Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/lkIgdfOPgyR6UMFoiAyIWkqpCFU.roa
File: lkIgdfOPgyR6UMFoiAyIWkqpCFU.roa (raw, json)
Hash identifier: v9Ioj01IApC/Va2SNZEe1kwrMZnZKn8vlLS86tu1Fu0=
Subject key identifier: 96:42:20:75:F3:8F:83:24:7A:50:C1:68:88:0C:88:5A:4A:A9:08:55
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01863B2DE23DC5E34F7241B3AC6DDF388360
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/lkIgdfOPgyR6UMFoiAyIWkqpCFU.roa
Signing time: Fri 10 Feb 2023 11:55:08 +0000
ROA not before: Fri 10 Feb 2023 11:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.156.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:2d:e2:3d:c5:e3:4f:72:41:b3:ac:6d:df:38:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Feb 10 11:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96422075f38f83247a50c168880c885a4aa90855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:e2:42:18:99:bd:37:fc:c7:65:f8:3c:36:
33:d5:af:31:32:cf:46:06:ac:30:73:10:80:a2:24:
72:3a:51:d9:7c:64:b5:73:29:1b:ed:d0:6e:56:52:
d0:b1:5e:a6:d5:14:e4:cf:69:55:c8:08:37:16:83:
17:4b:20:60:9a:c0:13:3d:71:23:af:7d:57:12:7c:
b5:0f:37:b4:ea:25:ae:fa:2b:fe:0f:e6:e6:b5:91:
8a:90:aa:0b:62:d3:0e:27:f0:f2:1a:ae:2c:d7:a7:
a5:2c:89:c6:6f:41:d3:6a:93:7b:42:7e:fc:67:64:
9d:49:e1:73:2f:b5:fc:7b:25:fd:95:2c:2d:b7:d6:
1f:07:a8:2a:d2:22:de:1c:43:4a:dc:1b:15:69:d5:
eb:f7:c1:d1:ed:c3:0a:04:aa:d8:c8:b9:b8:9b:4b:
50:1c:4d:3a:1d:0d:0c:2e:c3:19:70:ca:08:3f:39:
c7:1d:80:fe:e6:00:00:74:38:1b:15:51:08:29:7d:
2e:c2:fc:dc:ba:1c:b8:36:4b:25:5b:1b:d8:62:55:
b0:00:14:fd:18:03:47:76:72:6a:94:02:3a:7d:42:
e0:a8:3e:6b:96:db:62:ab:98:bd:53:c7:be:53:11:
15:a9:88:32:64:93:aa:d5:17:28:6c:65:57:d9:19:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:20:75:F3:8F:83:24:7A:50:C1:68:88:0C:88:5A:4A:A9:08:55
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/lkIgdfOPgyR6UMFoiAyIWkqpCFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.144.0/24
Signature Algorithm: sha256WithRSAEncryption
39:27:51:5a:ed:b9:1d:59:bb:96:aa:a7:87:96:8b:d9:3d:86:
8c:01:9d:b8:c1:af:f3:f3:dd:1a:71:21:9b:63:5f:7e:31:e8:
75:30:af:25:ae:f6:b3:0b:22:62:14:9d:fd:d6:73:76:b2:ba:
2a:ef:84:1f:36:a5:67:a6:65:8f:22:3b:0d:61:df:49:d0:bf:
34:ea:28:b8:fb:7f:96:a1:32:dc:12:51:55:07:e1:ae:63:4a:
7e:83:cd:f6:9a:20:d9:37:4d:ac:cc:2c:49:a6:e6:4b:a4:d7:
96:e9:d0:93:76:c0:b5:cd:5b:4c:a3:67:6d:93:c7:81:a0:23:
f3:9c:e9:ee:df:35:c0:7f:b9:b2:65:73:94:92:c1:f2:ec:75:
66:39:e5:ee:1c:62:8b:fb:2e:8a:76:b4:2a:8d:8c:20:9c:b9:
fd:ae:2f:2f:16:c7:74:78:12:a5:34:36:03:b1:39:19:ab:e0:
3d:7d:61:3f:a7:f1:1c:e9:aa:61:aa:5a:a4:04:a2:31:9d:16:
6f:1f:3e:0b:06:05:17:73:7e:bb:9b:32:39:ef:64:b8:f4:30:
75:5d:2c:40:71:db:a6:a0:8f:b3:61:20:55:70:ad:c1:66:da:
13:ed:d2:6c:6d:38:b8:bc:35:b8:1f:e7:00:95:41:21:12:40:
69:bd:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:11:34 2025 by rpki-client