Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/iKmGPjbyWJ4zOympVCJisHMLZRU.roa
File: iKmGPjbyWJ4zOympVCJisHMLZRU.roa (raw, json)
Hash identifier: ZTMAc3GEfC0ps5DHSwz9+6A4eoAI89N+WQlF9oNiSHM=
Subject key identifier: 88:A9:86:3E:36:F2:58:9E:33:3B:29:A9:54:22:62:B0:73:0B:65:15
Certificate issuer: /CN=74bdbc68fd4d25672bf7536fdc14cce6dd1330e5
Certificate serial: 0753B3A3
Authority key identifier: 74:BD:BC:68:FD:4D:25:67:2B:F7:53:6F:DC:14:CC:E6:DD:13:30:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL28aP1NJWcr91Nv3BTM5t0TMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/iKmGPjbyWJ4zOympVCJisHMLZRU.roa
Signing time: Sat 01 Jan 2022 07:02:28 +0000
ROA not before: Sat 01 Jan 2022 07:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 45.140.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122925987 (0x753b3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bdbc68fd4d25672bf7536fdc14cce6dd1330e5
Validity
Not Before: Jan 1 07:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88a9863e36f2589e333b29a9542262b0730b6515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c1:f3:64:4c:8d:10:e1:2d:96:f7:4a:b4:8e:
1d:69:2b:fe:f9:61:d1:6f:29:64:93:d9:8f:4f:63:
ca:14:9a:64:69:22:f9:ec:80:3b:a2:3c:30:c2:a3:
55:df:ed:43:19:3d:36:3e:b7:ec:de:52:7a:66:7d:
45:bc:af:20:ba:fd:31:5f:35:aa:e6:fe:75:6a:1c:
fc:af:94:7b:35:66:d0:5e:41:ca:3a:03:29:77:3f:
c9:26:04:2f:76:02:44:0c:57:ab:e7:86:52:10:aa:
09:d6:9e:55:c9:d0:40:91:32:7c:9c:78:cd:6c:8b:
48:d9:75:a2:7b:ca:e0:51:3a:35:98:7b:e1:27:28:
49:b0:b0:24:b3:8f:ec:f7:c7:ba:88:14:96:b7:1f:
6f:cc:6a:1c:53:05:02:32:a9:9b:4e:ac:47:a2:13:
9e:18:83:9e:62:45:fd:1d:1c:b3:3a:7f:c5:d7:f4:
6a:86:d9:ec:2b:35:af:e7:2b:ad:71:a2:cc:b9:6d:
b1:96:6d:db:23:78:a8:6a:a7:9c:21:ce:31:25:3e:
16:b2:c8:30:65:21:14:02:50:e1:0e:f0:c4:f8:d4:
8a:dc:e6:68:20:7e:70:45:5a:d2:ba:24:6d:e1:73:
3b:53:47:e2:17:34:17:ce:4e:a2:e3:e6:58:17:f7:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:86:3E:36:F2:58:9E:33:3B:29:A9:54:22:62:B0:73:0B:65:15
X509v3 Authority Key Identifier:
keyid:74:BD:BC:68:FD:4D:25:67:2B:F7:53:6F:DC:14:CC:E6:DD:13:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL28aP1NJWcr91Nv3BTM5t0TMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/iKmGPjbyWJ4zOympVCJisHMLZRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/dL28aP1NJWcr91Nv3BTM5t0TMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f8:a2:79:0f:18:bd:01:4d:8f:cc:ec:38:18:f7:e9:46:08:
8b:7e:55:eb:87:85:1e:e3:28:e4:71:32:23:b4:a3:ff:54:99:
a5:0d:f8:c5:2e:53:2f:3e:a7:f5:c1:94:e6:07:f8:03:26:e4:
43:fa:85:14:3b:fb:b1:a4:f4:56:7c:9c:b4:d4:46:28:92:0b:
3d:97:81:ca:6c:37:86:e4:94:5e:bd:c6:16:eb:62:13:8f:ac:
c8:8e:9c:a3:7f:27:25:90:85:f8:60:41:1d:4f:70:b4:e6:27:
47:a0:cb:11:fa:fd:9d:bd:43:45:a9:51:0b:3a:90:06:38:92:
f6:45:27:1f:0f:86:1b:4e:64:d0:20:72:fd:2c:29:17:85:6e:
ff:b3:bb:21:f9:33:c6:f0:4a:6c:6f:4e:1d:b1:67:02:cf:d8:
6c:97:78:60:23:9e:97:d6:17:2a:8a:b5:a1:18:05:50:c9:39:
db:09:45:d5:40:81:6b:09:5c:46:e8:5a:f7:11:25:e7:90:48:
d0:6a:5c:08:ad:78:f5:d9:5b:c7:20:cb:1a:36:4b:ce:19:f8:
5d:a8:18:56:0f:c3:fe:a9:7b:da:ce:14:66:83:99:e0:70:a1:
30:91:05:50:af:02:df:42:55:f6:6d:24:e5:9d:a7:e2:ac:c1:
52:0b:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:56 2025 by rpki-client