Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/lx4r-_of66D7nj4_JxEX4B7iGSo.roa
File: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (raw, json)
Hash identifier: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=
Subject key identifier: 97:1E:2B:FB:FA:1F:EB:A0:FB:9E:3E:3F:27:11:17:E0:1E:E2:19:2A
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 01941F8C4F1BB233D5FE905A45F38423BAF7
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/lx4r-_of66D7nj4_JxEX4B7iGSo.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57648
IP address blocks: 45.156.160.0/24 maxlen: 24
45.156.161.0/24 maxlen: 24
45.156.162.0/24 maxlen: 24
45.156.163.0/24 maxlen: 24
2a0f:2580:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4f:1b:b2:33:d5:fe:90:5a:45:f3:84:23:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=971e2bfbfa1feba0fb9e3e3f271117e01ee2192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:cb:6d:62:1e:34:2b:30:5d:e7:0b:96:9f:
08:f5:08:77:57:ea:02:e3:42:4f:90:42:03:c9:ec:
d2:1a:98:5d:f1:99:78:67:1b:43:8e:cd:ec:ec:e0:
0f:82:38:30:7c:35:5d:48:a9:4c:93:b1:1f:f6:6b:
8f:e9:ef:47:36:74:72:59:69:ce:4b:98:3f:32:7d:
54:1a:a1:77:fb:da:65:01:44:41:68:b6:da:2e:08:
b5:01:40:37:c6:25:52:8b:38:81:79:1d:27:f8:76:
f5:76:01:36:eb:9c:29:30:73:01:7d:b1:9d:a2:ed:
0e:9d:12:8f:39:b7:fb:40:aa:a0:03:44:74:d2:3b:
44:7c:24:d0:96:43:17:af:2a:07:64:83:65:86:65:
ff:6b:57:c9:57:25:b4:dc:87:84:ea:9f:90:98:aa:
45:93:e7:47:e7:2a:93:a8:14:35:13:37:c7:0f:08:
08:c4:8d:9f:07:6a:dc:c8:66:18:14:7d:9c:13:50:
b4:94:c8:cf:5d:35:a6:46:09:ef:18:65:88:c6:f0:
ce:3d:42:37:cb:fe:a2:bc:0c:ac:58:92:c1:c0:94:
de:7c:c0:34:e3:21:dc:b9:87:cb:44:b0:87:4d:92:
93:9b:48:bc:c7:34:53:f9:14:d9:e5:e2:29:32:4e:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:2B:FB:FA:1F:EB:A0:FB:9E:3E:3F:27:11:17:E0:1E:E2:19:2A
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/lx4r-_of66D7nj4_JxEX4B7iGSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.160.0/22
IPv6:
2a0f:2580:1000::/48
Signature Algorithm: sha256WithRSAEncryption
24:b4:3b:1a:20:c7:7b:3c:84:8d:de:4a:7f:9e:f8:00:05:4f:
47:85:a2:55:15:25:ed:8e:f6:f1:74:f1:48:65:57:cb:be:0e:
56:a0:8e:28:14:4c:09:cf:1f:c3:9b:3e:ce:62:d8:bf:e2:4e:
f8:11:b2:ba:d3:f1:ac:77:b4:ca:de:68:b0:16:b9:26:7b:ac:
dd:16:5d:b7:87:30:47:af:42:e1:8d:14:32:03:9c:16:90:f6:
ab:2b:41:c6:0a:0f:84:d4:b1:ae:b8:1d:39:ae:7e:55:65:40:
3d:3e:76:8e:f5:8a:a7:b3:38:1f:d5:a2:32:4c:27:d5:1f:8a:
15:ad:1d:b8:2d:ba:7e:07:58:7d:62:09:56:6f:20:d5:a7:ae:
18:67:d7:42:48:ac:2b:1b:e4:17:20:44:95:bf:a8:61:4a:72:
6d:59:f0:90:ec:27:7e:22:2b:77:45:42:96:4c:80:d2:2b:e5:
ee:15:32:eb:54:6f:21:1d:e8:ad:1a:e7:6c:97:12:cb:c3:1a:
22:00:c6:35:70:08:82:cd:29:75:ec:a6:35:dc:e0:49:d4:54:
24:c6:5d:26:3a:bc:81:0f:b4:5c:04:6f:97:17:51:dd:32:8b:
90:bd:3a:52:6d:f7:4d:a5:2b:bc:fc:8b:0a:36:7c:6d:95:c7:
3c:ec:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:53 2025 by rpki-client