Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/IpeyBwV5ZsVQ-Fs2-2OOegEQiJM.roa
File: IpeyBwV5ZsVQ-Fs2-2OOegEQiJM.roa (raw, json)
Hash identifier: KMaUMBbs3v5Q6iZFah25FdvJP26/nsBuePg4e+0pZU8=
Subject key identifier: 22:97:B2:07:05:79:66:C5:50:F8:5B:36:FB:63:8E:7A:01:10:88:93
Certificate issuer: /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial: 0852B145
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/IpeyBwV5ZsVQ-Fs2-2OOegEQiJM.roa
Signing time: Sat 01 Jan 2022 12:02:08 +0000
ROA not before: Sat 01 Jan 2022 12:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.87.162.0/24 maxlen: 24
2a04:5b80:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139637061 (0x852b145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Validity
Not Before: Jan 1 12:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2297b207057966c550f85b36fb638e7a01108893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:67:6b:74:2b:a6:a7:c2:de:e2:68:d7:39:
ad:06:17:e2:d5:3a:82:cc:b1:91:4e:23:ad:21:b9:
45:b2:ae:8a:ee:d2:6a:15:25:c7:e4:c8:65:09:1f:
ba:25:48:cb:c2:49:46:e8:c1:4d:fa:e0:38:c8:84:
99:b7:ee:ce:d2:c7:e0:f6:dc:db:fe:36:e8:d9:c1:
f5:6a:a8:1b:14:5c:d2:e9:f0:cd:9f:f6:b5:96:29:
36:00:fd:73:4b:8e:ba:37:76:a7:36:ad:7d:fe:a8:
53:67:c2:81:6a:5f:d2:ad:84:c5:3c:93:f4:8a:f1:
e5:a8:a8:06:37:f1:59:8a:89:88:f4:d7:89:ff:1a:
04:b2:56:fa:23:aa:26:4d:75:36:36:34:58:ec:d3:
dd:bf:f8:5b:76:28:ff:a9:6e:fa:5d:bc:b0:e5:51:
47:33:51:aa:43:8b:54:8b:8e:e7:d5:fc:5f:fd:7d:
73:26:f0:b0:2c:76:d0:41:d2:ea:7f:1c:41:2c:eb:
97:3c:59:8a:73:01:e6:2d:a6:d9:8f:8b:2f:60:62:
d4:25:bc:fd:38:67:87:34:35:da:ed:4b:ac:68:e8:
61:1d:af:b0:10:cf:5c:d6:88:1a:6a:ae:56:0e:a7:
b5:dd:f2:25:1f:42:cd:94:17:62:89:16:af:7c:d9:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:B2:07:05:79:66:C5:50:F8:5B:36:FB:63:8E:7A:01:10:88:93
X509v3 Authority Key Identifier:
keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/IpeyBwV5ZsVQ-Fs2-2OOegEQiJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.162.0/24
IPv6:
2a04:5b80:100::/48
Signature Algorithm: sha256WithRSAEncryption
95:e2:88:01:a2:2b:92:87:ba:63:3d:73:bf:c5:6a:4f:77:73:
59:77:4c:a9:1e:21:bb:90:98:18:26:04:da:f1:7b:73:3d:bf:
b8:8e:8e:b3:51:f4:98:7e:94:b8:0a:64:db:20:5e:6a:f4:99:
6e:0f:56:b8:38:48:b2:33:51:ba:c3:6a:a5:73:08:30:cc:cb:
9c:b3:8d:46:f0:7c:d9:91:37:31:e0:56:c0:1f:a4:ec:bf:fb:
59:02:46:e4:fe:06:63:07:86:50:8c:74:bd:7a:ad:a4:fc:d7:
60:5f:83:27:0e:53:7f:d3:ad:e8:83:a7:bc:e2:30:4a:2a:a8:
8d:d6:57:29:38:bf:ad:3f:a9:1f:5c:79:d4:b4:40:ad:0b:61:
e0:51:cb:fb:ec:20:f6:d5:94:c1:75:8c:7c:d6:9e:a3:43:cd:
25:e8:35:b9:f1:8b:c8:21:24:8c:2c:6d:82:8c:46:16:7b:fc:
10:86:e8:57:af:9f:80:3c:a3:3e:c1:c8:54:4b:36:87:c3:87:
d5:3a:b1:ac:a4:ff:7f:4a:54:57:cb:a1:85:53:ed:9c:b1:81:
36:7f:b1:9c:b1:eb:1f:ac:a1:48:5d:95:e7:cb:1e:b8:60:8a:
be:b4:69:48:76:12:e5:d6:d1:f2:b3:6d:2c:87:86:7b:b6:fe:
f1:95:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:32 2025 by rpki-client