Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/VwDSvKXL-FAf9Tdp4tXy0eFSl3E.roa
File: VwDSvKXL-FAf9Tdp4tXy0eFSl3E.roa (raw, json)
Hash identifier: jVE2rkrnBB6DzOQp81RLJiKIzzq4U/zb1nweoSLykj0=
Subject key identifier: 57:00:D2:BC:A5:CB:F8:50:1F:F5:37:69:E2:D5:F2:D1:E1:52:97:71
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 0744D90B
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/VwDSvKXL-FAf9Tdp4tXy0eFSl3E.roa
Signing time: Sat 01 Jan 2022 09:02:16 +0000
ROA not before: Sat 01 Jan 2022 09:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48362
IP address blocks: 45.152.52.0/22 maxlen: 24
185.31.212.0/22 maxlen: 22
185.252.36.0/22 maxlen: 22
94.199.168.0/21 maxlen: 21
2a02:1688::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121952523 (0x744d90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Jan 1 09:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5700d2bca5cbf8501ff53769e2d5f2d1e1529771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:83:d0:1a:09:44:25:0c:0c:7b:9a:fa:85:
d3:63:49:1b:85:c8:90:70:1d:23:93:39:5c:ce:ae:
91:9d:f8:f8:c8:d8:0a:b3:9f:a3:27:09:bf:81:b8:
c1:f8:bc:db:b7:bb:e6:12:01:7f:9b:c1:97:41:2b:
0c:20:45:2f:7c:b4:ce:3c:72:94:fc:8b:15:b5:2e:
a4:ee:a8:1a:ff:48:43:24:c8:20:96:c5:02:1b:6f:
ba:fe:b9:a4:f9:71:11:53:f6:d8:5f:84:e5:13:97:
c5:2b:21:7e:fd:85:e5:71:89:5c:07:af:bd:3b:fb:
78:f4:d6:c8:97:69:27:1b:bf:08:b7:dc:64:96:17:
ad:8a:7a:f3:cf:70:21:3c:ec:2d:4c:1c:a7:0d:15:
0d:e4:00:f2:f5:74:f1:2d:6e:42:68:84:e3:d7:54:
10:70:16:ff:46:c6:75:3e:8a:ea:96:81:74:54:71:
30:7c:c8:1d:0f:7a:09:e9:d0:a3:a6:69:2c:01:db:
c9:82:c0:61:ce:18:78:f4:e7:46:84:3e:5d:fe:5e:
c2:24:76:37:e5:e8:97:ee:bf:6d:3a:1c:3d:5d:90:
39:ca:65:34:13:e6:2e:42:87:17:f0:b1:71:05:af:
e3:e4:c6:c6:dc:2b:10:84:15:fa:39:b1:aa:8c:3b:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:00:D2:BC:A5:CB:F8:50:1F:F5:37:69:E2:D5:F2:D1:E1:52:97:71
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/VwDSvKXL-FAf9Tdp4tXy0eFSl3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.52.0/22
94.199.168.0/21
185.31.212.0/22
185.252.36.0/22
IPv6:
2a02:1688::/32
Signature Algorithm: sha256WithRSAEncryption
78:5d:1c:e8:bd:e3:fe:77:18:aa:c2:3b:b0:75:e4:2c:6b:34:
32:60:c9:d4:a0:e4:b4:df:6e:d2:cf:ae:51:ba:ad:6c:45:9b:
7b:2e:df:60:9d:7d:67:41:69:c8:34:c5:ea:d5:43:4c:ee:78:
e2:b8:1a:60:25:9e:bb:7d:3a:4b:11:de:38:50:6b:fa:e8:a6:
af:cd:1c:da:fd:d2:37:9d:be:4e:07:b6:4b:74:01:b9:ad:b6:
2f:f9:c7:19:ea:9b:72:6d:e5:9b:7d:97:0f:eb:ef:8e:5a:76:
1b:7c:87:37:44:91:38:12:54:e8:f6:35:4b:23:c1:ec:74:53:
d3:fd:15:85:60:a3:26:f0:52:f4:07:ee:5e:3f:af:b6:d5:71:
05:7d:05:81:c5:29:07:ce:c8:0c:3c:08:f8:d5:f1:a1:bf:8e:
bf:f9:9f:85:be:d3:24:9c:0c:e8:20:75:dc:46:73:49:a5:07:
95:d3:c7:24:ee:fe:0e:98:f9:29:4f:55:7b:34:fb:2d:e9:13:
a2:99:73:75:00:35:bd:0a:d7:95:0a:ff:03:9d:20:2f:e3:9b:
86:8e:0f:a4:67:0f:66:3e:90:5c:06:4b:9e:cb:87:4f:14:a3:
48:8a:e7:d7:41:92:1f:a8:2d:8b:9c:d2:ce:6c:45:b2:fb:1b:
a0:f8:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:34 2025 by rpki-client