Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/SOeNu0v46oSnl2nqkfevx0DVipY.roa
File: SOeNu0v46oSnl2nqkfevx0DVipY.roa (raw, json)
Hash identifier: 21SUehj9crco/ATSXQMfhZHm+UYOkDukS5zyjgdviOI=
Subject key identifier: 48:E7:8D:BB:4B:F8:EA:84:A7:97:69:EA:91:F7:AF:C7:40:D5:8A:96
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C1089ABE175FD12DE26C0DF5FD1AF
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/SOeNu0v46oSnl2nqkfevx0DVipY.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:10:89:ab:e1:75:fd:12:de:26:c0:df:5f:d1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e78dbb4bf8ea84a79769ea91f7afc740d58a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:3b:da:84:b1:91:8a:be:f6:45:4f:bf:e4:
f9:4c:b8:62:20:12:b3:6a:80:0b:e1:7a:77:26:eb:
23:df:34:47:1e:2f:60:74:3e:a8:2e:5f:3a:f0:e1:
c1:81:ae:eb:39:18:6c:b2:77:b8:f2:ea:c2:09:4f:
b5:b4:34:56:45:88:24:a1:fd:16:18:0c:60:d9:0d:
7f:4c:75:b8:59:2b:da:cb:04:0e:31:e5:1d:f1:43:
5a:7c:08:4a:c7:22:5a:5d:0b:6e:d0:c7:40:22:26:
ea:02:4d:b1:4d:05:ae:b1:ab:2e:06:4f:ac:63:b0:
db:c5:a1:1b:c9:cd:06:ce:7e:bd:c5:b6:d4:bf:3d:
96:cc:28:a2:d8:57:0c:22:55:5a:22:b9:66:74:bf:
53:f2:50:b3:8d:83:0c:7a:d6:16:fb:98:13:f4:e5:
58:60:06:e8:b4:f2:a7:44:3d:ec:38:67:90:d5:e6:
b6:8b:e1:cd:f9:2e:a5:46:54:8c:71:7c:77:c6:4a:
2e:38:63:ef:ac:7e:2f:d5:96:7a:52:e3:08:e8:13:
d0:d7:a4:5e:69:83:0a:3d:b0:a2:db:35:5b:d8:40:
59:97:78:c4:fc:d1:a8:a3:47:f9:46:52:ed:27:c4:
0e:ff:bd:f0:4a:d1:7d:0c:1f:f2:34:70:1c:3a:eb:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:8D:BB:4B:F8:EA:84:A7:97:69:EA:91:F7:AF:C7:40:D5:8A:96
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/SOeNu0v46oSnl2nqkfevx0DVipY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:4a:84:3e:95:17:34:ba:34:d7:5b:e5:30:0b:18:08:5c:78:
fb:dc:35:a0:9a:7e:a1:38:f3:7d:44:d2:a0:8c:08:7e:f5:61:
63:19:00:aa:e2:1a:76:9b:9a:1a:f1:d1:54:a1:f2:ad:06:72:
f0:4d:2d:f6:16:48:2a:2e:8c:0d:d7:9a:e5:af:87:39:a5:1c:
85:6c:22:9b:db:40:49:0b:b9:0b:76:bb:55:cf:15:1e:85:ee:
ff:7c:c3:2b:50:a6:10:ec:1b:80:59:4d:c5:bf:fc:16:55:20:
db:67:04:81:0c:90:71:5c:2a:62:ed:17:32:f1:26:0e:7c:98:
03:79:cb:4f:6a:c3:33:a3:89:7f:65:c2:26:14:dd:c5:69:f6:
b9:85:e7:17:fb:15:ae:4c:5d:d9:0a:2a:18:e3:13:cd:40:94:
27:ed:a0:70:b2:a1:56:1a:61:a0:b5:94:2d:98:40:6f:47:8d:
34:51:2c:41:41:91:c0:63:34:98:71:47:68:d8:26:47:08:65:
bd:fa:30:6d:40:01:fc:70:6c:5f:38:25:51:c6:46:bb:45:5a:
21:5b:92:80:88:bd:08:8c:02:04:bc:38:84:f3:43:94:85:0e:
44:10:f5:f5:af:4c:a8:23:9b:8e:4e:0d:63:b0:59:35:92:cd:
cf:39:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:55 2025 by rpki-client