Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/IcC9dKLLpS4bHeimhv9FhTG4LyU.roa
File: IcC9dKLLpS4bHeimhv9FhTG4LyU.roa (raw, json)
Hash identifier: cKbgGUne4oDIKDCEC3qXL3/30bF6sCveQykLQE14MBg=
Subject key identifier: 21:C0:BD:74:A2:CB:A5:2E:1B:1D:E8:A6:86:FF:45:85:31:B8:2F:25
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0384D0EB
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/IcC9dKLLpS4bHeimhv9FhTG4LyU.roa
Signing time: Wed 09 Feb 2022 12:20:19 +0000
ROA not before: Wed 09 Feb 2022 12:20:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.158.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59035883 (0x384d0eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 9 12:20:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21c0bd74a2cba52e1b1de8a686ff458531b82f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:9b:ca:46:16:ba:05:2c:6e:b4:d8:5e:02:
97:c1:a4:3c:bc:f8:31:12:c4:d0:90:ad:f2:0d:35:
65:0c:48:e9:de:71:48:41:07:c9:02:4d:6b:6d:33:
e0:c1:d7:15:db:01:1a:2d:04:e9:1c:5a:32:ea:8a:
18:01:ae:5d:6e:da:bf:5a:4e:cf:5d:a5:1d:ec:95:
aa:a1:8c:c4:02:2f:b7:50:c3:95:89:28:50:c4:84:
b6:2f:c2:92:0b:55:6c:39:cd:bf:72:a3:82:c5:48:
1b:05:23:f2:6c:f1:55:f8:ba:28:f2:58:d5:a3:2e:
10:f9:33:a3:7d:ed:c6:2f:71:7b:56:be:3e:08:97:
f5:01:bd:83:a5:16:9a:d8:29:29:b2:38:bd:41:05:
c9:fa:d8:89:0b:f1:90:f6:ea:bb:40:e3:4b:66:47:
a2:5c:e6:c6:a7:0f:88:39:d2:53:3d:ae:16:67:e5:
72:91:18:86:66:e1:ef:f8:75:66:02:af:33:7d:3a:
f1:bc:53:53:a4:c6:50:b4:e8:a9:f2:45:84:e7:2d:
1d:d6:87:c0:62:ed:2d:7f:00:d3:c6:c7:a4:9e:bc:
4b:1b:e0:2a:bc:d2:dc:b8:47:46:40:f9:c7:c6:73:
ff:6b:18:fc:1f:20:82:42:30:4e:7e:54:0d:0a:ab:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C0:BD:74:A2:CB:A5:2E:1B:1D:E8:A6:86:FF:45:85:31:B8:2F:25
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/IcC9dKLLpS4bHeimhv9FhTG4LyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.8.0/22
Signature Algorithm: sha256WithRSAEncryption
31:95:91:59:89:9a:54:4b:d0:de:fa:00:8b:2b:07:1e:e5:1a:
0d:57:7f:81:41:50:d0:17:87:49:3e:73:0a:d5:ff:eb:1a:1d:
84:1f:d9:ea:41:d2:45:0a:de:c8:5d:6c:14:1e:fc:f7:c4:ae:
07:f2:ea:3c:14:bf:13:bd:cd:d6:3f:1d:85:ec:d4:9e:76:87:
0e:83:a7:71:10:a8:29:50:ef:9e:22:ea:7f:6d:51:66:d5:83:
74:e8:42:17:c5:86:93:ab:08:e6:6f:f8:f3:19:05:05:97:71:
82:57:4b:cf:f0:72:6c:fd:fa:a1:99:4e:77:01:9d:12:59:a3:
33:f6:82:94:13:ae:fa:6b:1c:c6:73:2b:ca:7e:57:88:68:7f:
55:b9:ae:f5:10:27:87:67:0c:b4:e3:5c:89:f0:bf:c6:4f:65:
39:91:87:ec:b0:c1:e3:1b:92:c9:4a:b8:1b:7e:51:3c:8d:97:
f4:5b:0b:ec:65:22:95:37:bd:7a:10:94:1f:ec:75:82:43:85:
d1:5a:c5:f3:f0:e6:00:9f:3f:44:cc:71:1b:87:ac:df:0e:bf:
30:51:4c:38:bd:51:e3:af:ea:d7:1d:86:37:63:c5:70:a3:69:
d2:e3:dd:3d:f5:cf:b2:d9:cc:26:32:c0:14:9a:c0:20:dc:f5:
4a:3f:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:24 2025 by rpki-client