Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/oPX_4bak0FgbvzqfCV5JUiPCIPY.roa
File: oPX_4bak0FgbvzqfCV5JUiPCIPY.roa (raw, json)
Hash identifier: ah+sdaJLJgliJEVF/6CmTyv6CKgzZIFmHPg+yKV5A8o=
Subject key identifier: A0:F5:FF:E1:B6:A4:D0:58:1B:BF:3A:9F:09:5E:49:52:23:C2:20:F6
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 041554AD
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/oPX_4bak0FgbvzqfCV5JUiPCIPY.roa
Signing time: Fri 20 May 2022 12:09:29 +0000
ROA not before: Fri 20 May 2022 12:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.84.90.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68506797 (0x41554ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: May 20 12:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0f5ffe1b6a4d0581bbf3a9f095e495223c220f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:cb:7a:ee:b5:50:d7:d1:25:0f:75:06:4a:
7f:35:ac:cf:8e:1d:dc:c1:88:68:2f:68:bc:77:3f:
9a:3c:60:86:51:71:76:7c:c4:65:10:33:7c:68:00:
df:fd:b9:7e:d9:29:f0:7b:98:99:92:cd:d5:a0:b0:
6f:0a:a3:01:8e:8c:fc:95:41:cf:35:ef:43:67:5f:
0c:b8:b1:06:cf:bb:99:1a:bc:33:9f:b2:85:8f:e1:
64:60:a2:41:38:47:5f:bb:73:c2:41:d4:1f:4c:d3:
5a:38:8e:9e:16:a2:2e:cf:99:5f:f4:eb:b4:89:7b:
27:32:5e:dd:53:96:ea:81:93:3e:de:5a:07:15:31:
00:5c:46:be:82:09:75:22:ca:40:a3:df:7d:94:60:
74:f6:ef:d3:9d:45:13:e6:22:87:3c:4f:36:6a:4f:
cd:1d:0c:d0:34:db:94:ae:fa:c9:19:df:d7:47:4f:
02:95:49:fc:8b:04:d7:bd:67:cb:35:87:04:07:05:
cf:45:28:eb:9c:0a:ff:1a:9a:42:4d:34:f5:ff:b7:
f7:e3:67:5b:ee:ef:e4:66:7e:59:bb:cc:d0:c3:69:
f5:86:21:1e:6d:d5:ea:7d:6f:82:d7:58:97:3b:4e:
63:d3:2f:5d:c6:3a:a6:23:79:3b:d2:a5:7f:3d:ff:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F5:FF:E1:B6:A4:D0:58:1B:BF:3A:9F:09:5E:49:52:23:C2:20:F6
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/oPX_4bak0FgbvzqfCV5JUiPCIPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.84.90.0/23
Signature Algorithm: sha256WithRSAEncryption
83:a4:75:6e:c2:e4:0c:39:85:75:4a:63:39:a1:80:e2:fb:60:
81:3e:05:35:c4:ba:6a:60:87:bb:cd:e3:44:fe:84:5c:85:68:
82:b1:a4:be:fc:1c:5f:35:af:84:1a:b2:dd:28:1b:73:62:3f:
75:0c:39:5b:08:37:a9:ba:6d:63:ce:7a:bd:09:7e:12:6b:be:
78:31:da:18:e2:fe:35:d3:d7:ea:18:16:10:7a:f8:5c:a6:16:
c7:3d:a9:db:8c:7a:bf:40:5a:4b:bc:ff:6a:90:90:ba:9d:21:
a8:be:27:68:80:9c:e8:62:52:6b:40:31:0c:1a:26:6e:59:d6:
26:bc:02:dd:e6:8d:c9:54:76:bb:f8:78:ca:7b:c7:12:cb:6f:
3a:36:66:ac:8e:1c:f2:90:95:74:78:e0:33:d7:5d:79:22:76:
ca:74:41:90:89:e8:1f:22:b4:cd:c5:0e:23:68:21:0d:bc:22:
f3:9d:a6:61:62:02:b7:42:f1:55:09:42:11:de:95:41:f3:e2:
d6:62:ab:d5:a3:19:23:87:79:02:6f:73:70:21:f9:a6:c2:b6:
54:48:ed:94:7a:ce:d7:27:11:6b:58:53:1f:70:4a:e8:fa:29:
3e:8f:0b:1b:83:09:11:e0:fc:bc:a6:9b:96:0a:7e:a1:b0:b7:
23:d4:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:17:56 2025 by rpki-client