Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VXE4hUvmi6D6gNrN8StEMqlp2Jo.roa
File: VXE4hUvmi6D6gNrN8StEMqlp2Jo.roa (raw, json)
Hash identifier: Z8tGOoc/0iFRHakuDZ7LqpKUE4d3pKCYH4NLleA5w2o=
Subject key identifier: 55:71:38:85:4B:E6:8B:A0:FA:80:DA:CD:F1:2B:44:32:A9:69:D8:9A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0195C8201F0A67EFC0E6E6FA695A53FFC663
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VXE4hUvmi6D6gNrN8StEMqlp2Jo.roa
Signing time: Mon 24 Mar 2025 12:28:23 +0000
ROA not before: Mon 24 Mar 2025 12:28:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206085
IP address blocks: 45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:20:1f:0a:67:ef:c0:e6:e6:fa:69:5a:53:ff:c6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 24 12:28:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=557138854be68ba0fa80dacdf12b4432a969d89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:48:c0:09:43:62:25:d0:00:7f:8c:87:0c:
62:46:e5:8a:e2:dc:23:72:cc:24:e5:e4:93:d4:95:
d4:e6:17:b3:49:ce:2d:e2:91:bf:d2:d3:ac:73:04:
94:72:26:53:e8:64:07:89:b6:ec:97:72:04:5c:3b:
cd:a0:cd:5f:20:9b:29:1f:35:a1:18:fc:ab:f1:7b:
fb:5c:18:89:a8:1d:31:fb:eb:90:9a:41:67:0e:0c:
b2:57:2b:2b:16:ad:63:78:88:01:6a:f8:a3:b6:73:
01:fe:71:7b:63:5c:88:7b:39:3f:09:90:c9:bf:96:
86:86:67:3d:89:6e:c1:0a:64:e5:81:b4:13:31:80:
b7:e7:16:29:aa:30:e4:db:23:34:20:fd:2c:f1:7b:
19:a6:ff:43:76:11:90:57:38:3f:d4:31:9f:ac:9d:
bb:e4:c5:89:99:a9:a3:35:cd:a7:51:cc:2e:dd:21:
6a:00:1f:b4:f6:f2:08:d8:51:9c:5f:4b:ba:42:33:
7e:80:a7:4d:38:be:81:86:b7:19:c7:fc:19:73:ea:
66:6f:48:9b:30:16:07:e8:be:e9:db:15:95:3d:89:
a3:38:76:ed:46:f0:b4:d1:07:73:36:83:2e:c4:d7:
23:e0:b3:b3:0b:a2:84:6a:11:7b:21:12:b8:15:39:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:71:38:85:4B:E6:8B:A0:FA:80:DA:CD:F1:2B:44:32:A9:69:D8:9A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VXE4hUvmi6D6gNrN8StEMqlp2Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.12.0/22
45.95.88.0/22
Signature Algorithm: sha256WithRSAEncryption
50:20:b6:f7:53:87:fc:12:7d:b0:72:49:46:7a:39:47:3d:7a:
d9:4c:6e:16:84:8e:f1:f1:ea:3c:a9:16:7a:d3:f4:e0:5d:90:
ce:57:70:42:e4:05:db:1b:2a:c2:34:03:f6:7c:11:f7:25:89:
56:71:9b:d5:39:1d:35:d1:7c:a7:9b:8a:f1:69:32:ba:42:a1:
74:18:31:07:d0:13:70:be:8b:c6:30:f9:15:1f:62:90:01:2c:
2a:57:f6:83:75:4c:74:81:7f:ce:37:35:b3:68:33:ab:1c:c8:
8a:c1:74:96:0f:1f:4c:a4:26:aa:43:78:26:a9:54:f3:ff:98:
17:0b:7b:81:06:89:3e:51:cb:8b:17:c3:4f:05:db:24:2c:89:
38:df:e4:2c:6b:1d:e9:3e:a4:ab:6e:5e:ef:45:56:85:40:65:
6b:f6:b2:72:07:e4:f8:51:c5:66:ba:9a:bf:05:c2:bc:53:a8:
a9:36:2a:50:9c:1a:d9:bf:b7:a4:94:44:05:37:ff:f6:2b:89:
8c:fb:47:9f:b5:a0:fa:80:6f:87:8f:32:a5:65:8b:41:e2:52:
36:81:3e:8e:bd:36:e7:65:01:7e:0e:13:6e:8a:cb:10:3c:bf:
d6:80:78:13:06:66:87:6e:92:dc:b2:68:87:cd:f1:2d:fa:db:
92:12:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:17 2025 by rpki-client