Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9L6cdLVC0NGZyruh2aaA6qSvJJk.roa
File: 9L6cdLVC0NGZyruh2aaA6qSvJJk.roa (raw, json)
Hash identifier: bXphmwqGsjLdt22u/29J9Qh4+dVQE1xng/hffIh95XM=
Subject key identifier: F4:BE:9C:74:B5:42:D0:D1:99:CA:BB:A1:D9:A6:80:EA:A4:AF:24:99
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247342DD48A32E53BA7FC107DDC100
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9L6cdLVC0NGZyruh2aaA6qSvJJk.roa
Signing time: Thu 02 Jan 2025 17:51:04 +0000
ROA not before: Thu 02 Jan 2025 17:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35793
IP address blocks: 45.9.208.0/22 maxlen: 24
2a00:1728:48::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:73:42:dd:48:a3:2e:53:ba:7f:c1:07:dd:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4be9c74b542d0d199cabba1d9a680eaa4af2499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:b8:a6:d0:85:31:8f:e0:65:4a:45:7e:0f:
75:5c:f5:78:98:f9:95:a1:17:c8:f1:d2:ed:b0:a1:
40:3d:50:ad:4c:25:23:4c:f1:28:58:96:5e:2f:04:
61:50:53:14:37:16:e2:31:4d:e8:a4:83:41:cb:6a:
77:4f:0a:e1:de:19:1f:13:f2:c6:9d:ff:02:fb:8c:
51:0a:30:b3:ed:db:e5:02:dc:d7:5f:b2:00:32:e7:
cf:c3:cf:2a:3b:49:87:11:30:fa:00:a2:d8:3c:ce:
62:9e:a0:6f:ab:f4:e9:0a:f5:13:66:6f:ed:82:c0:
35:72:39:52:83:8b:54:a6:aa:47:08:b2:4c:a0:66:
e9:8c:15:7a:0b:22:e3:17:7c:4e:03:f1:ed:8d:0e:
e8:c2:8a:40:77:17:b9:99:9a:60:ec:49:11:91:59:
61:86:44:d1:9e:dc:1d:04:5b:e5:20:67:c0:b1:a2:
4e:03:80:87:35:e4:09:1b:03:c1:7d:0f:7c:0c:9f:
6e:b7:96:91:4a:78:22:d2:40:42:1c:cf:d9:c8:93:
85:05:13:a3:bf:40:e7:2e:9c:f8:51:2f:8b:c2:1f:
2d:a4:44:e3:28:ba:46:6d:c6:77:21:5b:1f:b7:9b:
78:74:f0:58:da:1e:18:27:84:40:5f:e2:08:37:d7:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:9C:74:B5:42:D0:D1:99:CA:BB:A1:D9:A6:80:EA:A4:AF:24:99
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9L6cdLVC0NGZyruh2aaA6qSvJJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.208.0/22
IPv6:
2a00:1728:48::/46
Signature Algorithm: sha256WithRSAEncryption
63:73:e3:7e:f7:37:b9:15:af:05:cd:df:e3:ba:1b:6b:8c:cb:
77:ca:e7:ac:fe:03:ac:30:b6:5c:11:f0:05:8e:44:16:3d:e8:
2c:ba:1a:25:ba:0e:4a:93:f0:95:32:53:11:34:82:45:44:8d:
37:67:11:a5:43:51:f2:42:7c:0b:d6:15:1b:5d:da:05:4a:56:
8c:0a:14:d9:78:9e:a4:a0:7c:e7:cf:8f:ea:69:55:90:61:b2:
82:f6:39:a1:1c:8d:86:22:70:10:b4:2b:cd:d6:b6:07:7f:a7:
73:f3:bb:69:79:e9:10:19:16:3a:71:6f:fd:45:18:a8:27:72:
a3:d3:4d:1a:f7:24:81:f8:07:2f:fc:c8:40:da:5f:53:19:a0:
8a:f0:37:1c:9a:f8:5d:3d:d5:f9:51:0e:c8:b1:3c:64:f9:ee:
22:e8:51:6b:c2:31:25:11:85:f9:eb:51:64:88:1e:6f:88:8c:
13:45:45:94:28:57:66:bc:7a:d8:e0:80:66:c7:a2:f8:f4:cd:
a0:2d:39:ca:38:8a:c4:1a:d7:f7:49:2b:89:46:04:93:07:5a:
97:f1:09:10:c1:5c:1a:5f:6e:9a:d7:0a:a3:c0:39:4d:4b:94:
47:0c:78:b5:24:39:68:37:88:bb:72:96:7a:5b:f4:87:be:af:
31:0c:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:43 2025 by rpki-client