Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/xh3E7jcMCQfNKjyBkO9bosIKtus.roa
File: xh3E7jcMCQfNKjyBkO9bosIKtus.roa (raw, json)
Hash identifier: lNiollCdVhHJ6RomI3sw/bw/KXuNhd+nUd1C0lpXBRo=
Subject key identifier: C6:1D:C4:EE:37:0C:09:07:CD:2A:3C:81:90:EF:5B:A2:C2:0A:B6:EB
Certificate issuer: /CN=032814ea869bf42935fbe677485ffae987046235
Certificate serial: 086C7FC7
Authority key identifier: 03:28:14:EA:86:9B:F4:29:35:FB:E6:77:48:5F:FA:E9:87:04:62:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AygU6oab9Ck1--Z3SF_66YcEYjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/xh3E7jcMCQfNKjyBkO9bosIKtus.roa
Signing time: Sat 01 Jan 2022 15:58:27 +0000
ROA not before: Sat 01 Jan 2022 15:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 45.82.184.0/22 maxlen: 22
2a0e:7180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141328327 (0x86c7fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032814ea869bf42935fbe677485ffae987046235
Validity
Not Before: Jan 1 15:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c61dc4ee370c0907cd2a3c8190ef5ba2c20ab6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:a7:35:83:89:49:31:1f:c2:07:44:3a:69:
53:82:83:22:57:db:24:7a:b6:3d:50:a5:61:92:ab:
d3:0c:72:53:f1:6b:52:5f:aa:8e:72:7e:eb:28:c9:
7e:de:b7:fe:86:2a:db:e0:d4:99:c2:8b:8a:93:01:
5a:f6:68:5c:a0:e7:42:bb:59:75:55:65:c5:22:9c:
42:1b:29:bd:1b:ef:20:27:6b:ec:48:8a:97:70:42:
9b:38:f0:bf:bf:93:18:40:20:74:e4:d0:4f:48:e8:
36:e7:02:2d:8a:69:a4:5b:3f:ec:e6:83:b3:c2:0e:
f2:ee:78:13:78:c7:32:b1:07:f7:cc:75:e5:fa:72:
85:5a:ae:8d:a5:4e:a2:85:94:77:f2:36:24:55:af:
5d:12:64:58:a5:52:85:3d:6c:a2:69:16:7f:8e:0c:
ba:c5:40:fc:2f:cc:62:59:33:e9:a9:29:11:6b:28:
60:4c:a1:29:31:fe:77:1d:99:aa:97:cf:3c:c9:69:
74:b7:20:09:72:1d:18:2f:92:61:d0:86:5a:3f:91:
d0:89:01:6f:eb:7d:98:ed:aa:da:52:a8:80:15:17:
f9:e5:6c:34:46:3e:01:5b:87:6c:03:b6:45:ea:d0:
e6:28:90:36:9b:9d:a7:d4:cb:28:1e:b6:85:d9:8b:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:C4:EE:37:0C:09:07:CD:2A:3C:81:90:EF:5B:A2:C2:0A:B6:EB
X509v3 Authority Key Identifier:
keyid:03:28:14:EA:86:9B:F4:29:35:FB:E6:77:48:5F:FA:E9:87:04:62:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AygU6oab9Ck1--Z3SF_66YcEYjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/xh3E7jcMCQfNKjyBkO9bosIKtus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.184.0/22
IPv6:
2a0e:7180::/29
Signature Algorithm: sha256WithRSAEncryption
5a:0b:73:7c:93:26:c7:ee:e3:16:64:aa:4e:80:5a:d6:f4:b2:
58:1b:47:90:92:33:ce:5d:86:75:f9:2a:c4:76:30:16:40:54:
29:66:a9:13:9c:65:ff:fc:98:5a:b5:13:40:a2:b7:97:ed:1c:
48:df:63:34:10:8e:4f:7f:05:74:4c:e8:e6:f4:65:cc:35:47:
d0:f1:d0:1c:d4:31:01:1e:55:3e:b3:cd:71:3e:3a:b2:ed:7c:
cf:12:40:08:f0:27:18:51:02:6b:9a:d0:fa:6b:d7:cf:36:65:
8a:6b:11:9c:21:36:24:ac:35:20:c3:be:cc:5c:aa:24:70:da:
34:48:47:e3:30:3b:67:ce:ab:ae:5a:14:3f:53:28:22:18:ca:
3a:9d:45:b2:09:13:fb:b3:e5:f8:ac:d9:c0:d3:96:e8:80:24:
17:c8:48:5d:2b:ee:01:e8:28:fb:8b:43:39:b0:0c:2b:c6:00:
a0:76:99:e5:31:49:ff:f5:2b:97:45:46:c6:a3:6b:c7:7a:e1:
b0:c4:aa:d5:fe:b4:a8:b2:21:6e:5c:a9:1e:5b:45:fc:75:b8:
c9:07:a1:15:4b:14:77:7e:99:1c:23:5e:4d:53:2f:3a:3b:af:
0e:16:fd:a5:a5:fa:cd:80:d4:b2:cb:91:cc:55:98:0d:0e:05:
9b:08:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:45 2025 by rpki-client