Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/omuMZvDBaJUqa4hpr1VKvt8K2lg.roa
File: omuMZvDBaJUqa4hpr1VKvt8K2lg.roa (raw, json)
Hash identifier: 1Z92wpCz7B4TYIEaJJ1mHaAc0npXjZSj9sAOvbbUu6A=
Subject key identifier: A2:6B:8C:66:F0:C1:68:95:2A:6B:88:69:AF:55:4A:BE:DF:0A:DA:58
Certificate issuer: /CN=7d1235c0776916507c149190a50479f067506f0c
Certificate serial: 08957578
Authority key identifier: 7D:12:35:C0:77:69:16:50:7C:14:91:90:A5:04:79:F0:67:50:6F:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRI1wHdpFlB8FJGQpQR58GdQbww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/omuMZvDBaJUqa4hpr1VKvt8K2lg.roa
Signing time: Sat 01 Jan 2022 03:53:54 +0000
ROA not before: Sat 01 Jan 2022 03:53:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29423
IP address blocks: 45.12.48.0/22 maxlen: 24
2a0e:9700::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144012664 (0x8957578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d1235c0776916507c149190a50479f067506f0c
Validity
Not Before: Jan 1 03:53:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a26b8c66f0c168952a6b8869af554abedf0ada58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0a:b0:21:8d:27:02:e9:df:ce:66:6f:09:31:
97:44:24:98:56:b6:57:08:38:bf:20:89:ea:0e:89:
12:8f:84:0f:d5:d5:9e:ca:24:c1:19:d8:26:35:40:
e7:f1:60:c8:a5:a5:1b:79:82:d5:5f:5e:c5:bd:e1:
dd:a7:5a:17:45:00:f9:93:31:dc:a5:d8:e4:6e:ff:
b3:ce:32:cf:a5:c6:16:4f:b8:c7:58:c7:4b:9f:a2:
7a:f0:56:f0:bc:c2:17:3a:25:3a:95:ad:84:fc:cd:
c4:4d:69:5d:c2:7d:1d:80:2e:6b:0c:ec:d0:8f:4f:
e4:f4:b8:e4:05:3f:4f:a1:2c:25:df:c0:41:34:78:
b2:75:f0:5e:28:79:8e:30:3d:1f:fb:d4:d3:5a:8a:
b3:b4:7e:0a:fc:d4:d3:41:e7:5f:31:7a:49:be:3e:
1c:e4:95:67:b7:fe:0e:76:73:45:a2:d6:83:72:85:
0c:33:94:90:89:49:6e:89:42:40:dc:1f:65:cb:d2:
61:af:a9:b7:af:22:73:9a:9e:7c:15:81:c1:82:29:
08:eb:22:10:c7:3a:d3:22:70:2e:f1:ed:bd:d8:32:
1f:85:76:18:e4:40:82:bf:3c:7c:d9:fa:ce:1a:3d:
08:7c:e2:15:d7:d5:b8:9f:67:07:56:8f:a7:06:75:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:8C:66:F0:C1:68:95:2A:6B:88:69:AF:55:4A:BE:DF:0A:DA:58
X509v3 Authority Key Identifier:
keyid:7D:12:35:C0:77:69:16:50:7C:14:91:90:A5:04:79:F0:67:50:6F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRI1wHdpFlB8FJGQpQR58GdQbww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/omuMZvDBaJUqa4hpr1VKvt8K2lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/df52a4-e8f8-4740-8a54-eb54b5214bfd/1/fRI1wHdpFlB8FJGQpQR58GdQbww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.48.0/22
IPv6:
2a0e:9700::/29
Signature Algorithm: sha256WithRSAEncryption
6b:75:9f:ad:50:0d:a8:6b:b1:c9:29:54:48:94:55:6c:20:2f:
24:49:43:9b:04:0b:b5:31:91:0d:a5:63:61:86:67:c2:10:5a:
24:63:be:32:b7:1b:58:46:d0:de:f1:85:6c:94:f8:f5:28:2c:
6b:12:7b:75:e5:27:6d:25:09:62:02:95:ce:f2:43:2a:97:ca:
78:23:4a:3d:83:fc:72:84:24:50:80:75:b3:66:c2:30:50:aa:
84:92:46:2b:d7:ed:04:bc:cc:6e:72:8f:a0:1b:3c:9b:b1:87:
3d:94:76:31:ea:56:60:87:af:90:f8:e6:43:35:35:81:6f:c5:
59:6d:ec:19:48:71:08:f1:44:7d:2b:c5:bc:d5:8e:53:b9:12:
24:95:a6:af:30:ee:f6:9d:bd:99:32:57:39:56:92:5d:57:64:
21:6c:12:93:5e:5a:b1:ec:25:45:8c:25:db:18:dc:0b:b7:19:
f9:82:da:cf:8f:87:31:34:bb:c2:5e:69:aa:79:cf:e0:64:fe:
a7:77:76:c5:f2:60:51:ca:8c:6c:02:02:de:e8:74:c6:fa:06:
3f:a9:0c:9f:69:2c:44:89:90:63:d8:46:1e:07:e4:85:07:f7:
25:c0:ed:1f:55:f4:a2:e6:c8:30:d1:6a:ab:6b:b7:1a:80:64:
0d:f8:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:04:11 2025 by rpki-client