Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/P4Lr3qzDpHjWxBngqT4VoyG343U.roa
File: P4Lr3qzDpHjWxBngqT4VoyG343U.roa (raw, json)
Hash identifier: e70X1LA8lbA4v+f4Kgo2GphY39//dsI8Uz865KeMd+Y=
Subject key identifier: 3F:82:EB:DE:AC:C3:A4:78:D6:C4:19:E0:A9:3E:15:A3:21:B7:E3:75
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 018369B403366D25E24ABF1D2F7904B2CD45
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/P4Lr3qzDpHjWxBngqT4VoyG343U.roa
Signing time: Fri 23 Sep 2022 09:35:48 +0000
ROA not before: Fri 23 Sep 2022 09:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206483
IP address blocks: 84.45.31.0/24 maxlen: 24
84.45.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:b4:03:36:6d:25:e2:4a:bf:1d:2f:79:04:b2:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Sep 23 09:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f82ebdeacc3a478d6c419e0a93e15a321b7e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:a0:49:85:c2:41:b2:73:fb:86:16:a6:1b:
ac:84:6a:40:fa:25:44:80:d4:65:c1:dd:69:e0:ba:
3a:e9:bf:84:00:bd:34:be:2c:e8:41:9b:fe:a5:2c:
6c:c0:af:37:80:88:87:b6:51:77:b5:28:0b:f6:d6:
e8:86:50:0d:fa:7f:0a:be:5a:02:b3:28:7f:2e:bc:
5c:97:f0:c7:0d:af:ba:80:83:90:7b:b1:0d:ae:fe:
0f:02:68:af:79:98:f6:72:4f:3d:50:c2:e2:7e:c3:
b0:08:c8:33:b1:87:59:b3:03:da:9f:83:5e:03:c7:
2e:0f:b8:c1:61:15:f7:b0:5b:63:d1:b1:6e:25:35:
88:e7:ef:5d:fa:52:40:45:45:9d:40:91:a7:15:21:
37:4c:bd:23:af:71:0d:9f:92:d5:2b:2f:01:0d:dc:
b2:2a:3b:fa:1c:f2:cc:0f:7e:22:a7:b7:18:d9:47:
9a:97:32:7d:9b:2e:af:c5:7d:8b:da:e3:c9:32:7e:
a3:eb:1c:d5:37:4a:ab:47:00:fa:51:49:13:b3:60:
51:6a:b9:27:f5:9c:7d:5b:11:f4:16:6c:4a:6c:e4:
04:4d:11:13:cd:3e:11:c0:8f:f2:a3:45:80:92:9f:
8b:48:88:df:6e:7d:69:95:aa:c1:96:0b:04:c5:3a:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:EB:DE:AC:C3:A4:78:D6:C4:19:E0:A9:3E:15:A3:21:B7:E3:75
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/P4Lr3qzDpHjWxBngqT4VoyG343U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.30.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:44:fa:ca:00:b2:00:c9:70:b5:0e:20:b3:f8:9f:4a:56:03:
0e:e7:75:34:78:5e:db:06:60:f6:18:07:10:d6:06:42:b7:f9:
ed:7d:39:fc:f5:af:54:ad:bd:fe:32:7c:65:a5:b0:d1:0c:f9:
04:a4:80:8c:1f:b4:45:ae:00:a5:d7:98:d1:9a:c3:15:8b:00:
43:b7:4b:6e:2a:53:9a:7a:ef:5f:a9:d6:c6:b5:a9:a1:01:e3:
10:a1:2b:64:0c:52:bb:36:8b:19:54:eb:86:a5:cf:c0:99:7a:
8b:ec:9d:98:95:cb:64:a8:d8:e3:ae:c7:0a:74:c1:c6:e6:ad:
21:21:41:9d:1e:67:34:9b:88:98:6f:11:ed:2b:80:a2:a2:4b:
08:59:c8:85:e1:1e:cc:8c:0c:52:3a:3c:5e:d9:66:0f:3b:f5:
a1:9f:bd:d6:cc:65:cc:33:ba:96:42:74:db:33:f1:6b:cc:e5:
a7:d1:4d:a2:d7:8e:d2:cc:42:e1:10:f0:32:e5:4d:a1:bc:99:
60:3f:fd:a5:3f:a4:d0:29:09:c9:0a:fa:ed:be:c2:13:f4:24:
34:7b:5b:f5:0c:e7:63:ff:ab:06:85:e5:b7:68:96:f6:67:72:
8c:94:de:01:16:57:6f:c2:94:60:46:8d:d6:5a:8c:b9:26:6d:
d6:e0:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:58 2025 by rpki-client