Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/qsFi9MH64YRV7PVYQeOof5Xsngw.roa
File: qsFi9MH64YRV7PVYQeOof5Xsngw.roa (raw, json)
Hash identifier: lsVlxya0DioqzJ2Y16TJt06KeZWREYUmkI61r/1g9es=
Subject key identifier: AA:C1:62:F4:C1:FA:E1:84:55:EC:F5:58:41:E3:A8:7F:95:EC:9E:0C
Certificate issuer: /CN=0336efb1f60531bf1885ad003b161c7ffe635376
Certificate serial: 0183C6F2D94114D2771906AD06DC15CC87B0
Authority key identifier: 03:36:EF:B1:F6:05:31:BF:18:85:AD:00:3B:16:1C:7F:FE:63:53:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzbvsfYFMb8Yha0AOxYcf_5jU3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/qsFi9MH64YRV7PVYQeOof5Xsngw.roa
Signing time: Tue 11 Oct 2022 12:09:07 +0000
ROA not before: Tue 11 Oct 2022 12:09:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39421
IP address blocks: 45.90.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:f2:d9:41:14:d2:77:19:06:ad:06:dc:15:cc:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0336efb1f60531bf1885ad003b161c7ffe635376
Validity
Not Before: Oct 11 12:09:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aac162f4c1fae18455ecf55841e3a87f95ec9e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:0e:61:74:79:2b:12:72:28:07:19:5a:03:
b7:9a:d8:ce:a4:0b:37:3c:47:db:04:e0:18:4c:f3:
de:ed:2e:3e:9d:b0:53:f3:53:c4:1b:ac:90:a6:af:
c8:3f:f4:c9:ea:4b:d2:92:75:d8:a7:7d:d1:57:6c:
39:26:a4:f1:9a:9d:d7:b3:2e:c1:8e:96:38:fa:b7:
9f:11:b0:14:c8:db:ef:c2:73:48:a2:0f:03:6a:b6:
2d:55:6b:13:82:fd:b0:9c:46:cc:db:69:04:ec:af:
0d:e3:fd:5c:34:42:21:95:a9:b1:24:a9:8e:21:f8:
ae:7e:b6:dd:a5:ba:45:9f:2e:24:bf:01:aa:25:ca:
ae:49:60:40:9e:af:07:02:d6:ec:36:9e:0b:19:9a:
4b:a8:60:21:35:3a:56:5d:e5:da:44:4a:7e:da:04:
b3:b6:10:36:ab:7c:7f:4a:39:71:48:ec:bf:ad:78:
de:86:23:3f:53:a9:13:bd:7c:2b:04:05:50:16:18:
f0:76:20:bb:97:58:57:62:f9:df:4d:ab:3c:60:82:
16:21:a9:5f:f5:49:cf:b6:e3:77:8a:74:a0:ab:b5:
5f:7f:c4:2b:eb:60:d4:1b:2b:75:28:32:b0:49:c7:
9f:54:7c:c4:62:32:98:09:29:f1:41:62:e8:6f:15:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:62:F4:C1:FA:E1:84:55:EC:F5:58:41:E3:A8:7F:95:EC:9E:0C
X509v3 Authority Key Identifier:
keyid:03:36:EF:B1:F6:05:31:BF:18:85:AD:00:3B:16:1C:7F:FE:63:53:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzbvsfYFMb8Yha0AOxYcf_5jU3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/qsFi9MH64YRV7PVYQeOof5Xsngw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d1a94a-fbe7-4f5d-a84c-c5c5b8cb437f/1/AzbvsfYFMb8Yha0AOxYcf_5jU3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.163.0/24
Signature Algorithm: sha256WithRSAEncryption
08:19:a8:0b:19:aa:97:ef:59:e8:69:37:6e:3e:d2:3a:a4:16:
7c:c2:33:2c:97:88:b5:0f:db:d0:69:2a:2b:80:8b:d4:62:07:
49:8f:68:9c:ee:06:3f:ef:ea:4c:71:f3:9f:e0:ad:2a:92:b6:
9b:0d:c6:99:08:75:80:53:2c:10:42:39:11:61:33:b7:51:71:
95:36:3a:77:4d:06:cb:1c:52:a5:81:64:7e:c4:35:64:25:8d:
9f:c6:27:6b:2f:68:4c:23:ec:ca:45:6e:11:b2:0a:35:80:7a:
34:a7:f7:68:2e:52:9c:b9:41:cb:f5:99:7f:47:98:6b:d8:0b:
ab:23:4e:89:66:79:4f:73:51:c5:b9:c8:84:4c:67:a5:a6:82:
87:a8:ae:00:6b:05:74:30:f4:c5:ef:3c:b4:b4:c0:b1:68:48:
37:21:6d:c9:07:ba:43:71:be:cd:1a:7e:2f:bd:97:2c:a7:0c:
3b:8e:96:d1:cc:69:9b:11:45:de:df:41:c3:0b:df:90:4c:fe:
fa:ff:db:84:da:ba:fb:fb:02:cf:b1:42:3d:9a:59:ec:af:b4:
e9:0d:23:e9:be:ed:e3:cb:b4:3d:b7:fd:4d:34:18:6e:f4:6f:
ef:c6:8c:82:95:4f:ab:e8:bf:5f:e2:f2:79:0e:63:78:03:d1:
fc:56:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:15:05 2025 by rpki-client