Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/tJzXGVItBmf8ZX6NBpq547zyqeA.roa
File: tJzXGVItBmf8ZX6NBpq547zyqeA.roa (raw, json)
Hash identifier: IBe/XK8z9f58NoRdyq94NOoRj6RcHEmkzUGKOi831QM=
Subject key identifier: B4:9C:D7:19:52:2D:06:67:FC:65:7E:8D:06:9A:B9:E3:BC:F2:A9:E0
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 02C60E1A
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/tJzXGVItBmf8ZX6NBpq547zyqeA.roa
Signing time: Fri 24 Jun 2022 14:00:31 +0000
ROA not before: Fri 24 Jun 2022 14:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.81.37.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46534170 (0x2c60e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: Jun 24 14:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b49cd719522d0667fc657e8d069ab9e3bcf2a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:fb:f2:c8:16:20:be:ca:04:6c:c8:b7:eb:
2e:dc:95:cd:da:09:c2:2e:93:57:14:ae:d6:eb:a0:
34:4b:dd:91:95:8f:0f:ba:cd:ba:eb:a6:ad:90:ee:
58:c3:02:d3:1a:5c:42:29:04:08:07:bb:00:d3:47:
79:93:06:c9:e3:f9:6c:a5:00:a6:41:a6:f1:47:ee:
0a:11:f1:e8:53:02:3e:92:e0:85:4b:c7:d9:aa:4b:
bd:3c:12:d3:aa:2e:36:f7:42:e8:3c:11:07:ef:3d:
36:be:c9:10:15:d3:e2:bd:fe:24:39:02:95:51:24:
cb:64:cd:9d:af:3e:98:d2:9b:42:3e:3a:a3:88:53:
ac:3f:c1:e7:33:8f:2d:5a:40:71:73:bc:65:31:21:
b3:e7:91:bf:39:d8:db:94:7d:9c:bc:db:ad:10:99:
53:bf:ad:b1:53:33:30:12:49:dc:cb:88:ed:b5:75:
22:71:df:c1:67:02:19:01:6b:0e:a8:71:e5:b6:09:
4e:c3:da:74:0e:5c:3a:e3:34:9b:cf:a6:fb:44:b5:
71:cb:71:4c:d5:22:1b:18:bb:fa:bb:b6:07:28:73:
cf:01:ac:4e:06:38:85:85:73:f5:08:90:2c:7d:1c:
96:f7:c6:59:1d:a9:d8:94:08:14:d2:3f:4d:77:96:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:D7:19:52:2D:06:67:FC:65:7E:8D:06:9A:B9:E3:BC:F2:A9:E0
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/tJzXGVItBmf8ZX6NBpq547zyqeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.37.0-45.81.39.255
Signature Algorithm: sha256WithRSAEncryption
6f:1e:d3:ea:ac:8e:f2:cd:6a:c5:aa:ca:37:45:fa:89:ab:7e:
23:87:59:5d:8e:ac:e7:12:26:6f:14:3c:39:5b:62:2d:3d:15:
cc:c0:28:e2:37:9c:de:01:c8:ed:d1:f1:4f:89:21:dc:d8:8b:
9b:45:24:50:bc:d2:cd:96:6f:fe:f8:a9:80:a6:22:b1:7f:8e:
53:75:52:22:ec:96:80:cc:6c:37:15:9c:95:b7:34:bd:97:0d:
2f:53:ee:99:dc:f5:1a:42:83:ba:6e:11:06:6d:24:bf:c8:7f:
8f:83:ff:e2:0f:ba:ed:55:f7:de:61:f9:f6:4a:a5:c7:b4:b9:
a7:22:ff:08:59:85:1c:ef:8b:2f:9a:c0:31:a9:64:ae:63:88:
de:cd:f7:4c:69:e7:44:6d:09:c5:0d:d6:81:c7:67:ce:92:32:
91:c9:f2:ad:32:91:b7:d2:1c:46:23:e0:e0:e4:6b:14:48:9e:
e1:a1:7d:be:ac:6e:8a:76:16:42:98:b5:99:06:df:96:3f:a3:
d5:1d:59:52:fc:15:34:dc:86:9f:37:6f:40:10:e9:e1:0a:f9:
46:28:23:7d:ab:08:dc:19:1b:bb:77:9c:d1:19:2f:f6:e6:5a:
85:96:29:74:51:60:9c:01:47:4f:ee:87:ef:4a:98:35:56:2a:
b5:ba:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:36:22 2025 by rpki-client