Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa
File: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (raw, json)
Hash identifier: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=
Subject key identifier: AF:9A:B1:E5:BB:FD:BD:04:EF:71:BA:90:9B:32:25:96:82:38:3E:AA
Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial: 0194221FF2AE8DE01C3FBEC1F225827766E9
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 45.90.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f2:ae:8d:e0:1c:3f:be:c1:f2:25:82:77:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af9ab1e5bbfdbd04ef71ba909b32259682383eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:e0:44:4b:31:9d:ba:9b:65:c5:e8:95:fb:
35:91:fd:e7:01:cd:91:64:a5:0c:51:8f:d4:03:cc:
3a:f7:7e:01:8a:d6:e2:7d:a7:d1:d1:20:e6:b1:af:
d6:48:09:b6:16:b7:3e:91:98:26:5b:13:3c:5e:0f:
24:f9:91:53:1b:64:38:3a:d8:f7:e1:7c:cb:bc:46:
4d:52:c1:82:be:eb:a6:35:08:d7:d5:35:40:10:a8:
59:a8:a0:9e:77:08:fc:85:6c:19:de:b4:d7:bb:ba:
be:f3:65:4f:04:a6:02:db:a8:50:dd:fa:f4:98:3c:
04:0e:4c:71:7f:4e:71:cc:32:17:e3:84:3d:48:f2:
9f:28:33:95:31:6c:b8:d1:f2:c5:26:3c:21:f2:fc:
7f:ab:7a:f2:51:4d:a7:50:c3:17:52:28:f6:0d:b4:
36:08:2f:5e:e5:c4:60:15:0c:7e:44:19:ed:0a:5e:
ee:e8:20:23:3d:31:c9:f1:9c:c4:99:20:3d:6d:94:
07:b9:00:51:4c:6d:81:f1:a1:49:20:c1:ba:07:13:
a6:ed:46:e0:cf:1e:52:b2:7b:9d:6c:84:f6:ff:ce:
61:bc:e3:59:13:d8:32:23:45:ed:e5:8e:fc:a4:af:
e4:b5:39:91:57:e0:08:91:8d:c5:1e:91:d9:0d:95:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:B1:E5:BB:FD:BD:04:EF:71:BA:90:9B:32:25:96:82:38:3E:AA
X509v3 Authority Key Identifier:
keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:51:c4:c3:a1:10:b4:70:29:56:82:d8:67:81:cb:7c:21:ea:
a9:8b:f5:0d:61:0a:d2:75:97:96:8a:7c:02:e7:c5:40:e7:d1:
64:f1:45:95:83:2b:52:16:ee:7e:32:3a:bb:42:00:c7:01:04:
ba:4b:75:9c:f1:66:1f:c2:ec:46:df:a8:71:28:88:b3:09:87:
c6:0f:7c:cf:88:c4:8d:2f:26:63:96:43:dd:36:13:47:39:b3:
d6:8d:1e:28:f1:fa:f6:72:16:59:fb:59:da:fc:10:6f:85:5b:
67:aa:7e:db:e0:76:17:69:5a:8e:8f:5b:e2:4f:78:6c:35:7c:
10:73:39:73:72:7e:9f:cc:8d:e5:6f:e6:fa:1c:0a:6e:1c:11:
7c:82:d6:2c:6b:11:d8:6a:61:03:52:1a:6e:b1:72:90:d6:32:
e0:4c:25:4b:94:c0:af:1b:75:8d:49:70:f3:98:7f:e8:84:c4:
06:3b:38:bd:1f:da:a0:94:4a:7d:2c:eb:c1:9b:10:60:7d:5d:
0f:0a:09:b4:49:c5:6a:fe:1c:be:ad:b6:16:a8:a2:a6:65:74:
cd:56:f9:64:91:0c:1f:d2:f8:5e:95:83:ea:50:31:f8:d8:86:
bc:8b:e6:5f:0c:ad:0b:b4:90:31:ad:61:38:bf:66:e0:36:10:
c3:b0:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:49:52 2025 by rpki-client