Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/XOuCa69fjsYQUQ3xR-gwPJdZmGA.roa
File: XOuCa69fjsYQUQ3xR-gwPJdZmGA.roa (raw, json)
Hash identifier: qbspvmu98yRoEtnklquF8V/qq3s3IqEoWp0rJTa6kPg=
Subject key identifier: 5C:EB:82:6B:AF:5F:8E:C6:10:51:0D:F1:47:E8:30:3C:97:59:98:60
Certificate issuer: /CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Certificate serial: 06E5230E
Authority key identifier: F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/XOuCa69fjsYQUQ3xR-gwPJdZmGA.roa
Signing time: Tue 26 Apr 2022 08:39:25 +0000
ROA not before: Tue 26 Apr 2022 08:39:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42156
IP address blocks: 45.83.172.0/22 maxlen: 24
185.161.188.0/24 maxlen: 24
2a0e:8480::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115680014 (0x6e5230e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Validity
Not Before: Apr 26 08:39:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ceb826baf5f8ec610510df147e8303c97599860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:47:09:9d:9a:fb:d8:3a:9c:ec:79:69:04:
2e:2e:9a:29:ba:49:16:2d:d1:85:a1:15:93:21:98:
56:af:28:a7:cf:ef:45:7b:c9:04:f5:cb:a0:b3:e9:
81:6b:85:13:93:65:6e:3f:0e:b5:0a:b4:71:36:31:
05:57:98:12:8e:4a:b7:5a:38:fe:5d:92:aa:54:2b:
85:ae:6a:26:a2:81:94:fd:6e:4f:f5:b1:3d:bf:1f:
9e:20:8d:4b:15:0f:19:2c:1b:b9:0e:ed:14:53:bb:
6f:5b:c3:64:e8:f3:5f:59:f2:e0:c6:2e:db:30:e1:
b2:19:f4:06:7e:0f:4b:b5:8e:ab:f7:45:2a:3d:3b:
54:80:7d:b1:82:20:10:29:f7:ea:22:d3:07:93:58:
9d:29:4c:bb:a7:0d:ef:9c:6b:0b:0a:b9:f6:3e:b1:
d4:c2:8b:2e:7a:91:bb:71:47:ad:25:58:92:20:5f:
4d:a2:16:19:b2:fa:d3:da:31:d3:f9:dd:ff:8d:be:
81:92:0a:34:dc:e8:99:a4:1e:1d:cd:28:a5:3d:c6:
2d:83:b3:0e:ed:99:90:35:39:e7:42:73:24:6a:b7:
25:57:60:70:4c:3a:58:f5:cd:cc:96:d2:b4:1e:02:
43:27:30:91:db:26:a0:cc:bf:2e:93:00:21:86:2c:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:82:6B:AF:5F:8E:C6:10:51:0D:F1:47:E8:30:3C:97:59:98:60
X509v3 Authority Key Identifier:
keyid:F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/XOuCa69fjsYQUQ3xR-gwPJdZmGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
185.161.188.0/24
IPv6:
2a0e:8480::/29
Signature Algorithm: sha256WithRSAEncryption
8d:b4:e6:99:a3:0d:00:6b:50:fe:31:c4:76:8b:f4:52:52:f9:
20:33:33:89:f5:c8:8f:ad:3d:b8:d9:38:0b:a7:16:17:40:ea:
48:03:07:bf:04:e6:cf:52:e1:50:f3:3b:5e:84:0f:68:59:70:
20:cb:23:72:a6:3a:80:47:1c:e8:da:1c:d8:3f:cd:6f:a4:84:
e3:f2:1a:5a:39:e6:34:4b:a1:14:23:e7:78:82:7e:51:4b:8f:
e5:44:60:a7:9f:77:e7:59:91:70:06:5b:8a:ff:0b:4c:c1:e9:
8c:fd:c0:4a:e8:c6:84:07:5f:b8:74:28:2d:0b:69:35:ea:63:
05:5a:94:9c:17:9d:64:8d:e3:18:4a:41:f1:45:38:bd:a5:87:
13:6c:27:74:eb:d6:b7:42:6d:71:58:ab:08:88:bf:f0:f1:89:
12:07:f6:4b:14:e6:f8:79:32:8b:47:aa:78:03:0b:b2:5d:63:
de:ab:fa:2f:67:a0:35:9b:f5:2c:eb:e9:83:23:15:83:4c:34:
fb:05:da:1b:1b:62:6f:7f:aa:f0:ef:f1:75:8d:cb:ab:9b:20:
4c:c2:fc:cd:98:74:50:87:11:25:ba:84:bd:5a:75:f3:74:d7:
75:13:84:33:1e:9a:97:06:1c:ee:dd:5d:d3:54:6c:ed:2c:7c:
79:66:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:43 2025 by rpki-client