Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/LaQdtaCABMApMNHmrwhF7M0p1Nk.roa
File: LaQdtaCABMApMNHmrwhF7M0p1Nk.roa (raw, json)
Hash identifier: LjsPK6iS3SlCNa6+WJPsV+vWi4cZJ9tZyx6GzTzsNNA=
Subject key identifier: 2D:A4:1D:B5:A0:80:04:C0:29:30:D1:E6:AF:08:45:EC:CD:29:D4:D9
Certificate issuer: /CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Certificate serial: 72AAB6
Authority key identifier: 83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/LaQdtaCABMApMNHmrwhF7M0p1Nk.roa
Signing time: Fri 04 Feb 2022 15:30:58 +0000
ROA not before: Fri 04 Feb 2022 15:30:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209628
IP address blocks: 45.133.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7514806 (0x72aab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Validity
Not Before: Feb 4 15:30:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2da41db5a08004c02930d1e6af0845eccd29d4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:58:98:43:dd:38:ea:82:5d:a7:f3:35:39:
f7:87:81:29:64:49:0d:48:87:9d:94:5f:a3:d9:9b:
0f:4d:86:26:83:70:4d:8e:54:00:9c:d6:b9:a0:e1:
61:25:29:d2:f8:f0:3d:4d:4f:78:22:29:c8:e6:cb:
fb:82:ef:7c:0a:0a:68:3c:b3:96:5e:0e:0c:18:6d:
cf:fd:85:58:8c:d9:d3:8b:b9:26:9a:2a:74:46:58:
0d:4f:4d:3b:e4:dc:e0:af:20:30:e4:0b:79:6d:81:
66:75:31:b6:b9:f3:a3:bf:2e:5c:f3:7c:f3:6e:cf:
b7:2b:22:dd:15:ea:1b:0a:2c:ca:e9:f7:b3:37:4b:
61:c8:c9:45:2f:24:b2:bc:8b:c2:79:2b:fb:4f:b9:
af:f7:a1:43:bc:3b:19:41:3a:93:39:fe:4e:74:ef:
b5:e5:04:fc:3e:eb:ed:1d:50:e8:54:77:14:f9:32:
8f:3c:32:b6:77:c7:c9:88:9a:1f:2e:dc:d9:cb:13:
cf:23:52:3a:64:a3:35:f2:72:0f:aa:15:51:31:d5:
89:73:13:1c:a6:aa:c3:e3:a4:8a:43:f7:d7:a1:bd:
a2:02:76:c1:e0:a3:4a:f9:dc:ef:8b:67:37:7e:c0:
45:70:81:5b:7a:de:21:47:17:aa:20:8e:cb:68:8e:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:1D:B5:A0:80:04:C0:29:30:D1:E6:AF:08:45:EC:CD:29:D4:D9
X509v3 Authority Key Identifier:
keyid:83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/LaQdtaCABMApMNHmrwhF7M0p1Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
71:74:30:24:cd:9a:92:6c:40:ff:62:d7:2d:eb:79:4c:e3:85:
55:8a:51:b8:fe:10:87:aa:cc:90:f2:77:14:dd:21:7f:56:78:
2f:19:ec:dd:a5:73:e8:a3:84:1e:d7:8b:2d:4e:eb:79:43:e5:
31:6e:57:38:ad:80:e0:bd:4f:96:e6:cf:88:93:bf:7c:f9:ad:
3f:95:d6:34:7b:4c:16:2a:40:2f:f7:17:65:b4:91:0b:5e:c0:
06:88:3e:26:17:95:54:95:57:8b:34:70:03:5a:d2:68:21:0d:
d4:08:36:7b:db:81:88:3d:a4:19:db:8a:ab:e3:ea:81:fd:d0:
f5:d7:ab:41:ff:a4:a5:06:9f:ed:a3:3b:d6:b0:d6:fb:af:52:
1f:a5:86:f1:66:21:f3:17:26:7b:06:54:6c:56:a1:d4:a3:e8:
f7:30:35:aa:f3:2c:29:23:8c:2e:23:25:3a:0b:0d:5e:2c:3f:
d0:eb:1c:e6:80:f0:93:e5:bd:fa:b0:9b:6a:27:95:25:8d:b5:
bd:71:c6:8d:72:45:f1:74:45:41:d1:77:1c:18:e9:e1:53:50:
c7:1f:72:d1:f9:b7:0b:8e:82:dd:6c:33:97:00:6e:a2:27:bd:
db:b6:7e:0d:29:54:c6:ca:df:21:b7:b5:c8:1f:48:dc:38:4d:
20:cf:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:27:52 2025 by rpki-client