Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/BIdghTPIvk1AaBp87QQq5ucf6mk.roa
File: BIdghTPIvk1AaBp87QQq5ucf6mk.roa (raw, json)
Hash identifier: 8m4gTQF7YqZgNofIGnFMh5eK65ODuGl6fuZwDEnen1Q=
Subject key identifier: 04:87:60:85:33:C8:BE:4D:40:68:1A:7C:ED:04:2A:E6:E7:1F:EA:69
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 0891AFA6
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/BIdghTPIvk1AaBp87QQq5ucf6mk.roa
Signing time: Sat 01 Jan 2022 10:58:52 +0000
ROA not before: Sat 01 Jan 2022 10:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212745
IP address blocks: 45.81.228.0/22 maxlen: 22
2a0e:6080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143765414 (0x891afa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jan 1 10:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0487608533c8be4d40681a7ced042ae6e71fea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:73:c4:26:ed:3e:c4:50:be:ad:5a:f9:71:
d2:9c:a8:1e:e9:9b:e6:d4:c0:7a:01:b3:a8:4a:5e:
ca:a0:a7:ca:c5:64:07:3d:42:58:87:b0:dd:0f:2d:
d5:b8:c3:97:14:aa:9f:42:33:84:84:5e:84:9e:7c:
22:61:cc:e2:31:65:e5:f6:95:14:85:d9:7f:1b:c7:
cf:f0:5a:8c:cd:10:ce:25:e8:5a:49:9f:ab:98:3b:
11:e5:61:ad:b6:94:03:df:03:94:c1:99:80:7d:4e:
d7:2d:68:3b:87:0e:65:7a:a3:3a:e5:3a:68:2e:a9:
03:a8:07:52:74:6b:96:27:90:b4:64:1f:cf:85:34:
ba:22:da:20:75:9a:bf:5e:c3:6c:9f:ba:14:63:0f:
95:1e:99:05:af:7e:22:7a:5d:cc:9b:18:39:cf:93:
35:e8:31:c7:0a:65:f7:bd:fa:2c:b1:b0:0b:96:77:
3c:04:c3:f5:eb:be:fb:14:4f:a2:73:79:55:f0:82:
c4:b9:4d:bb:ae:95:8b:9e:aa:10:4b:7b:c1:d3:00:
36:e1:81:1f:3a:f1:03:5e:f5:65:18:25:c2:c4:71:
32:ba:ff:aa:e2:40:4e:3a:21:43:c2:5f:2f:12:27:
c9:74:98:1f:30:88:47:a6:bb:34:a0:08:3c:80:81:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:60:85:33:C8:BE:4D:40:68:1A:7C:ED:04:2A:E6:E7:1F:EA:69
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/BIdghTPIvk1AaBp87QQq5ucf6mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.228.0/22
IPv6:
2a0e:6080::/48
Signature Algorithm: sha256WithRSAEncryption
67:aa:a2:e8:06:da:11:39:e3:ec:31:6d:32:ad:3b:a9:99:53:
93:79:c9:8d:45:5a:79:23:c3:e4:0c:56:75:34:15:67:1e:e0:
05:f9:a5:02:47:91:bd:57:9e:02:8d:db:96:bb:e1:f6:ac:5c:
89:cf:ff:91:2a:fe:8c:68:2a:99:88:dd:86:2e:1d:92:b5:dc:
71:07:8e:df:22:3d:32:5e:08:92:cb:4b:ef:be:03:23:bf:42:
8b:69:34:6f:c0:f2:60:5d:96:cd:3c:40:4a:2f:ce:0d:95:a0:
a1:b2:e4:47:1f:c2:d8:39:30:b0:3f:4d:be:ef:b5:0e:55:90:
75:cf:a9:41:0c:05:13:06:f2:25:fb:c8:26:24:4f:bf:13:58:
e0:a5:03:be:5c:50:fa:43:e1:ff:b4:51:b7:6f:e5:fd:c9:68:
ea:58:15:49:9f:e1:f9:df:e6:e7:21:63:00:fd:40:f6:d1:a3:
bf:dd:2b:68:43:19:81:c3:96:30:a2:f6:97:21:3d:e0:ef:e2:
68:ea:5b:49:96:52:d6:ba:a9:fd:87:bd:4d:7c:8e:65:29:08:
86:b1:a4:97:59:2d:39:df:71:c2:6a:a9:8e:23:a6:f1:0e:a4:
29:31:3c:b0:4a:09:84:17:86:59:4f:9e:73:b0:cc:e7:13:e1:
75:3e:f7:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECJGvpjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDhkNDVjZmUzNDgyYjhmNjFkYWUwMDBiMDA3YTQ2N2VjZGQ0ZWU2MB4XDTIyMDEw
MTEwNTg1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQ4NzYwODUzM2M4
YmU0ZDQwNjgxYTdjZWQwNDJhZTZlNzFmZWE2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvqc8Qm7T7EUL6tWvlx0pyoHumb5tTAegGzqEpeyqCnysVk
Bz1CWIew3Q8t1bjDlxSqn0IzhIRehJ58ImHM4jFl5faVFIXZfxvHz/BajM0QziXo
Wkmfq5g7EeVhrbaUA98DlMGZgH1O1y1oO4cOZXqjOuU6aC6pA6gHUnRrlieQtGQf
z4U0uiLaIHWav17DbJ+6FGMPlR6ZBa9+InpdzJsYOc+TNegxxwpl9736LLGwC5Z3
PATD9eu++xRPonN5VfCCxLlNu66Vi56qEEt7wdMANuGBHzrxA171ZRglwsRxMrr/
quJATjohQ8JfLxInyXSYHzCIR6a7NKAIPICBQ5cCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQEh2CFM8i+TUBoGnztBCrm5x/qaTAfBgNVHSMEGDAWgBSUjUXP40grj2Ha
4ACwB6Rn7N1O5jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xJMUZ6LU5JSzQ5aDJ1QUFzQWVrWi16ZFR1WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvZjg5YjJlLTUzYTMtNDE1Ny1hOTYwLTQyZGFmYjRiNTFkMi8x
L0JJZGdoVFBJdmsxQWFCcDg3UVFxNXVjZjZtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
Zjg5YjJlLTUzYTMtNDE1Ny1hOTYwLTQyZGFmYjRiNTFkMi8xL2xJMUZ6LU5JSzQ5
aDJ1QUFzQWVrWi16ZFR1WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAi1R5DAPBAIAAjAJAwcAKg5ggAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBnqqLoBtoROePsMW0yrTupmVOTecmNRVp5I8Pk
DFZ1NBVnHuAF+aUCR5G9V54CjduWu+H2rFyJz/+RKv6MaCqZiN2GLh2StdxxB47f
Ij0yXgiSy0vvvgMjv0KLaTRvwPJgXZbNPEBKL84NlaChsuRHH8LYOTCwP02+77UO
VZB1z6lBDAUTBvIl+8gmJE+/E1jgpQO+XFD6Q+H/tFG3b+X9yWjqWBVJn+H53+bn
IWMA/UD20aO/3StoQxmBw5YwovaXIT3g7+Jo6ltJllLWuqn9h71NfI5lKQiGsaSX
WS0533HCaqmOI6bxDqQpMTywSgmEF4ZZT55zsMznE+F1Pvd3
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:41 2025 by rpki-client