Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/LbvGosx0sr1hJwd78ZXVswGnqXM.roa
File: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (raw, json)
Hash identifier: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=
Subject key identifier: 2D:BB:C6:A2:CC:74:B2:BD:61:27:07:7B:F1:95:D5:B3:01:A7:A9:73
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 01941FFA5F20C0C95E921225F77C779786D6
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/LbvGosx0sr1hJwd78ZXVswGnqXM.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208495
IP address blocks: 45.132.132.0/22 maxlen: 22
45.132.132.0/24 maxlen: 24
45.132.133.0/24 maxlen: 24
45.132.134.0/24 maxlen: 24
45.132.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5f:20:c0:c9:5e:92:12:25:f7:7c:77:97:86:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dbbc6a2cc74b2bd6127077bf195d5b301a7a973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:45:f0:ae:7b:8e:d3:c5:3d:93:27:e3:1c:
ff:5e:19:26:3e:e2:12:7a:fc:cb:46:ac:b1:50:2d:
23:ae:b5:3e:40:5a:45:16:37:76:61:29:56:e2:fa:
5d:d7:28:1d:e6:f2:eb:49:61:34:13:5d:d2:12:61:
01:0e:e1:bf:17:0f:2a:22:5a:5e:b3:4c:e1:94:f4:
df:23:4f:50:86:a6:96:9b:b7:28:6f:15:70:68:0f:
92:93:a6:66:21:32:99:5a:f8:53:9c:af:79:76:0c:
d5:ac:b1:6b:cb:e8:35:ba:aa:f7:3b:5d:26:8a:5b:
67:3e:ed:2d:ea:d9:52:9f:f0:36:a9:5a:34:30:58:
3d:05:e6:cb:7f:65:8d:1e:2e:19:15:eb:49:d3:65:
a7:f8:c8:0c:9f:f5:b7:85:30:8e:e6:9c:62:ba:1a:
1c:e7:5a:5a:64:16:e0:06:36:0d:9e:5a:68:44:45:
a2:b0:15:a5:d1:cb:02:5d:93:4f:9a:01:7a:1b:c2:
3c:0d:c2:a3:50:76:27:2a:58:84:fc:47:76:d9:97:
5f:8e:01:21:bf:8e:33:fa:16:37:8c:63:ef:49:6a:
98:74:d5:7b:0a:8b:13:67:f1:b3:3c:d4:ec:38:cb:
f1:25:05:35:3d:f7:b4:26:40:cf:fe:4a:94:d8:fd:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:C6:A2:CC:74:B2:BD:61:27:07:7B:F1:95:D5:B3:01:A7:A9:73
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/LbvGosx0sr1hJwd78ZXVswGnqXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:12:a9:f7:0d:84:05:36:08:bf:e7:5f:c0:83:dc:af:a1:b7:
40:a0:c9:45:27:8c:13:73:47:b6:1c:8f:6e:21:20:0b:87:e5:
5a:8a:ad:bd:c5:3a:95:18:fc:87:e6:2a:fc:24:8c:c6:ab:f2:
88:f9:82:81:a8:9d:2f:98:ea:70:c1:6c:d7:db:77:94:b0:11:
b4:08:ad:c6:b5:1e:38:12:ed:a4:74:82:87:68:3b:26:36:d6:
4f:ef:94:3c:62:e1:da:fa:b0:18:d0:91:83:bb:9b:ff:ed:99:
c8:10:5a:e8:04:9e:b1:33:24:1a:fb:7d:32:ab:cf:c1:0f:5d:
44:8d:c4:84:11:bf:e3:b8:f2:65:80:37:0e:ac:84:e2:d7:af:
04:83:60:ad:0e:1a:be:ec:22:24:99:43:eb:fc:95:6c:49:c6:
ee:df:3b:b1:8a:cb:02:b3:2c:5a:ad:ef:b9:27:7f:29:25:07:
0a:e4:8b:94:cd:85:5f:b6:62:a2:14:8b:e0:8f:30:f6:18:d3:
63:cf:d6:fa:cc:37:35:54:97:12:87:f0:ac:99:8d:ae:18:59:
a1:9a:7c:d6:91:05:ad:10:aa:27:1b:fd:bc:90:41:50:61:01:
ea:45:97:94:c8:fc:eb:c2:ee:bf:fd:c5:cc:a1:9d:e0:d6:27:
cc:b7:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net