Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/V2q_E8t7wLwrR2FMDYG4st8bqVU.roa
File: V2q_E8t7wLwrR2FMDYG4st8bqVU.roa (raw, json)
Hash identifier: 7cie6UB8Df39SFGRDrdnT8P/FfXEcEdQRgrDO7aM1qg=
Subject key identifier: 57:6A:BF:13:CB:7B:C0:BC:2B:47:61:4C:0D:81:B8:B2:DF:1B:A9:55
Certificate issuer: /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial: 74EA
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/V2q_E8t7wLwrR2FMDYG4st8bqVU.roa
Signing time: Mon 21 Mar 2022 14:12:50 +0000
ROA not before: Mon 21 Mar 2022 14:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.83.224.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29930 (0x74ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Validity
Not Before: Mar 21 14:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=576abf13cb7bc0bc2b47614c0d81b8b2df1ba955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:f3:0d:c3:5a:b8:08:58:58:45:d8:02:63:
d6:0e:5c:1c:b5:e1:ad:d4:08:9e:c7:7b:d1:0f:57:
91:05:da:40:ef:d2:8f:50:4f:72:fc:93:9b:d3:1e:
de:a3:f3:30:f6:e5:02:a4:c7:31:29:08:9a:4c:2d:
60:ce:f9:9e:84:ed:24:65:75:44:f4:dd:00:a2:59:
fa:9e:27:6e:25:3b:e8:17:c8:f3:85:4b:14:b9:94:
ee:23:24:1a:e4:48:91:73:49:20:55:54:66:32:97:
d1:9d:d4:2d:27:15:ef:22:ce:53:c7:28:6c:db:f0:
a7:da:a8:15:79:7f:1d:e3:2d:15:7a:e2:68:32:25:
0e:bb:fc:fd:1c:9e:6e:2e:9e:bf:00:0b:f0:84:6c:
87:90:7a:14:2e:58:19:17:49:d2:bd:4e:7a:ef:34:
14:d3:4b:28:0c:cc:47:8f:37:47:4d:76:aa:17:98:
92:a4:89:59:f6:07:8e:d5:85:9f:f9:46:a8:ea:64:
3a:f5:e3:ff:98:a4:04:37:ea:96:1f:fa:7b:d5:c0:
37:80:cb:5a:3c:83:23:04:c8:ab:d2:da:63:33:ae:
d1:c0:9d:2d:e5:75:0b:7b:f5:fd:5c:a4:0f:d3:92:
64:49:bc:44:50:48:15:14:e3:40:4a:60:d1:6b:8e:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:BF:13:CB:7B:C0:BC:2B:47:61:4C:0D:81:B8:B2:DF:1B:A9:55
X509v3 Authority Key Identifier:
keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/V2q_E8t7wLwrR2FMDYG4st8bqVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.224.0/22
Signature Algorithm: sha256WithRSAEncryption
18:1d:a0:66:77:7b:ff:fb:c2:88:16:19:73:95:9c:ae:b8:cd:
a0:6b:c4:29:7d:25:a9:2d:8f:ee:cd:f5:5d:e4:c2:18:56:d5:
34:5b:bc:c6:80:59:d5:9d:d6:c4:9f:15:03:84:38:40:ec:19:
d8:6c:b0:17:60:42:7e:1e:bc:17:d5:47:1c:5a:77:45:a8:bf:
a1:c4:ae:f1:cd:b8:8d:86:77:a6:c5:a7:46:2a:6b:05:18:c8:
e4:42:27:05:19:ca:9e:8f:58:79:f2:57:e3:fe:84:f2:c6:a7:
d6:67:1c:b1:23:c9:bd:b4:00:5f:87:35:e9:a0:05:1d:92:79:
a0:80:a3:b4:f8:a0:9f:d1:43:34:3e:4f:16:ad:f7:98:62:ab:
ce:db:3f:a5:05:29:92:c0:53:ea:2c:be:46:32:73:ee:1e:6f:
19:ce:de:c5:07:63:cd:14:63:00:0d:b2:e6:6e:77:11:f5:7f:
2a:16:5e:17:94:fb:c9:bb:12:74:36:c3:1f:6b:85:53:af:7c:
7f:98:bf:72:06:a6:3d:f6:cb:1c:92:ac:56:bd:b3:dd:21:a7:
77:76:84:bb:ba:20:35:7c:d1:4b:15:4b:a2:7d:1e:c1:3c:ff:
a9:d1:03:a1:6f:20:7a:cb:8f:08:7a:3e:45:12:09:5c:7c:09:
bc:40:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:12 2025 by rpki-client