fe:e4:60:a9:57:68:ab:d6:31:41:f0:87:1c:cd:28:c9:
6c:84:66:07:2a:21:86:dc:0e:cd:5a:fa:5c:7f:2b:66:56:6e:
d4:a3:85:ff:13:0c:92:44:ae:1f:1c:cd:ab:8a:0c:fb:6c:a5:
43:aa:a7:00:67:b4:53:59:5b:53:70:a5:2c:f3:bb:8f:f0:d9:
bd:63:e2:73:a9:25:71:2f:ed:51:a0:78:9b:d8:6f:96:9b:7c:
61:d5:39:c2:8c:6a:f7:18:55:6f:eb:6d:8a:9d:4e:38:d4:61:
a1:43:84:6f:e5:3e:84:9f:8b:24:17:48:6f:d5:54:1a:54:9f:
dc:ce:dc:7a:12:d4:25:ef:34:f0:60:89:e9:fc:f6:ac:46:aa:
37:eb:c1:ce:9c:46:46:91:6f:0f:96:50:5d:09:3b:04:c8:da:
a1:75:79:cf:86:54:a3:12:9a:73:fd:53:ef:f3:97:ac:43:8a:
7c:0a:4c:35:2b:57:ab:5e:3b:41:59:5a:25:9f:e0:04:3b:5f:
c6:74:c7:ff:3d:52:3c:d1:cd:64:cb:4f:1f:86:ad:71:40:10:
2f:f0:b8:72:52:6a:03:b5:8d:c2:8e:d3:c9:bc:7a:52:da:1e:
49:c2:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:47 2025 by rpki-client