Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/S9JolZHESm_cyloqUqexTNEq-9Q.roa
File: S9JolZHESm_cyloqUqexTNEq-9Q.roa (raw, json)
Hash identifier: u3hdzdQ9PZ80i+jxQ1Y8DLeAfgp0ujidQxEFcvCXz64=
Subject key identifier: 4B:D2:68:95:91:C4:4A:6F:DC:CA:5A:2A:52:A7:B1:4C:D1:2A:FB:D4
Certificate issuer: /CN=265018dba9c25a6e338ab4e91abe6897f6a45514
Certificate serial: 01856DEF65579E468F9707D29E6D4FC53FC4
Authority key identifier: 26:50:18:DB:A9:C2:5A:6E:33:8A:B4:E9:1A:BE:68:97:F6:A4:55:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlAY26nCWm4zirTpGr5ol_akVRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/S9JolZHESm_cyloqUqexTNEq-9Q.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44407
IP address blocks: 45.132.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:65:57:9e:46:8f:97:07:d2:9e:6d:4f:c5:3f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265018dba9c25a6e338ab4e91abe6897f6a45514
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bd2689591c44a6fdcca5a2a52a7b14cd12afbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:09:f0:34:b0:34:8b:46:fd:f8:7f:27:a1:
6d:b0:d7:25:6d:7e:39:c2:1b:d2:61:98:6e:27:5c:
16:45:30:70:02:e2:bd:80:67:8a:a0:cc:2b:95:7d:
03:b4:ae:be:49:1c:a2:21:f3:32:59:26:10:cd:40:
cb:b5:05:db:d0:4f:1a:20:d8:26:46:e2:d7:62:43:
40:ba:a4:86:24:a6:f6:cf:fc:d2:2f:ae:ca:1b:7c:
8a:6b:d5:83:10:4a:ae:1f:b1:bf:7e:9d:24:54:48:
de:ce:29:78:86:e4:02:2a:2f:1e:96:52:a6:19:09:
e3:49:48:bd:1d:0f:99:0d:ac:32:bc:6c:61:0a:ef:
c8:30:e1:c1:6c:8f:c6:da:ba:77:4b:0c:8c:78:6c:
ef:14:43:65:14:9f:87:16:df:28:65:1c:a4:21:a8:
9e:38:9d:72:05:e4:dc:a5:77:b8:7c:11:da:60:c1:
aa:77:3e:9c:04:f7:0f:40:78:0a:4d:e0:89:ce:9b:
71:5d:40:c7:6d:c4:0f:89:f0:9e:94:36:e3:7f:f4:
dc:58:c7:84:19:b4:78:9e:da:fe:1d:3c:33:f3:e4:
04:36:ab:65:9f:b7:20:18:4f:62:6a:95:bb:46:ce:
cb:33:8d:93:44:18:63:47:3a:d0:c8:2a:ca:cd:b4:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:68:95:91:C4:4A:6F:DC:CA:5A:2A:52:A7:B1:4C:D1:2A:FB:D4
X509v3 Authority Key Identifier:
keyid:26:50:18:DB:A9:C2:5A:6E:33:8A:B4:E9:1A:BE:68:97:F6:A4:55:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlAY26nCWm4zirTpGr5ol_akVRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/S9JolZHESm_cyloqUqexTNEq-9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d21ef7-f1ce-4077-ab74-4828dc72ea98/1/JlAY26nCWm4zirTpGr5ol_akVRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.248.0/22
Signature Algorithm: sha256WithRSAEncryption
54:cf:51:bf:74:3d:6b:43:61:b0:cc:61:b5:67:f7:73:dc:b9:
6a:95:f1:46:a1:5a:bb:87:dc:88:b5:3c:a9:f1:4a:45:09:b5:
e3:63:14:2c:0e:52:04:59:00:36:63:b7:d9:32:c1:fd:b0:1d:
5d:11:ee:0c:e7:b1:82:21:4b:9c:57:60:16:af:23:a3:5a:c4:
2e:5d:15:d7:61:d6:85:c3:fd:7b:78:34:93:c9:92:8c:3b:6f:
0a:7a:14:69:dd:89:5a:5e:69:58:58:a0:4b:77:cf:05:89:4f:
4b:55:63:65:3c:4b:ee:70:b2:bf:a7:82:fd:fa:2b:5f:55:2a:
b9:1d:94:d2:0d:a8:cf:4c:73:9d:4d:c8:08:ef:a9:55:64:43:
0c:ed:fa:71:4a:5a:72:7c:b9:46:b8:ed:8c:e5:5a:b7:a7:87:
b8:c8:ef:cb:38:cb:08:a0:a7:be:a3:16:4c:a9:61:d5:f5:6d:
92:54:16:1b:9a:3c:53:19:2e:a3:e0:b7:26:d9:18:83:fb:2f:
43:00:58:12:b8:cb:4a:68:99:2a:4a:ee:0e:0e:c8:af:52:61:
8d:1c:46:ae:24:2f:b7:e1:46:52:c5:ec:b6:af:be:09:ed:ec:
f3:1e:c4:45:57:d8:34:e7:6e:93:c5:d0:e3:7e:4b:18:c7:e9:
26:da:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:40 2025 by rpki-client