Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/PcqrMJWinJc9LOVCoZxAtDvBdV0.roa
File: PcqrMJWinJc9LOVCoZxAtDvBdV0.roa (raw, json)
Hash identifier: tMxEfPx2ogOpIJxcwQEn0InWxTorojwoCzFpHTnOJd8=
Subject key identifier: 3D:CA:AB:30:95:A2:9C:97:3D:2C:E5:42:A1:9C:40:B4:3B:C1:75:5D
Certificate issuer: /CN=15dcfce97d55f155cc7cbd6906e668d4f930296c
Certificate serial: 05CC6364
Authority key identifier: 15:DC:FC:E9:7D:55:F1:55:CC:7C:BD:69:06:E6:68:D4:F9:30:29:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdz86X1V8VXMfL1pBuZo1PkwKWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/PcqrMJWinJc9LOVCoZxAtDvBdV0.roa
Signing time: Sat 01 Jan 2022 14:07:35 +0000
ROA not before: Sat 01 Jan 2022 14:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202913
IP address blocks: 45.148.198.0/24 maxlen: 24
45.148.196.0/23 maxlen: 23
45.148.199.0/24 maxlen: 24
45.148.196.0/22 maxlen: 22
45.148.196.0/24 maxlen: 24
45.148.197.0/24 maxlen: 24
45.148.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97280868 (0x5cc6364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dcfce97d55f155cc7cbd6906e668d4f930296c
Validity
Not Before: Jan 1 14:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dcaab3095a29c973d2ce542a19c40b43bc1755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:89:ce:f4:77:33:16:40:e2:b1:d9:67:1c:
34:84:c2:20:82:3e:fc:6c:94:eb:f9:ae:d2:25:56:
8b:d7:11:62:6f:5c:42:5a:24:7c:e9:d0:29:9d:0a:
c7:a2:c1:21:4f:7c:99:cc:34:f7:ba:30:91:c8:17:
39:3b:66:26:eb:df:7d:f6:4f:a0:1d:e8:39:dc:51:
de:56:94:e1:21:25:1d:2b:2d:b3:43:8b:7d:d1:a3:
c4:4a:0b:9e:c2:18:30:f2:d2:0e:85:07:5e:65:ab:
69:9d:cb:ed:a5:7e:a3:b3:f9:52:86:16:ad:84:56:
b8:b9:b8:17:a4:2c:c7:76:75:0f:b3:6a:8e:8e:3d:
1c:66:52:fe:d8:53:4a:ff:4a:dd:b0:23:78:5d:92:
07:0a:d0:22:e1:46:d0:3d:2c:d6:53:8d:32:4a:70:
72:36:f7:ee:6e:11:06:b5:60:24:6b:c2:d8:7a:fd:
5a:a2:02:fd:92:9f:10:32:84:a9:60:93:1c:42:fa:
9d:3d:ef:29:f6:fa:92:66:18:d2:1d:8b:db:05:43:
0c:f4:9b:c2:cc:cd:0b:d4:7b:15:1c:46:dd:59:89:
9b:af:0c:db:8a:81:9b:9e:4f:93:82:0e:7d:62:80:
b8:ae:38:1d:30:42:30:1d:14:7e:4b:ba:fc:e3:d0:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:AB:30:95:A2:9C:97:3D:2C:E5:42:A1:9C:40:B4:3B:C1:75:5D
X509v3 Authority Key Identifier:
keyid:15:DC:FC:E9:7D:55:F1:55:CC:7C:BD:69:06:E6:68:D4:F9:30:29:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdz86X1V8VXMfL1pBuZo1PkwKWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/PcqrMJWinJc9LOVCoZxAtDvBdV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2ce1b-ca1e-4ec7-8864-30b36d66ab41/1/Fdz86X1V8VXMfL1pBuZo1PkwKWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ca:85:31:f9:9f:3e:b6:55:7d:1e:65:d7:30:eb:a5:87:43:
b1:fa:4e:a0:cf:9f:76:5e:68:3e:17:b0:ef:3b:c6:ea:84:ae:
85:b3:41:84:11:c5:a1:28:e7:08:c2:eb:a7:5e:a3:b7:75:b0:
38:15:f7:bb:43:5d:b0:7b:8e:0b:6e:fb:6f:3d:49:77:b3:83:
b4:67:df:1f:87:81:32:f6:c8:a0:b1:0d:35:3e:eb:9c:2f:9b:
1a:15:aa:53:db:f4:1c:b0:23:50:fd:18:3f:f6:cc:5e:5b:af:
a2:d4:69:86:dd:65:df:4e:7d:b9:44:e9:c1:f3:66:19:33:75:
32:1b:41:80:57:49:09:9a:4e:fa:a6:eb:25:62:bf:e1:5e:4a:
2a:7d:12:4a:7b:0c:e5:1b:45:3e:59:ab:df:85:04:b9:8b:51:
09:6d:1d:ef:fd:3c:97:39:2b:d4:4d:d8:99:f2:0d:5c:c4:c1:
72:87:0d:eb:fa:39:d4:0c:d7:7c:bc:60:64:04:66:ad:6e:4b:
a1:1c:5c:b3:5c:1f:5f:a5:c4:e0:64:3b:00:87:bb:78:69:59:
8b:17:73:37:87:10:20:cd:c1:ac:8c:17:44:48:c8:f0:96:30:
45:6b:c4:c6:02:ff:af:f8:4e:99:cb:a2:32:b6:12:9c:ca:b5:
4a:94:e1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:59:24 2025 by rpki-client