Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/18QiM6akUSbTSrS3Fq48pEP1jBk.roa
File: 18QiM6akUSbTSrS3Fq48pEP1jBk.roa (raw, json)
Hash identifier: 8PGyzKbbNtY5C7m5Ei5+II70QrsJyooO15GcoYjHnkY=
Subject key identifier: D7:C4:22:33:A6:A4:51:26:D3:4A:B4:B7:16:AE:3C:A4:43:F5:8C:19
Certificate issuer: /CN=7ba9977d0c656ce119e6c8a1db34aa3148afa868
Certificate serial: 01856F390CEBC65F2EEAAF749CA217E14854
Authority key identifier: 7B:A9:97:7D:0C:65:6C:E1:19:E6:C8:A1:DB:34:AA:31:48:AF:A8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6mXfQxlbOEZ5sih2zSqMUivqGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/18QiM6akUSbTSrS3Fq48pEP1jBk.roa
Signing time: Sun 01 Jan 2023 21:24:47 +0000
ROA not before: Sun 01 Jan 2023 21:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42881
IP address blocks: 45.151.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:0c:eb:c6:5f:2e:ea:af:74:9c:a2:17:e1:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba9977d0c656ce119e6c8a1db34aa3148afa868
Validity
Not Before: Jan 1 21:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c42233a6a45126d34ab4b716ae3ca443f58c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:54:92:22:7a:4a:6d:72:b7:d0:a8:fc:4c:
15:15:2d:07:d3:7c:98:d4:43:25:5e:aa:56:5e:f8:
af:de:25:f0:79:ac:21:87:ed:9c:c7:34:52:91:c6:
e4:63:37:1e:60:da:80:8f:fe:28:44:8e:be:60:cf:
bd:e1:15:da:a5:2d:15:97:2a:14:f0:67:33:42:03:
e8:24:99:16:4f:92:ec:0f:93:17:4c:db:dc:c1:cc:
13:b9:2f:b2:73:23:89:da:08:07:f7:dc:95:9e:2f:
20:92:bd:0f:1f:75:42:30:eb:10:2c:8a:b1:1a:59:
00:d9:53:fb:5f:73:a4:cc:43:5c:f6:0a:0e:1e:9b:
18:53:94:e7:50:b3:39:11:75:5c:38:d5:ad:0d:d6:
9b:e6:b5:79:e7:61:5e:5a:35:ec:e8:1b:e2:1f:3b:
56:a7:68:52:61:08:49:8a:bc:cb:8c:91:82:d5:62:
8e:30:cd:0c:87:dd:02:21:a1:58:28:11:7a:46:24:
fc:c5:ab:62:e8:64:49:2f:21:d1:1d:fc:6f:22:41:
9a:84:81:d5:72:fd:68:3f:25:7c:ab:39:84:f6:df:
f1:82:9a:2a:1a:72:a0:5d:1a:c9:65:68:49:62:20:
22:15:62:71:53:bc:4b:26:1f:d2:2c:df:4d:2d:0f:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:22:33:A6:A4:51:26:D3:4A:B4:B7:16:AE:3C:A4:43:F5:8C:19
X509v3 Authority Key Identifier:
keyid:7B:A9:97:7D:0C:65:6C:E1:19:E6:C8:A1:DB:34:AA:31:48:AF:A8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6mXfQxlbOEZ5sih2zSqMUivqGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/18QiM6akUSbTSrS3Fq48pEP1jBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/e6mXfQxlbOEZ5sih2zSqMUivqGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.188.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a4:ec:73:59:ad:fe:d7:cb:e5:f5:77:05:bd:09:ba:24:8f:
bb:48:34:55:38:a9:68:44:d1:ba:4e:56:c8:ff:1a:91:84:ee:
0b:77:58:f6:95:28:4d:a1:35:fe:25:f9:80:bd:02:45:e2:8e:
fc:3c:d2:44:a4:74:e2:9d:fd:73:43:c8:1a:19:4e:8c:bd:f2:
4e:ff:f0:d8:b2:38:81:39:c7:9f:93:1b:81:fd:f8:aa:00:0f:
62:ca:32:de:3f:07:14:78:c3:b1:6f:81:28:73:ac:6a:cf:c3:
73:56:a4:a5:95:c3:3b:0d:61:73:b9:d2:2c:d4:3d:94:fe:99:
61:8b:95:d3:7b:e3:05:4a:16:b9:6b:71:f3:68:26:bf:92:f4:
5c:3a:d7:fc:d6:c9:ba:78:93:32:5b:42:0c:92:54:4b:f0:6f:
72:93:c5:73:08:2d:1f:2b:c8:e0:3c:7f:8f:3b:9f:28:f8:c3:
ae:72:5f:39:f3:c5:c6:f3:dd:9e:3f:3e:da:e6:93:8e:ea:91:
80:49:8f:39:8c:00:b8:de:2a:45:f8:de:17:ac:e7:ad:69:04:
5a:96:7a:ef:54:91:5f:35:00:e1:cf:06:03:b0:b5:c2:a3:f4:
b2:b5:fc:43:a9:83:e1:63:ad:2d:72:3c:21:7d:7a:2e:a9:bc:
28:3d:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:11 2025 by rpki-client