Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/qHj4B8aigXniXPk6O8uUWscuDL4.roa
File: qHj4B8aigXniXPk6O8uUWscuDL4.roa (raw, json)
Hash identifier: rr+bj9v5x9xwlgL07/yK2dZAcxu81nhoYLINYT90//E=
Subject key identifier: A8:78:F8:07:C6:A2:81:79:E2:5C:F9:3A:3B:CB:94:5A:C7:2E:0C:BE
Certificate issuer: /CN=0336efb1f60531bf1885ad003b161c7ffe635376
Certificate serial: 07BE7887
Authority key identifier: 03:36:EF:B1:F6:05:31:BF:18:85:AD:00:3B:16:1C:7F:FE:63:53:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzbvsfYFMb8Yha0AOxYcf_5jU3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/qHj4B8aigXniXPk6O8uUWscuDL4.roa
Signing time: Sat 01 Jan 2022 06:06:35 +0000
ROA not before: Sat 01 Jan 2022 06:06:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39421
IP address blocks: 45.90.163.0/24 maxlen: 24
45.90.162.0/24 maxlen: 24
45.90.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129923207 (0x7be7887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0336efb1f60531bf1885ad003b161c7ffe635376
Validity
Not Before: Jan 1 06:06:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a878f807c6a28179e25cf93a3bcb945ac72e0cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:5c:4a:79:09:b6:82:52:54:d9:9b:eb:c0:
82:0b:90:f3:a5:c7:06:fa:63:c8:ba:51:96:b2:54:
48:80:48:82:17:59:7b:95:7a:a7:0d:ed:88:84:80:
6f:cc:79:d9:36:7f:ed:77:da:ad:2e:92:c1:e2:9d:
bd:22:16:05:35:eb:70:15:a7:83:a4:92:ba:68:eb:
01:aa:b6:e7:0c:68:1c:ad:0f:cb:6f:d5:08:4f:42:
12:53:96:74:04:97:e5:24:8b:09:59:e5:07:f2:17:
ba:97:46:ef:d1:17:f7:b1:9e:04:78:71:fc:c2:83:
fe:6e:9a:0c:17:19:14:c6:9f:9e:d7:c5:71:b2:37:
d4:c1:ec:1d:e2:fb:3e:45:22:5d:2a:63:fd:a1:6b:
c1:34:3b:05:7f:46:3e:4c:16:98:e2:b5:93:f1:70:
6b:2c:e3:c4:b5:e4:d3:be:96:8b:3c:e2:ac:62:78:
09:83:15:94:95:11:58:c8:d0:8a:de:00:7a:b0:2e:
d6:dd:d6:a2:cc:7f:22:73:0c:33:70:68:33:78:e2:
68:76:c0:0a:ff:63:76:97:38:a7:57:cd:1c:5a:88:
c3:2b:32:3b:ae:7b:b3:57:d1:fe:04:b6:dc:7b:1f:
56:86:53:fb:ac:27:1c:d9:15:85:66:38:21:2c:03:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:F8:07:C6:A2:81:79:E2:5C:F9:3A:3B:CB:94:5A:C7:2E:0C:BE
X509v3 Authority Key Identifier:
keyid:03:36:EF:B1:F6:05:31:BF:18:85:AD:00:3B:16:1C:7F:FE:63:53:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzbvsfYFMb8Yha0AOxYcf_5jU3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/qHj4B8aigXniXPk6O8uUWscuDL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/AzbvsfYFMb8Yha0AOxYcf_5jU3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.161.0-45.90.163.255
Signature Algorithm: sha256WithRSAEncryption
37:73:d1:a7:84:50:aa:fe:fc:2e:b7:c1:1a:31:6a:19:45:67:
dd:82:01:2a:24:b6:f2:40:c3:70:e1:df:a1:6e:e0:ed:4f:d6:
77:0d:d2:90:bf:85:12:b4:85:f8:47:24:17:85:44:92:26:dc:
db:b4:5a:53:18:b4:93:cf:57:6f:c0:8f:9b:de:ed:51:b7:c3:
f6:e1:f3:ec:87:58:f0:a2:45:a7:92:a8:d2:93:b1:84:69:8c:
ae:bf:4a:74:d6:13:22:b2:30:3b:8b:24:36:db:38:fb:4d:4d:
e8:f7:27:0a:d8:4c:0a:f5:87:aa:32:15:8d:9c:ec:e0:cf:d2:
10:67:d3:46:31:48:52:b4:c1:b7:eb:09:a2:11:85:1e:94:61:
ee:33:34:08:7a:d0:59:7f:9d:57:0e:3f:bc:2e:79:44:9e:25:
1c:b1:f0:c5:e7:38:d5:77:57:0b:3b:83:6c:14:e0:1e:90:d3:
a9:54:4f:83:73:f0:92:13:20:3b:61:68:bb:18:2a:ab:05:ae:
9c:80:35:49:cf:04:0d:77:5b:d6:50:ba:f0:3e:a7:d0:38:18:
e5:a6:b3:d9:ba:25:28:b6:8b:76:bd:d9:d1:26:ff:7d:5c:a1:
4d:cc:3c:fb:64:eb:f4:0f:40:ec:d1:40:4e:1a:da:18:bc:5a:
c4:e7:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:48 2025 by rpki-client