Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/SCA4ji5OZ-6qlFWflQoLtsGzqmc.roa
File: SCA4ji5OZ-6qlFWflQoLtsGzqmc.roa (raw, json)
Hash identifier: ZgFngvPkM6Y1TfZusgbQqNGQUufu6osXm+kpFjfmFMc=
Subject key identifier: 48:20:38:8E:2E:4E:67:EE:AA:94:55:9F:95:0A:0B:B6:C1:B3:AA:67
Certificate issuer: /CN=22a241517e731aa63d54b6afe4fd565e7fc7abe2
Certificate serial: 04D91A53
Authority key identifier: 22:A2:41:51:7E:73:1A:A6:3D:54:B6:AF:E4:FD:56:5E:7F:C7:AB:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqJBUX5zGqY9VLav5P1WXn_Hq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/SCA4ji5OZ-6qlFWflQoLtsGzqmc.roa
Signing time: Sat 01 Jan 2022 02:00:35 +0000
ROA not before: Sat 01 Jan 2022 02:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 45.9.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81336915 (0x4d91a53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a241517e731aa63d54b6afe4fd565e7fc7abe2
Validity
Not Before: Jan 1 02:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4820388e2e4e67eeaa94559f950a0bb6c1b3aa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:1c:c4:2e:ac:e9:43:6f:c0:68:35:c1:ca:
3f:41:6c:c5:a5:85:be:22:9a:35:92:3c:aa:31:cb:
ee:f6:76:dd:8e:28:58:84:ea:9f:73:85:15:e7:24:
50:7f:3f:ba:3d:5f:96:b2:5a:b1:66:5d:a5:0b:7b:
9b:6c:17:b0:eb:39:51:97:2a:08:3d:f6:c7:df:b8:
4c:32:06:3c:3a:3c:72:a2:38:b4:92:44:64:f7:d0:
fd:41:89:d0:3e:80:08:e8:1d:50:9b:6f:74:cd:17:
7e:38:3e:2c:63:b7:19:64:5b:0f:b0:31:41:e6:ba:
da:46:ef:aa:9e:a2:bd:d3:d4:36:25:40:af:6b:c9:
dc:18:1c:c1:19:5b:36:ba:de:25:63:6d:e6:ef:5d:
3d:e9:e9:66:ab:c7:53:40:c2:4d:1e:4d:fa:4d:e4:
14:c7:bb:08:41:c1:8d:00:4a:1e:28:64:b2:c4:87:
55:73:ba:d8:fb:45:cb:a3:b3:da:da:09:1a:59:30:
91:42:ea:a3:21:49:16:05:b8:ce:1a:31:9a:38:af:
5d:07:5c:59:54:25:91:8f:e7:27:6d:8f:0a:b9:9d:
04:c9:8d:1b:72:e5:dc:16:0a:64:ca:c0:3a:1e:ed:
2f:57:3e:33:c6:ca:4f:d8:50:43:8c:fd:03:2a:99:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:20:38:8E:2E:4E:67:EE:AA:94:55:9F:95:0A:0B:B6:C1:B3:AA:67
X509v3 Authority Key Identifier:
keyid:22:A2:41:51:7E:73:1A:A6:3D:54:B6:AF:E4:FD:56:5E:7F:C7:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqJBUX5zGqY9VLav5P1WXn_Hq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/SCA4ji5OZ-6qlFWflQoLtsGzqmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/IqJBUX5zGqY9VLav5P1WXn_Hq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.48.0/22
Signature Algorithm: sha256WithRSAEncryption
72:3e:c4:e7:2e:21:e4:40:8d:ba:8b:f3:a9:2b:eb:4f:04:aa:
5f:e0:03:51:f3:23:95:44:3b:57:37:5d:ec:8b:f6:27:82:bb:
38:44:f9:3a:13:58:a7:68:3f:b5:6b:19:29:70:94:9f:bd:8f:
be:54:57:22:1b:46:30:42:ab:eb:19:c1:4c:f6:14:01:00:64:
9f:68:f5:0e:5d:27:d5:5b:96:a5:26:66:e3:b5:ef:68:a3:1f:
b9:e5:48:0c:47:f4:00:ec:00:01:8e:68:4d:47:45:da:a2:e5:
07:ad:e7:23:fc:89:e8:cc:48:f4:a3:56:44:91:57:75:37:84:
74:8f:1b:ea:16:eb:3f:db:53:c4:6f:d4:02:2b:b3:c9:d4:43:
d5:5c:45:69:c3:0f:b3:55:14:06:ac:8b:8b:5f:d0:c9:2d:fd:
9f:eb:3d:04:1c:4a:69:18:34:18:ee:a3:79:b2:71:ed:6f:f2:
cb:71:95:d9:0f:a9:ff:f3:36:ac:d9:56:99:6b:ed:5a:45:bf:
6d:d8:d6:1d:06:22:dc:6a:eb:76:14:94:ee:c2:ea:2e:96:bf:
3c:f0:91:e8:38:cd:05:12:86:64:ae:05:c4:23:3c:25:2f:d1:
25:aa:3f:52:93:8a:62:1a:38:da:6c:20:2b:a6:87:01:86:53:
55:4a:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:29:23 2025 by rpki-client