Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/h1wMzT9yNIJ_M0PHZJSOIJd08i8.roa
File: h1wMzT9yNIJ_M0PHZJSOIJd08i8.roa (raw, json)
Hash identifier: cTHnVqr8u/HZEolQW7u0y+klX/0x/ZLgA92NRO3SnlQ=
Subject key identifier: 87:5C:0C:CD:3F:72:34:82:7F:33:43:C7:64:94:8E:20:97:74:F2:2F
Certificate issuer: /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial: 0183354666F31EAA1482232D2735D07C847C
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/h1wMzT9yNIJ_M0PHZJSOIJd08i8.roa
Signing time: Tue 13 Sep 2022 05:15:49 +0000
ROA not before: Tue 13 Sep 2022 05:15:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 45.91.88.0/22 maxlen: 32
45.149.20.0/22 maxlen: 24
45.83.224.0/22 maxlen: 32
45.134.104.0/22 maxlen: 32
45.158.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:46:66:f3:1e:aa:14:82:23:2d:27:35:d0:7c:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Validity
Not Before: Sep 13 05:15:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=875c0ccd3f7234827f3343c764948e209774f22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e9:d9:85:05:f5:b3:50:c5:83:7c:ef:9e:0f:
0a:1d:a8:e0:da:4c:4d:db:d8:b6:c0:7a:d0:2a:2c:
e6:0b:e6:2a:8e:38:b2:0b:9b:fd:e8:22:15:f2:3b:
4a:c1:3b:fb:33:6f:65:2d:cf:d9:09:c5:b4:7b:7b:
0e:4b:ec:26:19:10:fb:61:f2:b1:1d:ea:52:6e:ef:
f9:d9:27:31:bd:e2:ce:b4:73:24:3f:ad:6b:64:52:
55:f3:11:a2:5b:10:3c:f5:ae:97:f6:69:79:b6:44:
a5:ca:bc:cc:0e:53:57:18:c7:2d:35:06:d0:a5:bd:
cb:05:4d:e0:dc:b7:8b:92:f4:91:fb:c3:cd:e2:da:
5f:ae:5c:c8:40:84:b9:b9:54:80:7d:7d:4c:18:93:
0a:3b:93:fa:9d:13:01:ce:cb:52:11:63:b3:ae:9d:
2f:76:c7:23:42:1c:68:cc:12:6e:e5:d8:9f:b8:cb:
81:c2:8e:50:aa:65:c3:da:9d:f3:0a:13:7c:a5:e1:
21:37:8b:c1:ee:2a:47:14:22:c2:ac:b7:19:de:8c:
99:fc:f1:2f:4d:bb:f4:dd:f5:a8:bc:e8:ac:63:b4:
66:91:ed:c6:7e:1f:b6:00:12:38:6f:fb:60:82:0d:
ef:3e:87:e4:1f:c2:08:de:75:95:ab:6a:fb:73:9b:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5C:0C:CD:3F:72:34:82:7F:33:43:C7:64:94:8E:20:97:74:F2:2F
X509v3 Authority Key Identifier:
keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/h1wMzT9yNIJ_M0PHZJSOIJd08i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.224.0/22
45.91.88.0/22
45.134.104.0/22
45.149.20.0/22
45.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:bf:50:5e:15:c5:64:49:b6:2a:c3:d9:09:be:19:5e:d3:34:
71:25:dd:7a:9f:ad:ba:8e:17:2e:64:3c:29:83:cb:4c:03:1c:
9b:7d:82:08:3a:eb:d2:c8:d0:c2:ba:92:27:6f:1b:ed:22:97:
b3:f8:d5:26:8d:c1:20:c0:fb:9a:94:fa:92:44:2f:29:f1:de:
d3:46:ad:18:3f:d3:c1:9d:31:d3:f7:8a:fe:05:22:c1:d7:89:
8c:90:4d:42:a6:28:89:bb:d0:13:b4:af:dd:00:8b:49:67:4c:
b9:ca:14:54:9b:dd:ca:fa:de:67:f9:d6:e5:ad:b3:3a:69:45:
fc:0b:7e:02:c2:b5:e7:6c:41:39:82:0c:a6:fd:93:ab:6e:d6:
35:e8:2c:d0:ce:fd:f3:94:71:6f:ee:80:9b:a6:aa:1a:f8:65:
c1:0c:b4:e8:9b:1f:5e:b7:24:08:ce:0b:12:72:e8:f8:a4:1c:
9e:bc:8d:6f:01:6f:34:66:22:bc:9b:2c:58:44:dd:86:0d:32:
21:63:0b:50:93:f3:b6:23:7c:36:d4:0c:35:db:15:e9:86:02:
30:34:4c:9f:f9:15:9c:46:8b:37:be:d2:b9:4c:50:41:6c:6b:
cc:7f:ae:e5:47:d5:1d:44:45:2f:94:52:07:f7:9c:f1:ff:dd:
43:aa:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:33:16 2025 by rpki-client