Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/lcSIcBIk6sTpLOzKkT0LDZ3DlTw.roa
File: lcSIcBIk6sTpLOzKkT0LDZ3DlTw.roa (raw, json)
Hash identifier: IG4mhWBymjI0m15VyCfU4iBqfqnw+ZBQ1lFf39TtMng=
Subject key identifier: 95:C4:88:70:12:24:EA:C4:E9:2C:EC:CA:91:3D:0B:0D:9D:C3:95:3C
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019426D952F30CA3040C80928D53D69EDF6E
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/lcSIcBIk6sTpLOzKkT0LDZ3DlTw.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:f3:0c:a3:04:0c:80:92:8d:53:d6:9e:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95c488701224eac4e92cecca913d0b0d9dc3953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:2f:63:4d:e5:d1:9f:4c:4e:47:71:29:48:
a0:83:f0:64:a5:a9:77:1f:c7:47:23:29:a0:b8:5e:
9c:13:09:56:9a:27:56:60:b4:5e:a8:af:f0:a6:00:
66:85:e4:ed:2c:33:a6:42:95:e0:79:9c:b8:08:5d:
5a:76:40:4c:62:e6:be:b3:f0:6e:6d:52:26:10:21:
6a:38:fc:4f:d2:eb:86:52:21:3b:bc:32:36:67:19:
57:c0:e1:5e:3a:37:4c:ca:34:70:2d:34:78:0a:10:
18:62:fe:7b:66:f7:c8:a1:69:b2:48:ed:fb:69:d0:
43:ec:67:61:ca:24:6e:ca:7f:f6:10:b6:4a:b0:d6:
a4:51:43:f5:09:df:80:33:b5:67:1b:70:ca:ef:72:
80:17:39:b4:39:f6:aa:69:3e:33:4a:f2:c5:b3:a2:
5f:14:1e:d7:af:88:a5:0a:ef:bb:66:f3:3a:84:ae:
e7:53:a1:a6:62:6b:9a:dc:11:da:e1:cf:83:46:3d:
2d:a3:f8:c3:30:0e:50:e4:5e:4a:d6:a5:1b:27:64:
20:69:f2:a9:ff:c5:c3:cb:f0:23:57:f8:41:3a:8d:
77:61:0a:c9:79:9e:72:bb:e7:70:b6:ab:55:32:97:
7d:c2:7f:f9:c3:64:69:66:38:41:1c:cb:dc:a5:3f:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:88:70:12:24:EA:C4:E9:2C:EC:CA:91:3D:0B:0D:9D:C3:95:3C
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/lcSIcBIk6sTpLOzKkT0LDZ3DlTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
33:af:09:7b:05:8e:16:26:07:40:91:7d:23:9b:bc:ff:ec:e4:
64:b3:8e:93:43:19:1f:c9:37:53:8d:a9:86:fd:10:6d:f2:e6:
99:bc:5c:7a:27:ce:38:ca:08:e8:c3:d8:94:5d:22:08:5c:38:
f2:f9:46:fb:90:6e:11:89:b8:17:ed:24:56:f4:c1:8a:c8:b5:
34:da:6b:de:b6:f0:c7:dd:ef:ab:48:fa:5a:8a:d3:cd:90:0a:
18:3b:c6:62:96:de:d5:b3:3d:e0:24:72:d2:45:92:f3:fb:2f:
e2:ac:7f:8a:ab:d4:46:92:ff:18:37:d1:e7:12:85:4f:39:46:
d5:27:a5:9f:5c:08:4a:c6:c4:d0:7e:2b:6c:be:ea:ec:ad:ec:
43:f0:65:c8:95:48:84:96:9b:3a:1d:5f:5f:ee:fb:c5:4a:74:
03:dc:a6:b6:cb:17:a3:ec:eb:ae:c4:07:c6:a8:00:cd:53:e4:
9e:1f:c6:f4:45:c1:e1:ba:cb:97:f8:21:88:54:52:74:fe:f7:
ed:c1:dd:42:b0:ea:5e:bb:dd:eb:f2:04:39:9b:43:7d:d2:04:
3a:dd:bd:c2:68:1a:30:83:26:91:7d:5c:48:dd:84:d0:5b:96:
ce:7b:34:6d:77:40:f9:39:99:fe:e4:f5:78:40:ad:b4:4f:d4:
7d:09:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:23 2025 by rpki-client on console.sobornost.net