Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/TYt0Skit62sKGCwhmw5lc84UDYo.roa
File: TYt0Skit62sKGCwhmw5lc84UDYo.roa (raw, json)
Hash identifier: nSL4hvnei8BdsTDp21H5sLsVLf/dac9zK1L16Kmax64=
Subject key identifier: 4D:8B:74:4A:48:AD:EB:6B:0A:18:2C:21:9B:0E:65:73:CE:14:0D:8A
Certificate issuer: /CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Certificate serial: 075A6E42
Authority key identifier: D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/TYt0Skit62sKGCwhmw5lc84UDYo.roa
Signing time: Sat 01 Jan 2022 12:07:05 +0000
ROA not before: Sat 01 Jan 2022 12:07:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44326
IP address blocks: 45.154.32.0/23 maxlen: 23
2a0f:a300::/32 maxlen: 32
2a0f:a301::/32 maxlen: 32
2a0f:a304::/32 maxlen: 32
2a0f:a307::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123366978 (0x75a6e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Validity
Not Before: Jan 1 12:07:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d8b744a48adeb6b0a182c219b0e6573ce140d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:3e:82:7c:1c:a0:b1:0a:a9:3c:01:3a:cd:
34:a4:f2:d0:5b:0e:09:99:95:25:40:d0:da:fd:fa:
58:ce:25:2d:84:1c:ed:0a:e2:25:b5:06:88:7d:99:
38:99:6d:5e:11:a1:41:b9:38:64:e9:11:52:fe:b5:
0e:bf:62:a6:23:42:2d:c7:02:c7:83:4d:22:e4:05:
1d:0f:7d:da:4c:c5:e3:70:47:26:1e:12:d0:01:8b:
5f:ec:38:b4:59:d5:54:6e:5e:97:84:19:c1:ab:57:
1d:e4:73:70:b8:f0:42:c8:d3:09:69:c5:42:68:d4:
30:b1:e3:cd:c8:69:e2:75:fd:d9:0d:c2:97:45:b7:
6f:81:dc:e5:3b:ce:d1:a6:bd:c7:e0:88:f8:54:cb:
11:91:77:cc:47:e7:0f:65:19:5a:97:d2:66:e4:06:
00:3f:37:f1:9b:75:6d:40:c4:30:c3:8d:32:b6:e5:
1e:6a:e0:85:81:54:e3:10:c7:23:cf:35:c4:8a:2a:
35:b1:14:6d:33:41:da:65:4d:96:b9:18:08:5e:ab:
2d:d9:d8:9f:68:18:29:d2:4d:d7:23:53:58:4a:79:
3e:71:69:ee:c9:70:2c:31:04:c7:94:ec:ae:97:83:
0b:b9:94:92:20:df:11:3f:87:a0:eb:a0:de:3c:75:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8B:74:4A:48:AD:EB:6B:0A:18:2C:21:9B:0E:65:73:CE:14:0D:8A
X509v3 Authority Key Identifier:
keyid:D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/TYt0Skit62sKGCwhmw5lc84UDYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.32.0/23
IPv6:
2a0f:a300::/31
2a0f:a304::/32
2a0f:a307::/32
Signature Algorithm: sha256WithRSAEncryption
09:ba:d3:6d:bf:a2:e6:26:da:cd:7a:f9:e5:05:b1:ad:98:a9:
87:0a:2c:87:af:3a:e4:fb:d1:f1:6b:1e:e9:8b:58:02:91:31:
49:00:31:40:97:3c:d8:78:fb:5a:dd:9d:6d:fe:a4:eb:19:ee:
75:94:39:63:ab:04:08:b1:ef:75:99:83:08:3f:f6:e1:bd:6b:
84:19:d3:8b:9e:20:68:d0:3c:12:ea:a7:2d:b3:fe:5b:20:8d:
17:9e:bd:c3:59:ba:cd:53:d8:bf:9c:89:f8:bf:70:88:7b:6a:
0f:9e:21:2b:4a:d6:59:0c:77:c7:00:d2:cd:cd:f7:f9:5c:a9:
2c:fe:30:c4:83:24:25:b5:0f:ca:5c:d1:48:7f:af:96:f0:41:
38:91:5e:74:d7:16:20:d3:cd:82:92:d2:42:55:83:ab:36:35:
0f:cf:ee:69:8d:95:51:33:10:37:aa:4c:ba:1b:ca:0a:96:0a:
fb:57:2d:d8:af:42:2c:c2:b5:a7:b8:e2:e7:db:b0:8b:23:d1:
e0:ff:db:c2:d3:16:a9:fa:48:d1:ce:fd:70:4d:5a:8e:94:fd:
52:b9:a4:0d:e3:44:b8:dc:c7:94:50:f2:9b:b1:21:b4:de:d6:
f0:17:ee:5e:f2:f6:e8:13:71:e8:5f:df:1f:ac:ed:f5:32:48:
e7:1e:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:36:59 2025 by rpki-client