Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa
File: LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa (raw, json)
Hash identifier: bK/BWsl5/3RbpTzDlCHc+2JkydhQ2NUx6bNstJkPC9A=
Subject key identifier: 2D:6A:45:91:F6:CF:63:10:0F:B8:B4:28:3A:5A:72:B9:3A:4E:23:1A
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142EDDF0711D4D9DCF77D5963A9AAF4
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa
Signing time: Mon 02 Jan 2023 06:54:49 +0000
ROA not before: Mon 02 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43043
IP address blocks: 45.66.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:ed:df:07:11:d4:d9:dc:f7:7d:59:63:a9:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d6a4591f6cf63100fb8b4283a5a72b93a4e231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:dd:75:9c:dc:ed:f2:c3:d1:22:39:48:e9:
29:88:a0:45:e5:ba:08:f2:0b:a5:12:ad:38:15:bf:
7a:e0:15:b2:a8:7a:ca:8c:ee:91:7e:a7:85:fc:78:
0f:85:fc:34:64:f0:20:87:94:8a:16:56:41:be:44:
d5:c3:2d:6e:92:99:3c:9c:21:4f:87:ac:c1:07:c2:
88:f3:8d:58:67:a5:6b:3d:c6:86:d3:7b:6b:46:07:
41:24:db:fd:8a:c6:cb:39:e3:3e:ad:55:aa:35:32:
fe:8c:28:fd:fb:93:4d:1e:ac:9d:1b:9d:f9:c0:7d:
db:bd:2d:fb:47:21:ba:9a:53:89:f8:6f:b6:1b:c7:
4a:53:9a:50:b5:83:bb:aa:5b:dc:91:a4:a8:88:29:
45:5c:d9:f2:d9:4c:2b:fe:cb:20:c0:2e:26:c1:3a:
11:c2:8d:29:bd:81:77:81:b6:5d:8c:69:12:90:f8:
16:a0:37:e8:ff:21:0a:c5:a7:09:86:43:34:7e:a4:
95:cf:f3:ea:a9:b8:e3:dc:9f:b8:d6:f2:0b:db:cb:
00:44:f4:91:ac:88:44:a1:0a:47:50:b8:0c:7f:a4:
e6:6f:48:e9:ff:f0:73:60:aa:01:07:7b:97:70:dc:
75:f9:7a:cc:b7:58:db:98:f9:70:cb:e3:4f:91:31:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:45:91:F6:CF:63:10:0F:B8:B4:28:3A:5A:72:B9:3A:4E:23:1A
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/LWpFkfbPYxAPuLQoOlpyuTpOIxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.151.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:15:5e:99:d3:20:d4:65:3e:dd:da:68:37:45:0b:4b:75:5b:
95:9f:4b:11:97:08:b2:a7:a3:04:ee:b1:7d:1d:73:ed:52:c1:
09:94:93:b5:b3:5b:4f:d0:39:3f:e8:66:7d:c4:08:8d:06:7f:
0b:09:76:ba:e7:6b:e8:af:76:38:e3:de:1f:fc:45:92:45:79:
5b:04:40:cf:f9:af:ec:54:87:d4:14:6e:33:42:a4:53:6d:1c:
fe:5f:6e:7e:55:0b:ec:a6:62:1d:62:b9:20:04:75:6f:06:51:
dc:2e:17:a5:6e:2d:68:0c:8b:8a:d3:6b:8f:c7:38:54:9d:d4:
74:4e:7d:75:ee:cc:b2:c7:e1:bf:3f:bf:15:63:1e:4a:ca:69:
e1:46:3d:5d:8a:be:ab:f6:95:19:11:a0:41:67:2f:b8:e1:00:
24:6c:1d:06:4d:4e:a2:8f:d8:42:72:8e:7c:96:53:2a:fb:49:
f0:a5:7e:64:f4:5d:9c:24:c4:c9:dd:3c:a1:6c:d0:34:ec:55:
1e:3c:18:eb:17:9c:7d:5c:06:b8:87:2e:f5:5b:30:91:4d:b2:
6a:00:3a:20:b8:3c:64:2c:fd:20:80:04:7b:db:73:8e:bd:20:
cc:57:c6:01:2d:a1:d8:5e:7d:d4:b4:86:da:27:e8:04:69:cf:
8e:9e:17:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxQu3fBxHU2dz3fVljqar0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmE3NjVhMzkzMzY5Yzk2ZDhkODM2ZjIzZjc2ZTY3NDg5
YzdkZGUwHhcNMjMwMTAyMDY1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDZhNDU5MWY2Y2Y2MzEwMGZiOGI0MjgzYTVhNzJiOTNhNGUyMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44PddZzc7fLD0SI5SOkpiKBF5boI
8gulEq04Fb964BWyqHrKjO6RfqeF/HgPhfw0ZPAgh5SKFlZBvkTVwy1ukpk8nCFP
h6zBB8KI841YZ6VrPcaG03trRgdBJNv9isbLOeM+rVWqNTL+jCj9+5NNHqydG535
wH3bvS37RyG6mlOJ+G+2G8dKU5pQtYO7qlvckaSoiClFXNny2Uwr/ssgwC4mwToR
wo0pvYF3gbZdjGkSkPgWoDfo/yEKxacJhkM0fqSVz/Pqqbjj3J+41vIL28sARPSR
rIhEoQpHULgMf6Tmb0jp//BzYKoBB3uXcNx1+XrMt1jbmPlwy+NPkTGNrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC1qRZH2z2MQD7i0KDpacrk6TiMaMB8GA1UdIwQY
MBaAFGL6dlo5M2nJbY2DbyP3bmdInH3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUt
MDdkZDFiNGM1NWQ5LzEvTFdwRmtmYlBZeEFQdUxRb09scHl1VHBPSXhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hZGZmODAtYjIwNy00ZmJkLWJmNWUtMDdkZDFiNGM1NWQ5
LzEvWXZwMldqa3phY2x0allOdklfZHVaMGljZmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUKXMA0G
CSqGSIb3DQEBCwUAA4IBAQDXFV6Z0yDUZT7d2mg3RQtLdVuVn0sRlwiyp6ME7rF9
HXPtUsEJlJO1s1tP0Dk/6GZ9xAiNBn8LCXa652vor3Y4494f/EWSRXlbBEDP+a/s
VIfUFG4zQqRTbRz+X25+VQvspmIdYrkgBHVvBlHcLhelbi1oDIuK02uPxzhUndR0
Tn117syyx+G/P78VYx5KymnhRj1dir6r9pUZEaBBZy+44QAkbB0GTU6ij9hCco58
llMq+0nwpX5k9F2cJMTJ3TyhbNA07FUePBjrF5x9XAa4hy71WzCRTbJqADoguDxk
LP0ggAR723OOvSDMV8YBLaHYXn3UtIbaJ+gEac+OnhcF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:28 2025 by rpki-client