Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/kE1oH_HewlFYwwkKEVfzCzM4dnI.roa
File: kE1oH_HewlFYwwkKEVfzCzM4dnI.roa (raw, json)
Hash identifier: DqGiV+6hQboT71MUv9rLUau9Vpnyw6iGLXSEn3julYQ=
Subject key identifier: 90:4D:68:1F:F1:DE:C2:51:58:C3:09:0A:11:57:F3:0B:33:38:76:72
Certificate issuer: /CN=7bf4ab8fe3f45bf4c985ee1616c2c134cd81f823
Certificate serial: 01856C4A501E35E476D908DF2B55415140E7
Authority key identifier: 7B:F4:AB:8F:E3:F4:5B:F4:C9:85:EE:16:16:C2:C1:34:CD:81:F8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_Srj-P0W_TJhe4WFsLBNM2B-CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/kE1oH_HewlFYwwkKEVfzCzM4dnI.roa
Signing time: Sun 01 Jan 2023 07:44:47 +0000
ROA not before: Sun 01 Jan 2023 07:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 45.94.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:50:1e:35:e4:76:d9:08:df:2b:55:41:51:40:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf4ab8fe3f45bf4c985ee1616c2c134cd81f823
Validity
Not Before: Jan 1 07:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904d681ff1dec25158c3090a1157f30b33387672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:77:06:ae:9d:74:e0:84:a4:52:9c:97:1d:
fc:74:db:6c:78:ae:be:67:9d:fd:37:44:c0:66:73:
53:e7:71:8a:4d:7c:9e:0e:9b:11:99:0c:ef:55:08:
2a:6b:06:91:eb:05:a1:5a:1e:f6:4c:1f:5b:85:55:
b5:39:2e:32:d4:bf:f4:46:ee:c1:fc:08:88:6b:10:
91:fc:89:62:69:47:62:ef:51:ff:d8:2c:8c:85:ba:
84:bf:f0:89:48:31:81:40:1a:75:1e:7e:b7:1f:f3:
00:9b:82:e3:26:b1:e1:74:d0:f6:3a:2f:00:1d:b6:
19:46:7e:c9:26:52:08:d1:68:d1:f9:9b:d1:1c:d2:
ca:10:70:44:79:5f:1f:4f:14:4d:45:9d:fd:94:05:
6f:60:69:44:ee:53:e2:b9:f3:cc:74:9a:81:d8:da:
27:3f:35:57:47:e3:64:bf:32:2e:36:02:25:85:62:
e7:c2:63:b1:3f:f0:7f:13:10:de:0e:46:43:45:3f:
f3:e6:e1:a7:0c:37:4b:82:65:20:61:6a:bb:8e:33:
e1:7b:06:98:4f:b9:32:5d:2a:1d:70:84:7f:ac:16:
2b:ed:bd:d5:50:7f:29:78:c5:45:82:7e:95:0d:7d:
53:6e:6f:0e:23:9f:be:97:ae:f6:19:68:5b:63:ce:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:68:1F:F1:DE:C2:51:58:C3:09:0A:11:57:F3:0B:33:38:76:72
X509v3 Authority Key Identifier:
keyid:7B:F4:AB:8F:E3:F4:5B:F4:C9:85:EE:16:16:C2:C1:34:CD:81:F8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_Srj-P0W_TJhe4WFsLBNM2B-CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/kE1oH_HewlFYwwkKEVfzCzM4dnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/e_Srj-P0W_TJhe4WFsLBNM2B-CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.108.0/22
Signature Algorithm: sha256WithRSAEncryption
34:f9:66:a3:cf:78:b6:a7:b2:94:c3:e6:54:9d:d0:e6:26:b1:
52:19:8a:12:fe:2c:c3:15:0c:52:80:db:e3:25:f2:7d:ca:ee:
e4:dd:27:03:12:26:d5:0e:66:d5:b8:02:df:46:a5:83:fd:1b:
9f:2a:17:e6:b8:91:2a:96:7f:cc:7a:13:8f:a9:d9:9b:c2:8c:
37:e2:61:94:f3:f2:b3:8a:c6:a7:9c:2c:c2:a6:aa:23:1b:00:
c0:0f:23:3e:72:88:8a:48:0d:a2:97:ff:7c:e7:eb:74:b1:40:
2a:9b:6d:bc:69:a3:ae:be:a1:b6:88:1d:5e:69:d2:bd:fd:6c:
21:05:2c:e4:7c:55:85:0d:22:1f:bc:cf:af:93:38:4f:e8:ad:
a9:00:3e:e7:fd:ec:07:1a:9c:3f:1a:08:b8:74:42:fb:65:3f:
be:b6:d0:e2:9b:8e:aa:22:ee:eb:3c:13:85:e6:78:f1:0a:8f:
e6:71:c0:7e:cc:98:36:61:6c:06:a6:3c:ca:9d:d7:97:15:c0:
dd:48:bb:07:27:48:a2:77:c6:ec:59:60:94:b3:f5:1e:c7:66:
18:e8:d9:f1:86:d2:93:30:ed:e0:67:04:54:c8:9e:9e:24:19:
ec:94:4b:4d:54:c6:da:01:b0:c6:b3:25:1c:4c:2b:17:18:d2:
40:28:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:25 2025 by rpki-client