Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa
File: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (raw, json)
Hash identifier: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=
Subject key identifier: 8B:A6:64:80:F3:94:E1:62:A9:AB:AF:93:EC:51:26:78:28:0E:E3:F5
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0194228D115E0B1407A975B57CD8CEE3333A
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa
Signing time: Wed 01 Jan 2025 15:47:37 +0000
ROA not before: Wed 01 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 45.153.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:11:5e:0b:14:07:a9:75:b5:7c:d8:ce:e3:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba66480f394e162a9abaf93ec512678280ee3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:7d:49:50:ae:65:2a:ab:67:c8:05:f8:5e:
e5:8b:dc:94:c7:31:03:95:f6:cf:98:0a:2f:c0:b0:
70:bc:4a:50:a0:53:44:1c:4b:62:32:6e:75:ea:0c:
38:be:b2:88:a6:47:a6:7b:9f:7f:41:b1:13:e6:aa:
f8:10:22:64:b8:30:d1:92:6d:7e:6c:e4:20:2d:da:
e3:38:d6:b9:00:67:17:e2:7a:6f:fe:32:2c:32:86:
9c:94:dc:ed:67:d5:4c:dc:77:c4:af:c5:3e:e2:91:
ec:26:cb:a2:d4:7e:23:5e:52:6a:26:a4:b6:ef:d5:
f4:94:c1:3c:e4:d8:af:97:e5:4d:f5:fe:ff:80:25:
fa:4c:74:ea:c6:f6:93:67:5c:d3:64:ba:5d:1d:03:
00:32:64:af:52:c7:54:36:f0:6f:2f:13:bc:37:07:
81:7b:b1:2c:7d:7d:06:99:3c:9c:61:48:de:2b:a4:
e8:62:85:9f:22:77:e2:05:a8:79:03:06:0f:5c:9e:
53:99:3a:2e:74:b3:65:a1:97:34:a6:f8:54:11:60:
1a:45:9b:06:29:7b:5d:cd:34:9e:18:9b:82:67:b3:
f5:93:d9:f6:f4:f7:50:b8:ee:b0:14:a1:11:ef:0e:
dd:6b:f5:27:eb:1b:7b:e9:ec:75:c0:31:f4:1d:86:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A6:64:80:F3:94:E1:62:A9:AB:AF:93:EC:51:26:78:28:0E:E3:F5
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.160.0/22
Signature Algorithm: sha256WithRSAEncryption
68:70:df:48:20:2b:26:bd:f4:59:cf:cd:8c:25:0e:fe:d2:bd:
37:4a:9b:ca:95:3c:59:c7:4b:64:fa:ce:0f:e0:71:b1:c3:bd:
c6:fc:c6:5b:e5:37:f1:90:86:15:39:21:c7:33:1d:d6:02:55:
e7:0c:37:f7:dd:37:a6:b7:f4:c9:71:79:ed:02:f9:55:48:19:
e3:64:67:f8:26:be:ce:8e:48:84:f3:b9:03:d8:77:8f:2d:11:
4b:9c:0a:6e:d2:27:2f:2f:fc:19:19:86:95:bc:89:19:cc:b2:
47:e7:4a:fc:8b:e1:6a:cb:56:7a:1d:13:3b:91:f9:95:1c:df:
f7:32:d9:c2:49:d0:07:27:3f:43:13:84:af:3b:b4:d6:c9:56:
e7:45:8a:f1:12:88:e8:1e:a9:29:2d:f3:3c:ce:d3:03:63:f2:
03:32:3d:e1:d8:3d:2d:b3:47:9b:dc:fe:c6:c4:ad:64:4b:4d:
5b:1c:6e:af:58:81:14:7d:da:f0:4f:29:15:a3:4d:0c:f8:05:
23:be:c8:84:1f:03:c2:25:c6:b6:62:b8:8c:ec:30:49:cb:13:
84:68:eb:d6:a2:02:08:9b:25:a7:3f:63:f3:51:c9:ee:ce:ff:
50:12:70:b9:3b:01:57:2f:88:45:f4:a2:a6:c9:af:32:0f:16:
85:9d:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:21:48 2025 by rpki-client