Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oFXRQbOQCfZJEJTYBqWbcCE6ue0.roa
File: oFXRQbOQCfZJEJTYBqWbcCE6ue0.roa (raw, json)
Hash identifier: Xu2pnqK2/CntdEGC54edcC3LQ8Oj1XQkonK1E+GQ41U=
Subject key identifier: A0:55:D1:41:B3:90:09:F6:49:10:94:D8:06:A5:9B:70:21:3A:B9:ED
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC0E2EE117F72DB656FFCE9DA44EAC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oFXRQbOQCfZJEJTYBqWbcCE6ue0.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46918
IP address blocks: 45.91.84.0/22 maxlen: 22
91.242.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0e:2e:e1:17:f7:2d:b6:56:ff:ce:9d:a4:4e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a055d141b39009f6491094d806a59b70213ab9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:a4:f1:77:99:2c:13:57:64:57:14:87:6c:
35:67:8e:8b:51:54:ed:0f:cb:6c:7f:6d:ce:b2:eb:
60:a2:4e:43:b5:3a:96:0f:49:22:fc:1e:be:77:2e:
a5:2a:de:5c:84:0c:ab:f2:1c:d6:7e:d8:3d:3a:71:
29:8a:2f:5a:d6:81:b9:ca:4f:40:49:fa:85:33:56:
a4:98:d3:6d:12:ba:f9:28:9c:22:2c:a8:2e:a1:39:
3b:1b:aa:3f:bf:33:7b:46:e7:8a:c5:ea:86:c9:84:
2f:53:9d:26:90:9f:f9:ef:b5:8f:5c:25:75:82:32:
29:77:94:ed:c7:28:ac:95:1e:ae:fc:fc:9e:96:b5:
dd:16:86:1d:04:e9:d7:13:ec:31:17:a5:cf:e6:b0:
86:85:4e:bd:46:e0:ef:98:ca:f4:68:cc:98:de:ca:
71:50:09:98:28:5d:2b:49:bb:f7:d6:07:24:2b:ab:
07:16:3e:eb:2e:35:6e:1a:1a:cc:dd:b7:8d:fe:7b:
7c:9b:31:23:10:78:02:8a:bc:c6:2a:b1:02:98:44:
84:2e:5e:08:3c:dd:b6:61:0e:cb:ce:cf:dc:85:6c:
db:41:be:f2:af:43:70:ab:0b:38:c7:7e:a2:bb:8b:
f6:f9:c2:f5:2d:c0:87:76:38:b3:50:56:cc:e5:2d:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:D1:41:B3:90:09:F6:49:10:94:D8:06:A5:9B:70:21:3A:B9:ED
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oFXRQbOQCfZJEJTYBqWbcCE6ue0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.84.0/22
91.242.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:49:18:80:8a:dd:da:2d:e5:9e:ca:5b:2f:7e:29:76:66:bb:
2e:bb:6c:93:b8:31:07:01:19:f6:d5:a1:93:e5:f1:b0:60:46:
72:5f:0e:7e:5a:6d:4a:7a:80:c6:c5:5b:41:f2:41:f7:d9:4c:
c6:87:da:41:d4:5a:a5:8d:1b:26:4f:f9:e4:ce:f9:48:cc:f0:
56:17:a6:91:df:2d:07:12:70:5d:2a:a9:6b:2e:01:43:9a:ce:
98:73:13:19:e0:ff:bb:7f:ad:4a:12:f2:58:b0:90:2c:06:6f:
a6:fd:1d:a1:47:07:0f:cf:0c:e7:d6:3d:7c:1b:5e:cf:e6:3f:
f2:0a:bd:26:d3:e4:84:5d:2f:9d:a9:01:f9:e8:de:49:91:da:
1e:e7:70:e7:e3:be:78:ca:b9:a8:7c:f5:48:7a:ac:29:51:10:
44:5b:3a:c0:db:e4:85:13:ff:17:ae:5e:00:73:81:0a:36:60:
fb:8d:7f:72:63:b2:f9:37:d8:eb:10:61:fb:bf:d9:a9:00:86:
8c:81:11:f3:de:be:d2:d6:16:76:8d:8d:91:2f:77:6e:0a:61:
8b:4d:8e:35:4e:96:cc:26:f7:a6:43:57:09:c1:78:2e:85:c9:
c7:82:26:76:c5:f7:3a:ab:0b:d5:b7:6b:6e:63:15:22:d4:b8:
1b:6b:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:21 2025 by rpki-client