Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/xBfsSRKZ1zR7UhdCkf_rtQrKRH4.roa
File: xBfsSRKZ1zR7UhdCkf_rtQrKRH4.roa (raw, json)
Hash identifier: ln0bbK/jio15nPtwTMBOFMIamDgxLHkSrNiE/HnGyw0=
Subject key identifier: C4:17:EC:49:12:99:D7:34:7B:52:17:42:91:FF:EB:B5:0A:CA:44:7E
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 02532AB7
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/xBfsSRKZ1zR7UhdCkf_rtQrKRH4.roa
Signing time: Sat 01 Jan 2022 14:06:09 +0000
ROA not before: Sat 01 Jan 2022 14:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34691
IP address blocks: 45.136.110.0/24 maxlen: 24
194.69.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39004855 (0x2532ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: Jan 1 14:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c417ec491299d7347b52174291ffebb50aca447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:42:72:b3:38:dc:1b:f6:ec:8e:90:28:73:
83:a7:e9:79:07:99:b8:54:8b:3c:58:18:0d:91:53:
40:a0:de:10:c4:ff:26:53:14:ff:9a:41:89:f8:cc:
18:f9:6b:cf:02:16:61:c2:72:b2:e0:d1:a4:b2:9d:
30:c0:54:79:d3:60:cb:47:5d:5a:ac:be:d8:d5:a9:
fd:32:20:ff:12:ad:b4:ac:41:ff:b2:cd:24:87:8a:
3e:92:cf:be:33:0c:31:9d:03:b7:de:06:70:f7:8b:
a1:24:40:49:f7:18:a2:63:f1:b1:9a:b0:b6:29:c5:
1d:ff:cd:e8:61:53:70:cf:dd:c1:c4:2c:2b:22:09:
03:98:8f:a1:e9:62:c3:df:16:64:86:43:e3:18:1a:
85:56:56:20:66:0e:82:de:44:12:e9:31:f6:ab:9c:
23:be:62:20:bf:9d:46:bf:d4:12:77:4b:62:37:57:
89:33:b1:2d:76:e5:c5:2b:6d:27:91:79:74:df:5c:
02:07:f0:9c:33:bd:e0:7d:8c:e3:8c:17:c7:57:b9:
5c:df:1b:34:d9:9b:35:9c:82:e3:5f:a4:87:13:f6:
74:70:20:07:f2:21:aa:fb:4e:95:dd:56:74:c0:ce:
d1:78:ee:43:01:d0:94:b2:c0:82:02:7f:81:51:cf:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:EC:49:12:99:D7:34:7B:52:17:42:91:FF:EB:B5:0A:CA:44:7E
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/xBfsSRKZ1zR7UhdCkf_rtQrKRH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.110.0/24
194.69.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:3b:8d:61:f9:b8:f1:f0:68:dc:d8:8e:2c:16:b0:0b:44:8c:
ff:10:cc:21:77:8d:ac:2f:48:64:79:46:ce:a0:af:f9:ed:25:
db:72:65:27:0c:25:8e:27:e8:20:28:7c:9b:e2:2f:6e:94:f2:
04:42:b7:b1:47:b6:9f:fa:f4:3a:ba:be:46:92:ae:07:2f:3a:
b5:19:44:32:c1:c8:28:a4:5a:ee:fd:8a:12:d5:02:fc:88:d0:
6a:18:ae:24:6e:3c:63:7e:1d:a7:36:4f:ae:f1:9e:3a:4b:37:
ab:a5:10:c7:ad:58:3a:f3:f0:1c:45:97:64:3b:f3:84:08:39:
e9:c4:d2:18:89:d0:ad:87:8a:62:01:88:a9:89:09:46:bc:63:
47:61:3d:51:1a:7b:bb:48:1a:61:3d:84:4a:83:d9:e6:43:60:
96:96:d7:86:b9:2e:f1:9b:29:e9:0f:0b:6d:6b:85:75:74:55:
ab:aa:09:0c:bd:73:a6:99:15:ae:83:09:97:14:2e:39:b2:2d:
65:df:57:21:da:c9:24:b4:22:3b:ae:d2:08:41:48:2d:cb:a7:
04:97:0d:b0:1c:0e:71:6d:fa:79:32:dc:54:3f:72:70:dc:19:
71:e7:2f:2f:8f:e3:cd:8b:1f:c1:93:e1:ec:47:9e:20:9b:c3:
fb:2f:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:24:40 2025 by rpki-client