Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa
File: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (raw, json)
Hash identifier: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=
Subject key identifier: 8B:CE:6B:4A:F3:C1:2B:B6:6E:A7:61:F2:A7:EE:8B:C3:E3:7C:B1:56
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA2F1A930F1EEA8851AC408640B21C
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9335
IP address blocks: 45.136.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2f:1a:93:0f:1e:ea:88:51:ac:40:86:40:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bce6b4af3c12bb66ea761f2a7ee8bc3e37cb156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:f1:04:93:29:44:24:5f:10:e3:46:68:2a:
db:cf:bb:70:90:90:0a:63:81:94:75:c8:2b:cf:44:
fc:d9:ea:5c:34:6d:00:31:95:28:10:bd:12:bb:f8:
64:87:2e:1f:cc:66:9f:d7:cb:df:39:c5:52:c8:56:
80:bb:79:58:c1:2c:97:a2:6c:4e:ca:8f:b2:8f:e4:
8c:6f:73:c6:38:5c:dc:9e:5f:61:25:6b:fd:1a:e8:
af:a2:ed:10:41:66:c9:ec:67:ee:33:fd:28:28:dc:
1b:65:3a:fb:91:52:79:8e:0a:ce:49:92:02:e8:20:
68:96:f7:66:3b:7f:b8:bd:51:d5:ca:1f:60:a4:b2:
d5:52:08:fe:62:4a:db:0e:94:8e:2b:c2:45:87:1a:
91:ec:4f:b6:80:a9:6f:02:fe:5e:5e:e9:d6:e3:c6:
24:11:91:e8:9e:cf:02:f1:1b:68:73:45:0c:a4:87:
12:41:a1:51:6f:97:b9:8e:33:a3:1f:97:85:77:95:
88:9a:5d:75:ad:17:4b:18:26:84:39:17:e1:8d:a0:
a8:c1:f9:59:ad:f8:5f:ea:68:47:65:45:23:29:ac:
3d:e4:c1:e4:a5:c8:f0:27:84:83:f9:37:05:aa:76:
f2:8a:d4:af:33:8e:53:83:a2:3a:99:75:23:20:bb:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:6B:4A:F3:C1:2B:B6:6E:A7:61:F2:A7:EE:8B:C3:E3:7C:B1:56
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.236.0/22
Signature Algorithm: sha256WithRSAEncryption
19:6b:55:c9:ba:53:39:e4:d0:91:fd:a5:a9:0d:7c:cf:8c:a9:
23:04:18:a5:52:aa:b3:16:bf:90:20:2d:5e:1e:6f:b1:bc:c6:
d6:3f:85:03:0c:ab:89:8c:46:b9:ed:28:aa:44:4c:1a:3e:bf:
77:2c:d9:14:a9:44:c9:d2:89:71:cb:85:b3:b2:bf:a0:cd:de:
fc:61:20:fd:58:5a:94:31:97:46:60:62:83:bd:bc:be:72:e0:
e2:9d:13:c2:22:fc:25:47:1d:1a:cb:0e:d0:19:61:af:97:8c:
90:43:55:06:81:3d:a0:e6:4a:d1:2c:7d:2e:b4:a6:74:58:f1:
db:51:5b:f8:16:b6:67:97:ba:4c:a1:30:24:22:18:e2:9a:ad:
a4:7c:99:fb:7c:6a:dc:ca:61:79:50:14:70:70:89:47:bd:53:
0c:09:0a:09:23:9f:e3:78:f4:00:c5:ec:e1:82:ef:98:b8:a8:
bc:a8:72:02:7a:1f:0b:fa:cc:db:79:2b:30:87:d5:5a:62:48:
f8:7d:a2:c7:fb:14:e1:0a:14:26:81:b3:be:9a:79:a0:94:5e:
1f:0c:ce:b1:b5:0a:9a:38:7f:70:69:bb:8c:b5:fe:04:56:55:
a7:d1:c4:fb:a4:7f:ee:0e:a9:ac:6d:45:7b:db:af:74:7f:bb:
18:49:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:14 2025 by rpki-client