Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa
File: V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa (raw, json)
Hash identifier: Smp3dos1rOqn7cAJgotNjFK9BTZ2MYIOWQqflfa52VA=
Subject key identifier: 57:E4:B8:E2:7E:C0:F6:12:73:F6:B2:09:2B:F4:7A:C0:84:67:61:64
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 018262DA32CC8B7D3336A95D27F86C99CE51
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa
Signing time: Wed 03 Aug 2022 08:37:23 +0000
ROA not before: Wed 03 Aug 2022 08:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 45.148.141.0/24 maxlen: 24
45.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:da:32:cc:8b:7d:33:36:a9:5d:27:f8:6c:99:ce:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Aug 3 08:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57e4b8e27ec0f61273f6b2092bf47ac084676164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:b3:c1:e6:e2:20:3a:ac:9e:27:30:54:2f:
13:2d:0c:97:dd:aa:22:fa:60:81:52:09:06:31:23:
1b:ba:f8:2f:26:65:bd:5a:32:57:74:7b:fb:5c:e8:
d2:e2:52:e9:13:29:1c:b9:31:ec:89:f5:9d:13:cd:
ad:4d:1e:73:fe:f6:8c:38:bb:aa:8c:4a:88:c6:d8:
76:ee:71:f1:01:85:ea:55:59:67:20:e8:2e:ca:15:
a7:9c:b2:a6:54:0b:da:06:8b:8d:d9:73:2e:31:11:
c1:98:b4:4a:11:22:52:81:5f:fe:53:a9:a1:11:7b:
8f:f8:11:93:4b:be:77:2a:e3:12:2a:45:28:77:94:
e8:74:13:00:8f:53:62:17:93:f0:4b:48:3e:9f:15:
42:c2:0f:3d:70:ea:92:0f:27:db:9a:1b:59:e3:19:
ef:39:1d:7f:a2:84:71:49:bd:1f:de:57:95:db:9c:
b8:e8:08:5a:e8:be:18:5d:7b:88:66:00:bf:0e:71:
db:f1:bc:06:ee:2e:dc:64:2d:af:55:5a:20:ef:c2:
30:9e:48:b6:f0:58:13:61:47:7d:01:4e:dd:15:48:
f3:42:84:3d:14:09:de:23:9f:75:69:88:a0:6a:c7:
40:96:1b:e4:a8:0a:1d:8b:98:31:ae:4c:0b:e7:49:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E4:B8:E2:7E:C0:F6:12:73:F6:B2:09:2B:F4:7A:C0:84:67:61:64
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/V-S44n7A9hJz9rIJK_R6wIRnYWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
45.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:97:a9:77:f3:94:f5:b1:4e:49:60:7b:ad:77:86:ab:27:32:
d8:cf:ac:7e:e3:da:12:50:f7:0f:bf:b5:0f:19:ac:bc:2c:2a:
98:1f:a7:52:1b:3e:68:1d:88:a1:b6:ab:9d:91:a0:e4:cb:c4:
10:45:2f:01:2c:6c:53:d4:da:b8:94:15:27:b8:f2:74:a8:a9:
0a:31:7a:ef:ff:0d:f8:9b:00:86:2a:f4:0a:f1:b3:ae:1a:62:
37:0a:c2:59:b5:3e:aa:34:f0:65:43:d9:cf:bc:3f:44:00:25:
5c:36:f0:dc:32:54:46:e2:55:27:d3:09:d8:49:c9:ff:c1:d1:
6b:bc:7e:d2:bb:ff:1f:cb:93:df:ae:73:c4:73:26:1b:b8:fc:
83:7a:c3:84:61:3f:30:33:e4:34:22:d4:ec:07:2d:6c:fc:80:
a6:66:4a:94:47:3f:61:c1:5e:3d:b2:b3:dc:ef:05:1f:66:52:
b9:34:36:d9:5c:31:bf:cb:d1:5c:07:50:13:3b:4c:b1:37:49:
8c:5d:cd:53:6a:d6:e8:59:2e:f6:bf:a7:6a:6e:0e:65:60:95:
48:75:66:62:b2:a7:de:d7:44:40:3d:ab:ff:49:85:ab:0a:85:
17:28:74:01:53:45:aa:5d:6a:3c:ac:1e:58:ba:b8:4f:68:08:
82:69:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:29 2025 by rpki-client