Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/9-koJCRaNAugAEKo6fLAZsGdzSE.roa
File: 9-koJCRaNAugAEKo6fLAZsGdzSE.roa (raw, json)
Hash identifier: yqebMULMx0oWDwUHIfqdjGMXlYoSOlDq338UkmP6o60=
Subject key identifier: F7:E9:28:24:24:5A:34:0B:A0:00:42:A8:E9:F2:C0:66:C1:9D:CD:21
Certificate issuer: /CN=5039deed6052e8a9f1483379a38cd64ee128eae0
Certificate serial: 02BA29E6
Authority key identifier: 50:39:DE:ED:60:52:E8:A9:F1:48:33:79:A3:8C:D6:4E:E1:28:EA:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDne7WBS6KnxSDN5o4zWTuEo6uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/9-koJCRaNAugAEKo6fLAZsGdzSE.roa
Signing time: Sat 01 Jan 2022 15:04:18 +0000
ROA not before: Sat 01 Jan 2022 15:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42263
IP address blocks: 45.136.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45754854 (0x2ba29e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5039deed6052e8a9f1483379a38cd64ee128eae0
Validity
Not Before: Jan 1 15:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7e92824245a340ba00042a8e9f2c066c19dcd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:1f:56:bc:98:d6:10:7a:61:36:5d:7d:c8:
ac:ad:44:ee:72:6c:ea:1c:10:43:03:b6:31:26:1b:
38:bb:e9:ca:08:fe:08:ac:44:11:fa:81:0f:ec:10:
bc:a1:05:92:ab:1e:bc:31:ac:72:93:a7:8f:74:e5:
d9:be:4b:38:43:ab:1c:b0:d0:f2:30:f1:d2:78:e9:
47:6a:5e:5c:51:0a:1f:84:49:c0:3a:d0:cc:b0:7c:
bc:5f:05:87:ed:f6:46:1f:8c:81:d9:56:45:f4:5c:
4f:8e:75:04:df:c9:a4:32:3d:22:af:c9:ac:c4:9a:
3c:1c:79:c3:82:17:e8:2d:68:ca:32:da:bd:37:65:
da:f4:4e:5b:a1:a9:a6:75:6d:55:4c:c6:2b:97:2f:
97:6c:4e:6c:94:1c:e6:d1:09:53:5c:c8:b0:54:2f:
f1:d9:9e:25:2c:a9:ee:e1:ca:c8:2a:2c:0b:5b:2f:
03:32:72:75:59:6a:b6:ea:70:39:d5:4b:bf:4e:e4:
76:65:b0:8c:29:ab:27:23:56:96:ac:d1:f9:fa:af:
2e:66:4d:f0:d8:95:8f:a9:05:d4:1e:76:c5:96:92:
3e:33:9d:b6:30:06:e3:9d:a0:3a:25:78:3d:a8:53:
7c:07:75:5e:77:d9:d8:77:1d:05:42:33:72:37:19:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:28:24:24:5A:34:0B:A0:00:42:A8:E9:F2:C0:66:C1:9D:CD:21
X509v3 Authority Key Identifier:
keyid:50:39:DE:ED:60:52:E8:A9:F1:48:33:79:A3:8C:D6:4E:E1:28:EA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDne7WBS6KnxSDN5o4zWTuEo6uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/9-koJCRaNAugAEKo6fLAZsGdzSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8d32e6-dc3e-4b84-b42e-68a4d3193c36/1/UDne7WBS6KnxSDN5o4zWTuEo6uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.96.0/22
Signature Algorithm: sha256WithRSAEncryption
90:5e:a1:de:2b:a1:72:27:1a:8c:d1:d6:56:de:39:47:7e:30:
a4:57:92:52:fb:25:09:0d:56:ff:0e:a9:72:8f:47:24:b4:6d:
2d:a7:02:37:44:5d:74:f3:07:45:5c:63:1e:4f:e1:4d:23:3b:
2f:40:1b:54:44:14:03:19:e2:08:c6:d6:d3:84:f9:d4:6b:a4:
b4:df:18:14:c7:71:e3:70:4b:8b:a2:f3:18:4b:4a:15:0a:11:
ba:7f:7a:23:0f:a9:f3:76:31:70:ea:73:c5:30:1b:15:b5:07:
14:21:6e:92:c2:56:35:68:55:65:90:89:95:5d:c5:a1:aa:9b:
ab:51:0e:5e:f3:dc:54:be:ea:9d:69:ab:31:b6:e9:e4:e0:0b:
ba:1a:72:66:3d:01:d6:f3:0a:b2:2f:5a:9b:92:4d:6f:b7:e2:
ae:49:a8:61:6d:dc:9b:c6:5f:1c:0d:fd:df:91:7e:5a:ba:a7:
48:0a:68:de:d3:16:ec:72:d2:46:5d:e6:14:04:65:d1:09:45:
5e:a3:81:78:c4:62:0c:a3:20:0b:e7:30:97:76:7d:67:22:d8:
28:95:6d:4b:ef:c4:9e:be:e3:37:fa:40:b3:a1:98:19:23:32:
2b:c5:14:81:39:e7:cf:8a:e3:33:86:63:c1:90:72:54:f0:03:
b0:11:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:18 2025 by rpki-client