Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/cpPci9mYSHff9IwVgzvofyHb6HY.roa
File: cpPci9mYSHff9IwVgzvofyHb6HY.roa (raw, json)
Hash identifier: Kxifg7M84wyN68KaqJs9X6REEacoNcWPZKsHOwv9fWM=
Subject key identifier: 72:93:DC:8B:D9:98:48:77:DF:F4:8C:15:83:3B:E8:7F:21:DB:E8:76
Certificate issuer: /CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Certificate serial: 056B3931
Authority key identifier: B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/cpPci9mYSHff9IwVgzvofyHb6HY.roa
Signing time: Sat 01 Jan 2022 01:01:20 +0000
ROA not before: Sat 01 Jan 2022 01:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208924
IP address blocks: 45.14.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90913073 (0x56b3931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Validity
Not Before: Jan 1 01:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7293dc8bd9984877dff48c15833be87f21dbe876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:21:fc:da:d5:e2:2b:5f:8d:d1:06:79:69:
de:32:e0:5f:ed:e8:ed:9d:6b:d3:14:d6:92:41:f7:
82:b4:e1:54:a4:9b:e3:aa:f3:0e:c3:3b:5c:19:e3:
88:fe:f3:c9:3e:63:6d:ca:42:9e:a5:56:47:2b:45:
44:df:4a:2a:a1:68:62:05:af:51:52:b0:97:bd:21:
c9:72:67:fd:7b:88:50:6b:1c:77:ef:ab:bb:e8:78:
58:51:5d:a4:6b:23:33:3b:84:7d:91:f1:4f:7a:2e:
23:4c:c8:06:68:c0:83:9f:b8:8a:6f:b1:1e:4f:f3:
81:e5:26:94:7a:c9:d7:26:0f:df:bd:eb:ab:93:c3:
ce:05:bd:21:fb:fb:e6:d0:b3:84:da:f5:90:d4:b6:
5e:09:04:87:bb:40:d4:91:81:df:d6:21:0b:a0:b1:
3f:75:a4:3f:6e:38:53:9d:e8:60:d7:ba:b2:ca:17:
33:f7:4c:d4:43:fb:49:1e:11:9a:67:84:16:20:ba:
03:66:ed:11:b4:08:5a:d7:af:d3:28:fd:a7:f2:97:
40:2d:3a:14:23:68:01:4a:78:38:01:90:5f:7d:05:
62:fa:37:0d:cf:bf:8f:3b:1f:9f:ff:96:f8:ea:a0:
15:08:19:d2:e4:13:7f:d4:67:ab:02:bb:05:47:49:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:DC:8B:D9:98:48:77:DF:F4:8C:15:83:3B:E8:7F:21:DB:E8:76
X509v3 Authority Key Identifier:
keyid:B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/cpPci9mYSHff9IwVgzvofyHb6HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/tQvovJK_a0KdmBitZVzCOY_fv4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:15:cf:9f:8a:be:3d:f5:57:66:3e:ba:13:37:2d:4d:4a:ab:
74:8b:a9:30:0c:92:6c:c4:f4:f9:d6:db:76:9c:2b:90:13:6d:
21:5c:08:ee:85:0f:e5:84:0c:dc:8b:31:b2:f0:23:7c:87:cd:
a3:fb:92:eb:ed:12:fe:99:7d:1f:56:da:94:62:9c:de:ab:da:
a4:14:25:0a:99:1e:ed:5f:f0:e7:7c:1c:21:ce:53:fa:d7:aa:
98:fd:51:f5:2b:5b:55:74:cd:64:e3:b9:90:40:63:45:b6:23:
76:8d:fc:2c:92:08:6a:7d:15:3c:d8:68:dd:d8:9f:e2:44:8f:
2a:4d:50:ae:95:b7:2f:7b:65:c2:86:29:02:9b:2a:6b:00:67:
0b:25:00:27:10:55:24:fe:ec:e6:f1:d9:73:64:94:c6:f7:21:
47:9a:24:b5:2f:59:53:57:17:33:c7:b0:3e:96:71:c8:ec:77:
48:78:de:83:1d:6f:61:99:c7:88:2c:cf:99:c1:2d:af:f4:80:
50:c7:6d:4a:77:10:27:c8:9b:31:19:77:e7:96:33:7e:b6:82:
14:66:5a:9c:ef:72:42:b4:e9:97:83:dc:38:40:fc:4c:82:35:
96:48:f4:4d:bc:cc:47:a4:00:02:0a:59:ef:05:6c:67:0b:6e:
15:4d:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:06:40 2025 by rpki-client