Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/frKBBQh9BE8vsEs4TnRAd8pcYFA.roa
File: frKBBQh9BE8vsEs4TnRAd8pcYFA.roa (raw, json)
Hash identifier: 3frJ5ASLZ4WLcKP7aIGyz7YEpUvKCCc4m/7UYM8SCVI=
Subject key identifier: 7E:B2:81:05:08:7D:04:4F:2F:B0:4B:38:4E:74:40:77:CA:5C:60:50
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 02DA6EF5
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/frKBBQh9BE8vsEs4TnRAd8pcYFA.roa
Signing time: Sat 01 Jan 2022 12:54:30 +0000
ROA not before: Sat 01 Jan 2022 12:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.84.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47869685 (0x2da6ef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: Jan 1 12:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb28105087d044f2fb04b384e744077ca5c6050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:c8:d8:f4:5b:83:78:90:45:4b:0d:4b:9c:
1c:93:9e:ea:4c:db:75:35:91:15:2b:2c:04:23:19:
91:da:49:fc:f5:28:51:39:cc:b9:58:12:2a:72:18:
97:fa:1c:25:d1:fc:74:c1:70:c4:4f:b6:27:e1:6a:
c1:63:dd:74:0f:27:69:4d:83:b5:94:4b:d8:c6:67:
52:a2:85:f1:1b:53:77:78:2c:55:2b:63:f1:6b:4f:
a2:ee:8f:b6:88:a3:a4:44:53:26:e6:9a:09:52:be:
bb:9d:fe:26:ac:2a:60:5d:04:95:1e:f4:50:77:1e:
68:1b:51:f6:1b:c5:32:bc:6e:97:8a:12:af:c8:f1:
b2:55:6d:80:d5:11:67:ac:14:08:80:b6:18:ca:70:
d2:e7:39:d8:c1:63:0c:36:33:fe:76:c8:4d:36:cd:
24:4e:61:2a:a9:4a:c3:87:8d:09:fb:d2:a3:e0:6c:
11:d7:db:69:9f:da:c8:60:3e:50:87:30:5f:21:0d:
d0:24:c8:e3:8f:d2:d8:f3:0d:b5:8b:79:db:31:e4:
1f:3e:04:e2:0a:71:51:d6:ac:2a:90:3f:8b:86:8d:
3e:e4:64:3d:b6:43:6b:44:9b:d4:57:02:29:e9:ca:
47:6c:64:3a:22:49:ec:04:e4:e1:d2:98:18:9d:a2:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B2:81:05:08:7D:04:4F:2F:B0:4B:38:4E:74:40:77:CA:5C:60:50
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/frKBBQh9BE8vsEs4TnRAd8pcYFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/22
Signature Algorithm: sha256WithRSAEncryption
93:b6:43:29:d0:cd:fa:9c:ef:2d:ac:36:81:1f:e8:30:a7:d9:
66:1b:b7:cc:48:83:c7:e0:96:ec:46:e9:77:a6:3d:03:1d:29:
e3:17:2a:56:3c:0c:e9:41:02:8c:ba:11:f4:1b:71:ff:34:3c:
63:2d:53:3e:bd:13:70:13:eb:e1:32:92:66:d3:e1:30:61:ea:
6e:98:ff:e1:ca:6e:5c:eb:da:c8:43:c5:14:8c:cf:e9:34:ce:
d4:3d:1d:6e:20:7a:a7:56:bc:d5:14:24:92:96:e8:75:e0:92:
26:97:38:b2:13:54:cd:b0:71:22:c6:5e:15:a3:b1:aa:e1:5f:
3b:2b:07:93:aa:86:dd:f6:27:68:e5:21:2f:65:17:84:d8:29:
41:d9:0a:7e:94:bb:58:e6:99:9a:96:52:6a:b6:9f:a9:40:8f:
77:cb:42:56:0d:bc:8e:64:12:ff:f5:01:b9:3f:12:ee:dc:ac:
06:23:1f:4b:c7:e3:a3:8d:42:ef:a1:fb:8c:ca:4d:2a:44:a1:
9f:95:73:2d:3b:bd:74:c7:35:fc:bd:05:2e:9c:c7:1b:0b:66:
b4:92:41:15:ba:45:5c:92:21:eb:b3:ae:91:b1:7b:28:8b:df:
a5:45:5f:c3:c2:bb:33:5a:1a:f4:0e:df:9c:8f:2b:a2:31:7d:
fd:2c:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:43:56 2025 by rpki-client