Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/zw2oLi0qCCMC91wS_I_lsDiHs5E.roa
File: zw2oLi0qCCMC91wS_I_lsDiHs5E.roa (raw, json)
Hash identifier: 7DxO/lKuCoSu5/DWIZRqNRNMtgpAj/gF5iwGoteVY04=
Subject key identifier: CF:0D:A8:2E:2D:2A:08:23:02:F7:5C:12:FC:8F:E5:B0:38:87:B3:91
Certificate issuer: /CN=50398d38cb4496bc4a1dbb5e086d48a7c633969f
Certificate serial: 0732B2C2
Authority key identifier: 50:39:8D:38:CB:44:96:BC:4A:1D:BB:5E:08:6D:48:A7:C6:33:96:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmNOMtElrxKHbteCG1Ip8Yzlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/zw2oLi0qCCMC91wS_I_lsDiHs5E.roa
Signing time: Sat 01 Jan 2022 00:51:46 +0000
ROA not before: Sat 01 Jan 2022 00:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 45.155.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120763074 (0x732b2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50398d38cb4496bc4a1dbb5e086d48a7c633969f
Validity
Not Before: Jan 1 00:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0da82e2d2a082302f75c12fc8fe5b03887b391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:4a:62:7c:3d:da:40:11:f5:39:66:11:1c:
08:08:e8:52:f5:ec:bf:34:5b:08:4d:f5:e2:3c:04:
8f:e5:cc:ee:c6:e2:21:c0:cb:0e:f4:ef:b9:5b:01:
71:7b:f6:2b:44:45:35:6d:80:71:a8:74:73:08:f9:
f2:3d:09:ca:57:9e:db:94:87:15:a4:91:e1:da:b3:
4e:35:42:02:5b:91:b8:27:5a:06:81:29:f4:b3:3e:
32:9a:94:84:06:f9:a3:93:8a:fa:b0:c6:31:63:69:
3e:5c:45:d4:a8:a0:45:12:16:13:c6:ee:97:09:e5:
82:f5:20:90:4e:6e:e2:81:d0:88:3f:5a:0f:66:7c:
f1:59:a7:9c:7a:56:3d:d9:e2:b4:13:88:9a:5b:cf:
bc:c0:22:bb:80:2f:46:2e:aa:1b:37:b1:91:e9:3a:
dc:50:6b:81:39:f8:a2:44:76:12:86:89:d9:3b:54:
0a:c1:d5:e9:f5:96:6b:e8:40:e3:48:0c:e8:39:87:
e7:3a:7a:11:41:4e:f3:a7:79:94:72:57:77:87:bc:
08:17:ab:81:d4:5c:dd:60:64:e7:52:5a:9b:c0:50:
79:c0:9f:10:d3:b5:ac:ed:77:65:6c:4e:71:38:52:
88:42:aa:76:36:a9:05:94:41:77:1f:a7:9b:90:c7:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:A8:2E:2D:2A:08:23:02:F7:5C:12:FC:8F:E5:B0:38:87:B3:91
X509v3 Authority Key Identifier:
keyid:50:39:8D:38:CB:44:96:BC:4A:1D:BB:5E:08:6D:48:A7:C6:33:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmNOMtElrxKHbteCG1Ip8Yzlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/zw2oLi0qCCMC91wS_I_lsDiHs5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/UDmNOMtElrxKHbteCG1Ip8Yzlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.228.0/22
Signature Algorithm: sha256WithRSAEncryption
eb:d8:a4:2a:0a:6c:c9:7b:d2:a8:ee:40:5a:f3:84:a0:a2:b6:
7e:79:23:62:06:e7:54:4e:01:cf:95:52:72:31:34:b2:b8:03:
83:41:05:99:51:d1:68:2f:3a:98:b5:d8:5c:7a:37:ec:96:02:
f7:63:3d:0a:03:1d:a0:76:5b:05:00:e8:e1:88:c6:68:d7:9f:
fd:00:93:a2:5b:b3:43:e0:b5:3a:d5:fb:79:35:97:6a:09:34:
38:a2:88:2a:14:e5:73:1a:c4:9b:8e:a3:7f:1a:4b:a1:8c:f6:
4e:ba:99:a5:46:ff:78:12:36:f6:3e:fc:dc:44:ba:4a:77:fc:
3f:b1:c2:fa:41:8b:8e:39:d1:e9:2f:db:a5:47:f2:64:40:fc:
f0:d8:86:e9:c8:3c:0a:46:64:b5:d1:5a:ae:79:00:7c:b2:b8:
7b:ec:b3:0d:94:11:b3:02:88:11:59:65:ab:1a:f0:66:d1:1b:
df:dc:f4:39:4a:38:7a:c1:54:71:2f:7e:81:c0:8d:06:27:d9:
cd:49:39:ca:b1:8e:8c:ef:5d:0b:e2:a4:12:f8:29:16:31:65:
1e:29:8a:72:fd:b1:d2:cb:98:e8:bc:10:ce:df:93:35:cf:d8:
d6:c8:84:87:66:33:61:49:3c:81:c7:b8:88:2b:b0:9e:90:52:
08:4e:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:51 2025 by rpki-client