Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/xl_yJNCwUortL8qqaqD3ZD4xJk8.roa
File: xl_yJNCwUortL8qqaqD3ZD4xJk8.roa (raw, json)
Hash identifier: 4FgTAx3CRYSCmXJYH9IqXtVghGcOhijcbbxodwvXH1E=
Subject key identifier: C6:5F:F2:24:D0:B0:52:8A:ED:2F:CA:AA:6A:A0:F7:64:3E:31:26:4F
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 052A51DA
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/xl_yJNCwUortL8qqaqD3ZD4xJk8.roa
Signing time: Tue 24 May 2022 06:19:30 +0000
ROA not before: Tue 24 May 2022 06:19:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.148.140.0/24 maxlen: 24
45.88.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86659546 (0x52a51da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: May 24 06:19:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c65ff224d0b0528aed2fcaaa6aa0f7643e31264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:a3:d7:dc:fb:83:4a:bd:7a:21:46:45:d1:
0e:49:78:e7:7b:2c:d3:96:ce:26:07:77:ee:e9:46:
4d:72:38:a6:1e:c6:62:3e:7f:b0:68:43:8a:86:ce:
24:c0:4b:4f:15:12:d6:c0:bf:db:d8:24:08:6b:ea:
6f:c4:2b:c9:79:f5:6d:c0:e1:fa:50:8f:d8:ec:0b:
ec:78:6d:88:ab:98:59:29:fd:6c:b1:26:d5:ff:ff:
e3:9d:05:06:2b:f4:1e:98:fa:c6:1e:8b:a9:fa:96:
2e:3f:39:2c:20:75:d5:31:22:43:22:b9:52:d3:ff:
9e:61:84:74:f8:f7:d6:31:74:e6:91:a4:20:48:2e:
e9:07:68:ed:84:66:76:b3:be:e5:ff:e2:d5:fa:a0:
3b:23:1b:ec:f4:b7:ff:1e:0c:0f:45:38:93:e7:89:
5c:05:3c:35:6c:b2:28:c8:c1:eb:08:f8:7c:e9:bb:
3e:60:93:b1:01:64:c5:9b:5b:20:c4:bc:56:ed:b7:
82:86:2e:17:e8:d1:9b:3f:49:86:04:bf:53:06:fe:
8d:d0:08:cc:09:1b:ec:57:3e:e4:2f:fc:2f:29:44:
07:94:c0:6c:3c:9c:eb:ec:1a:d7:7f:60:1e:0f:c6:
7c:2e:60:7e:fb:de:23:d1:cd:15:c9:19:ed:0c:69:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:F2:24:D0:B0:52:8A:ED:2F:CA:AA:6A:A0:F7:64:3E:31:26:4F
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/xl_yJNCwUortL8qqaqD3ZD4xJk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.9.0/24
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e9:6d:7c:8b:3c:19:ef:c6:9e:57:05:b0:22:29:18:5b:1f:
81:3a:05:bf:bf:c2:0c:d7:87:b9:65:74:aa:3f:56:a8:fb:71:
a7:94:d9:66:12:ce:c8:d7:d7:5e:19:f9:0a:b7:60:55:2b:ae:
32:79:6d:b1:5f:3d:30:da:67:8d:a6:36:d6:4f:12:bf:7d:a8:
17:64:05:85:50:61:1e:71:5d:93:a6:f8:ed:86:40:29:0b:09:
2e:f5:d6:28:a2:c1:f8:38:89:55:15:61:38:0e:20:fe:ca:fc:
50:f7:2f:8f:8e:c7:bd:ce:8b:d8:09:ae:d3:26:fb:56:eb:e4:
a5:00:37:55:25:d4:17:0b:72:35:74:38:0f:9b:7e:09:03:68:
48:1d:20:d7:53:60:f4:22:3f:1a:7c:00:bf:15:dc:0a:61:a3:
2d:a0:86:84:3c:99:aa:aa:75:23:08:00:a8:b0:b4:1d:50:c1:
2b:e3:d2:28:1b:ac:1c:c4:dc:12:99:8c:27:71:24:a1:3e:a4:
7d:8e:54:15:97:f2:af:fd:38:96:68:1f:39:9b:26:c2:9d:22:
56:1c:c3:e2:a1:c8:b2:15:e4:50:0d:e0:d0:92:18:68:4f:77:
98:cc:ac:50:88:83:9e:41:34:dd:fd:0a:37:77:f4:e2:b1:77:
fa:b6:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:50:41 2025 by rpki-client