Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/OT3J4WKWnmtHiXoA1wgecvnaYHw.roa
File: OT3J4WKWnmtHiXoA1wgecvnaYHw.roa (raw, json)
Hash identifier: tkZVD4lHutW3i5lWskGxNR6v4sQPq0UzZoEJdaRZ1/k=
Subject key identifier: 39:3D:C9:E1:62:96:9E:6B:47:89:7A:00:D7:08:1E:72:F9:DA:60:7C
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 0181F46C599B66973F73ACD233D6BF3E98C1
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/OT3J4WKWnmtHiXoA1wgecvnaYHw.roa
Signing time: Tue 12 Jul 2022 21:59:10 +0000
ROA not before: Tue 12 Jul 2022 21:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.129.197.0/24 maxlen: 24
5.182.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6c:59:9b:66:97:3f:73:ac:d2:33:d6:bf:3e:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jul 12 21:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=393dc9e162969e6b47897a00d7081e72f9da607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:c0:ee:ea:cb:2e:f2:4f:a8:d8:db:79:00:
a5:b4:1b:8b:ad:55:5b:ef:cb:bc:4d:19:e3:86:45:
72:40:fa:af:b9:9c:f5:f9:8a:a2:2f:c1:5c:76:5f:
33:7b:7d:42:cb:88:90:cb:77:a2:f2:a1:ce:80:72:
82:4b:72:94:e6:2a:0f:f8:4e:cf:73:0d:9e:bd:66:
04:6d:5b:61:a9:45:43:0c:42:88:3e:80:23:56:98:
97:27:a8:e4:90:3a:4c:5d:12:6b:45:21:45:e4:10:
21:d4:a5:69:07:a9:74:4d:ba:f3:cb:37:38:b2:96:
d0:31:ae:be:3e:d4:43:17:da:dc:ca:07:25:d6:00:
75:39:a5:48:4c:eb:17:cf:dd:f5:1e:7f:13:c8:ce:
47:ec:70:94:16:b4:87:1c:0e:70:86:1b:91:fc:fc:
e1:06:21:66:ad:91:92:b0:79:2b:88:ea:1f:85:ab:
e8:ff:49:f4:a1:57:91:0f:22:d7:27:b4:e4:65:f1:
a2:d3:48:1d:12:64:05:9d:c7:18:f1:b0:c3:ad:81:
89:96:0d:76:57:69:c5:1e:0f:e8:33:3c:b5:de:ef:
79:1a:bc:c1:5b:f9:4a:f1:0b:be:2e:7c:aa:a2:65:
4c:28:3a:21:59:5f:78:03:55:4f:73:eb:b5:8f:53:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:C9:E1:62:96:9E:6B:47:89:7A:00:D7:08:1E:72:F9:DA:60:7C
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/OT3J4WKWnmtHiXoA1wgecvnaYHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.117.0/24
45.129.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7c:93:6e:45:4c:56:44:69:2d:b4:c1:e5:03:f7:45:6a:b3:
57:63:7a:23:22:c1:7f:03:e3:9f:f1:15:5a:f0:15:26:33:1d:
2d:32:df:85:2c:6b:14:56:8a:59:4b:a2:3f:2b:a7:3e:a6:0d:
a8:8f:07:42:f6:e8:57:68:a3:6b:d1:a4:71:14:d9:7b:72:06:
c0:f6:b3:92:cc:eb:00:db:1d:92:87:2d:f3:83:fc:dd:dc:94:
ba:1e:ed:fd:70:8b:71:53:ea:f0:94:08:39:03:68:33:9f:a7:
8a:45:aa:df:85:85:99:f9:05:21:ee:a9:23:ea:b1:87:68:db:
93:3b:b1:8a:8a:54:44:75:8a:42:bb:78:4f:a2:fe:33:24:cd:
65:12:e5:9a:01:95:af:6c:ea:39:65:cd:95:8d:62:fb:1b:f3:
38:e2:22:c4:fd:22:b1:d2:a8:7b:5a:39:b7:7f:94:bd:84:2d:
a0:fa:e9:a8:ed:e4:7a:7c:ff:30:f5:09:93:86:ed:22:d7:28:
0b:a8:19:80:93:16:a3:76:49:db:df:c2:73:ae:ed:c8:ec:44:
eb:d1:40:d1:ad:f2:9d:c3:55:94:65:7a:ba:ee:50:a6:80:54:
c4:dc:9d:e8:68:fd:1e:ab:b5:8a:b9:f7:e9:26:52:02:e0:ab:
d9:2e:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:21 2025 by rpki-client