Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/LBAtNauEhg47TrJyUiE2YMa8sBo.roa
File: LBAtNauEhg47TrJyUiE2YMa8sBo.roa (raw, json)
Hash identifier: vYTBQ3tAasTgPmQWuiJV8kR66aOzn9OK+a8N6urr2ao=
Subject key identifier: 2C:10:2D:35:AB:84:86:0E:3B:4E:B2:72:52:21:36:60:C6:BC:B0:1A
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0193E9A7ABA86C656B8D4090328505FC0A39
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/LBAtNauEhg47TrJyUiE2YMa8sBo.roa
Signing time: Sat 21 Dec 2024 14:38:19 +0000
ROA not before: Sat 21 Dec 2024 14:38:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 45.95.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:a7:ab:a8:6c:65:6b:8d:40:90:32:85:05:fc:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Dec 21 14:38:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c102d35ab84860e3b4eb27252213660c6bcb01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:bb:b8:2c:38:1b:ca:21:ac:41:25:b0:36:
2e:27:19:41:ab:39:62:b0:92:52:9e:c9:0b:04:19:
22:d4:d4:a8:f6:de:a4:44:9b:b6:be:97:6f:c0:11:
e9:50:92:02:a0:88:9f:e7:82:33:d1:f0:03:6b:1d:
29:96:99:6e:a7:4a:8d:00:53:84:81:1b:bf:ce:1a:
47:dd:70:35:f2:30:d2:f5:5d:45:52:46:2f:21:05:
ed:17:2f:8f:11:aa:c0:71:55:8c:76:35:9b:47:be:
12:54:0a:75:87:c5:64:2b:92:ef:13:4c:0b:e6:86:
b5:5d:e5:1e:b3:c0:48:49:c2:14:ce:53:e6:27:f7:
39:be:a3:bd:c1:e0:34:f5:5a:bc:08:17:64:a0:7e:
e0:d6:ff:38:c1:e6:0d:7d:8d:d7:39:05:0c:ea:4a:
e1:12:41:7f:19:79:3d:b7:62:1d:fa:61:ad:df:90:
31:a3:1b:6b:11:10:4c:fd:b9:52:9b:f2:f1:35:1a:
18:f0:63:c1:38:99:3d:a6:9a:4d:4d:f3:69:92:7e:
3c:d8:af:a2:42:6d:71:10:fd:1e:8a:57:d9:91:9d:
d1:54:d6:51:51:bf:d8:8b:42:72:69:7d:77:82:44:
20:91:84:6e:98:c2:12:d2:d2:d8:90:90:d0:a2:f0:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:2D:35:AB:84:86:0E:3B:4E:B2:72:52:21:36:60:C6:BC:B0:1A
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/LBAtNauEhg47TrJyUiE2YMa8sBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:84:bb:44:79:b5:bf:03:a9:9e:e7:a7:40:48:de:bf:75:f3:
ee:b1:4e:72:44:d0:39:8c:87:24:03:9f:b9:71:37:85:42:a3:
b3:f7:1f:10:3b:5d:ae:85:25:8f:ac:e9:5e:6e:15:80:b8:77:
f5:e6:1e:a3:2c:4e:70:f1:f6:b1:8b:b5:6f:bc:db:7a:76:ef:
33:41:6c:0d:20:4a:20:4a:dd:ed:24:7c:aa:0a:8e:2d:c0:52:
8e:f0:b9:56:25:ec:28:f8:a3:e6:04:7b:c4:ee:71:44:96:5d:
77:91:33:e1:28:b4:85:6c:62:19:c4:ae:9e:d5:85:2e:aa:bc:
92:7f:7f:d0:74:c8:8f:48:7d:e0:b0:cf:6a:32:4f:a2:78:7f:
f3:24:3b:e6:58:7d:93:4f:3f:f4:f9:28:f0:e5:3a:fb:60:7d:
64:9d:f2:9b:6b:43:93:c7:05:2a:d0:d9:1c:7c:4c:c6:a9:90:
c5:83:57:3b:46:c3:1e:21:2a:fe:8f:1e:cf:62:b3:a4:1b:63:
78:d0:27:13:f3:15:11:62:7c:5f:c5:28:73:6c:7c:87:86:e9:
c2:42:25:4f:3f:51:f8:14:00:eb:89:bf:c4:e5:a4:8b:aa:e3:
b3:75:3c:78:12:1f:16:ef:c8:1d:14:e0:03:0f:d3:2b:bf:10:
23:5e:f1:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPpp6uobGVrjUCQMoUF/Ao5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjQxMjIxMTQzODE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzEwMmQzNWFiODQ4NjBlM2I0ZWIyNzI1MjIxMzY2MGM2YmNiMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqve7uCw4G8ohrEElsDYuJxlBqzli
sJJSnskLBBki1NSo9t6kRJu2vpdvwBHpUJICoIif54Iz0fADax0plplup0qNAFOE
gRu/zhpH3XA18jDS9V1FUkYvIQXtFy+PEarAcVWMdjWbR74SVAp1h8VkK5LvE0wL
5oa1XeUes8BIScIUzlPmJ/c5vqO9weA09Vq8CBdkoH7g1v84weYNfY3XOQUM6krh
EkF/GXk9t2Id+mGt35AxoxtrERBM/blSm/LxNRoY8GPBOJk9pppNTfNpkn482K+i
Qm1xEP0eilfZkZ3RVNZRUb/Yi0JyaX13gkQgkYRumMIS0tLYkJDQovCKjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwQLTWrhIYOO06yclIhNmDGvLAaMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvTEJBdE5hdUVoZzQ3VHJKeVVpRTJZTWE4c0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/iMA0G
CSqGSIb3DQEBCwUAA4IBAQAehLtEebW/A6me56dASN6/dfPusU5yRNA5jIckA5+5
cTeFQqOz9x8QO12uhSWPrOlebhWAuHf15h6jLE5w8faxi7VvvNt6du8zQWwNIEog
St3tJHyqCo4twFKO8LlWJewo+KPmBHvE7nFEll13kTPhKLSFbGIZxK6e1YUuqryS
f3/QdMiPSH3gsM9qMk+ieH/zJDvmWH2TTz/0+Sjw5Tr7YH1knfKba0OTxwUq0Nkc
fEzGqZDFg1c7RsMeISr+jx7PYrOkG2N40CcT8xURYnxfxShzbHyHhunCQiVPP1H4
FADrib/E5aSLquOzdTx4Eh8W78gdFOADD9MrvxAjXvEE
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:57 2025 by rpki-client