Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/P5_NF-qoX6QSi9_8lqyzBU5G4Ok.roa
File: P5_NF-qoX6QSi9_8lqyzBU5G4Ok.roa (raw, json)
Hash identifier: wo8K51WAGgsX9wjy55OOqSUgAovjqCKT7GcoVDeKmfw=
Subject key identifier: 3F:9F:CD:17:EA:A8:5F:A4:12:8B:DF:FC:96:AC:B3:05:4E:46:E0:E9
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 026D8C50
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/P5_NF-qoX6QSi9_8lqyzBU5G4Ok.roa
Signing time: Thu 12 May 2022 05:27:02 +0000
ROA not before: Thu 12 May 2022 05:27:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205175
IP address blocks: 45.81.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40733776 (0x26d8c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: May 12 05:27:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f9fcd17eaa85fa4128bdffc96acb3054e46e0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:57:63:5f:e4:47:f1:24:ff:75:a3:94:72:
fd:b6:5c:ec:de:ab:14:9b:04:d9:3e:25:62:8c:95:
0e:12:d1:9c:0c:87:96:e9:c1:6a:81:b0:3e:a5:dd:
78:a7:5d:09:45:9b:03:cc:da:77:8f:08:85:8a:48:
da:19:da:46:02:9e:b0:93:f9:8b:4f:c6:b3:d1:a0:
8b:0a:8b:49:07:de:e0:cb:a8:8d:7b:54:3f:7f:7c:
e7:fb:a0:00:b9:33:61:71:cf:cd:0d:b6:e3:e9:05:
e3:f6:3e:87:7d:20:1b:b8:2b:9e:e9:d5:ef:a6:f2:
55:0b:d9:ba:68:5e:a4:73:7a:5b:19:87:a9:ad:3e:
d6:32:fc:a5:3e:e7:66:58:a6:23:a7:02:5c:1f:b5:
80:48:ed:d2:b2:79:97:ca:7e:67:96:61:62:89:22:
a6:8b:52:9f:05:86:6e:14:24:d8:03:bc:b4:d9:ae:
e5:16:dd:98:91:03:5d:29:4b:77:6a:1c:a0:e1:81:
bf:bf:23:ed:96:29:98:75:e7:56:f6:15:d2:97:a5:
e4:0d:5b:2f:ca:68:63:b9:0e:01:3e:76:9b:3c:ea:
63:cc:60:ba:8f:9a:d8:84:39:e5:dc:76:eb:13:03:
84:cf:f2:ac:41:82:5a:5a:93:2b:ae:6b:4e:91:05:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:CD:17:EA:A8:5F:A4:12:8B:DF:FC:96:AC:B3:05:4E:46:E0:E9
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/P5_NF-qoX6QSi9_8lqyzBU5G4Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c6:c4:7e:be:a8:f1:56:da:e3:8d:ab:c8:ca:54:70:6a:c6:
ad:84:7d:33:7d:53:bb:f9:3a:a9:1f:3d:64:42:b4:dc:e4:92:
52:09:06:39:bc:d6:d7:ef:e2:f6:a1:a6:73:0e:8c:df:75:15:
58:b6:25:66:97:32:49:35:d0:3c:1f:d3:bd:ba:78:0a:fd:3d:
80:ff:46:55:e3:34:99:70:ed:b3:b4:6b:a4:83:55:a7:3a:b1:
c8:e3:b5:24:59:0e:aa:5a:91:a6:29:fa:7c:20:09:ef:cd:25:
1d:4e:f7:76:e9:fc:02:b1:54:6a:d8:dc:c3:a5:b4:1c:cf:ee:
5d:47:0a:c7:9f:c9:fc:5b:38:42:2a:5a:9c:c5:88:60:c1:ff:
1c:49:6e:5a:69:b8:03:ff:2e:7f:9a:83:e5:d4:21:22:d6:99:
a3:6e:b6:62:b4:dd:f4:74:70:57:15:02:df:29:7e:3a:02:62:
05:06:6e:37:bd:99:64:06:80:a7:05:d8:3f:6b:9a:77:ca:4c:
2b:23:45:15:69:40:a1:ac:ad:ff:ff:7f:81:36:6c:9a:75:c8:
ab:a2:8c:ea:5b:83:36:e8:40:9d:a9:bc:a7:c9:53:ae:d7:29:
83:a0:7c:3a:23:1a:a8:d3:49:82:5e:99:4d:8c:bf:a3:47:6a:
9e:d3:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:22 2025 by rpki-client