Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/4yX29IvUvbx6TeCA9fcduAwYLQw.roa
File: 4yX29IvUvbx6TeCA9fcduAwYLQw.roa (raw, json)
Hash identifier: kvd5zCm/XvSE0Zzv7TVkwawwOc2QXiqsJPq6ETxJeBU=
Subject key identifier: E3:25:F6:F4:8B:D4:BD:BC:7A:4D:E0:80:F5:F7:1D:B8:0C:18:2D:0C
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0182ED7500ADA4CA954B32A5A2C605B2F391
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/4yX29IvUvbx6TeCA9fcduAwYLQw.roa
Signing time: Tue 30 Aug 2022 06:34:04 +0000
ROA not before: Tue 30 Aug 2022 06:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.66.229.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:75:00:ad:a4:ca:95:4b:32:a5:a2:c6:05:b2:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Aug 30 06:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e325f6f48bd4bdbc7a4de080f5f71db80c182d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:cd:be:cc:47:f3:23:67:13:88:75:86:ab:
06:25:f5:d1:c9:2a:69:3c:f4:ad:cb:80:59:ad:1c:
06:bf:9d:5f:4d:a2:7a:55:69:1f:f4:5e:bb:1b:a2:
1c:df:5a:91:5e:c8:f1:de:1b:5b:5e:f7:49:27:4a:
6e:a2:3c:1c:11:59:49:89:a1:3c:36:cf:94:d8:47:
59:87:d4:90:dc:fb:1e:ac:d4:ec:5d:0b:b5:70:5a:
fc:b8:89:e7:5e:45:44:66:92:39:87:5d:f1:47:b7:
83:30:e8:b2:68:83:d9:52:15:f8:2b:3c:d6:6f:cd:
42:74:25:f9:49:ec:4d:ec:d3:26:b2:5f:47:8b:d9:
81:84:75:ae:56:47:fb:85:22:31:c9:a8:0c:20:d4:
05:7f:0d:10:60:98:19:05:89:ca:11:a3:25:8e:0c:
3e:58:92:36:83:52:b9:b9:91:40:b5:3c:06:1f:55:
68:64:51:37:bc:b2:79:aa:4e:a2:d4:e5:3b:71:34:
39:2a:5f:b9:8c:6c:75:71:ba:b4:4f:00:6b:63:9f:
87:5b:d1:f1:fe:10:84:fa:31:85:a8:93:dd:5f:87:
96:7f:b1:71:34:db:dc:a5:e6:cf:ae:56:dc:a0:a2:
1b:45:f4:e4:f8:62:58:83:48:61:d7:a2:92:a3:ed:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:F6:F4:8B:D4:BD:BC:7A:4D:E0:80:F5:F7:1D:B8:0C:18:2D:0C
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/4yX29IvUvbx6TeCA9fcduAwYLQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0-45.66.230.255
Signature Algorithm: sha256WithRSAEncryption
77:51:46:2d:8d:a1:d0:e5:73:46:cf:d1:b3:c4:8d:2e:5e:6b:
59:94:49:26:b2:bc:a9:e0:aa:d8:4c:33:3a:c6:6a:c7:06:6e:
5e:84:e3:ca:68:3a:99:6b:2a:af:20:59:a9:94:37:b9:e7:fd:
90:3f:c6:7d:11:fe:9c:14:8a:f5:e2:0b:29:43:53:c0:17:17:
12:47:2b:ec:09:41:2e:e6:c0:eb:1c:04:9e:15:22:dc:cd:b4:
ce:3c:f7:8b:3f:a8:d4:a5:79:b6:d9:35:38:11:84:57:73:86:
0b:11:e1:a6:0e:07:fc:0c:84:db:83:e6:34:9f:d3:ba:c4:62:
9e:88:7c:be:5d:8f:7e:9f:91:39:e2:33:26:58:d4:83:53:1d:
c2:ea:18:64:05:51:d2:03:fc:4d:fd:5b:db:72:3e:d5:0e:80:
09:69:bf:2a:77:59:a7:c3:5c:f9:86:20:af:06:fe:7f:65:ac:
2e:fc:a9:d7:ed:a5:cf:e2:6b:bd:f3:71:47:d3:7e:51:eb:6c:
41:b0:bc:77:e8:ea:10:a8:2b:54:fe:bd:58:32:7e:02:fc:f5:
57:71:24:95:05:3b:a1:87:92:d0:d8:bb:79:86:8c:59:83:b8:
85:9b:a2:59:e6:51:1a:83:bb:4f:98:25:7b:b0:6f:52:7b:e9:
31:1d:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:37:54 2025 by rpki-client