Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/qnYrdp1HUfshM2OWC6cMry4RShI.roa
File: qnYrdp1HUfshM2OWC6cMry4RShI.roa (raw, json)
Hash identifier: i0QW7sVG23NhNMgt+bb/kTbMm+9zZyMipF3ElK2eHQA=
Subject key identifier: AA:76:2B:76:9D:47:51:FB:21:33:63:96:0B:A7:0C:AF:2E:11:4A:12
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 0187B799C7DDE65C9523FB5EFFF091205E07
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/qnYrdp1HUfshM2OWC6cMry4RShI.roa
Signing time: Tue 25 Apr 2023 08:48:41 +0000
ROA not before: Tue 25 Apr 2023 08:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 45.138.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:99:c7:dd:e6:5c:95:23:fb:5e:ff:f0:91:20:5e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Apr 25 08:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa762b769d4751fb213363960ba70caf2e114a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:0a:cf:11:04:af:36:7b:10:38:14:5b:78:
38:f2:e5:f3:2a:79:4f:54:71:f4:16:36:dc:bb:a6:
cd:59:96:60:82:76:e6:a4:87:4e:47:e4:c2:11:8f:
8a:b9:c3:7b:a2:e1:5d:14:49:df:32:f1:9a:6a:ef:
de:5e:f1:73:90:a2:5d:6c:cb:99:d7:7f:60:95:8d:
d5:37:a5:6e:4e:bf:9d:5c:59:c2:cc:c3:c1:ab:33:
90:1f:ca:f9:d0:3f:3d:b1:1a:a6:ba:58:19:07:40:
20:0d:c2:55:48:f9:90:f6:38:ce:9b:ca:b6:16:a5:
f9:62:9e:13:f4:68:52:75:f1:5d:4e:16:87:10:a3:
b0:85:d4:3f:79:b8:d7:19:95:eb:c6:95:e5:ee:6c:
da:ab:c6:f4:73:c9:0b:97:1f:41:03:ca:14:0a:3e:
be:f7:e9:6d:7a:9a:55:5e:25:47:12:76:49:59:df:
0c:b5:a1:f4:b3:02:4d:7c:9c:15:1f:ed:30:c2:1c:
ff:55:d2:8b:d1:ea:a2:43:42:6f:f1:b7:c9:12:d0:
19:a9:d0:5e:37:12:34:87:6d:c8:12:9b:74:21:ec:
a4:0d:9a:be:09:f4:cd:cb:7b:ab:20:bb:31:10:aa:
c2:a1:30:fc:b9:0e:89:29:ee:7c:70:21:3a:35:46:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:2B:76:9D:47:51:FB:21:33:63:96:0B:A7:0C:AF:2E:11:4A:12
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/qnYrdp1HUfshM2OWC6cMry4RShI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.156.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7d:ac:6e:5d:37:5b:3e:db:ed:22:8f:e0:93:51:e2:f7:aa:
f9:b8:f3:5f:d1:ad:ad:4d:8b:82:53:0c:a2:80:1e:c3:0d:b2:
8b:77:08:ad:96:4d:31:21:3b:ae:10:c6:29:ed:5c:3f:df:f4:
5f:2b:34:54:a1:2a:e0:6d:76:3a:3f:9e:22:78:e0:ae:2f:ac:
ab:10:6e:31:bd:60:2e:ba:77:41:79:10:4f:71:cc:8a:e2:d9:
65:f4:e3:5e:98:47:9a:5a:01:86:04:93:ee:9d:35:38:31:25:
5e:9c:4d:2e:b3:36:37:57:2a:6e:51:26:b0:ff:c6:05:16:4b:
5e:b5:0d:71:23:68:63:66:63:2c:54:b5:6a:7b:1b:8b:53:a8:
62:b4:f7:7e:61:3e:ab:03:05:fc:16:91:d0:b6:22:61:3c:e3:
2e:f2:c6:fa:7b:af:df:34:c5:ad:cf:a3:ad:03:03:c6:6a:da:
87:de:14:a1:5c:d4:d2:93:fd:86:ae:53:69:5d:c8:71:df:32:
48:f2:2c:1a:c4:c1:05:95:9b:a1:c3:a8:d9:ad:6d:75:4b:16:
0d:c5:c7:6e:15:08:90:97:4e:24:12:e0:16:84:ba:70:ab:3b:
20:62:de:f9:98:29:99:74:c2:08:4b:7e:8b:e2:91:9d:e1:a0:
1d:65:f3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:01:01 2025 by rpki-client