Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/A9yRjVKeXWyjqzmwXO0QBEZPFeY.roa
File: A9yRjVKeXWyjqzmwXO0QBEZPFeY.roa (raw, json)
Hash identifier: HEbXdzMK0DH4BDaJQSgnHs/RmF7/p2bo5FUkVyJDin0=
Subject key identifier: 03:DC:91:8D:52:9E:5D:6C:A3:AB:39:B0:5C:ED:10:04:46:4F:15:E6
Certificate issuer: /CN=5f42797958de5e06336106f6dd0d623be2a5eb1a
Certificate serial: 015F19
Authority key identifier: 5F:42:79:79:58:DE:5E:06:33:61:06:F6:DD:0D:62:3B:E2:A5:EB:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/A9yRjVKeXWyjqzmwXO0QBEZPFeY.roa
Signing time: Sun 17 Apr 2022 12:47:45 +0000
ROA not before: Sun 17 Apr 2022 12:47:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56630
IP address blocks: 45.141.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89881 (0x15f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f42797958de5e06336106f6dd0d623be2a5eb1a
Validity
Not Before: Apr 17 12:47:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03dc918d529e5d6ca3ab39b05ced1004464f15e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:0d:3d:aa:95:27:f6:bc:72:37:98:1a:f9:
cb:b3:49:d4:12:2d:4d:9e:28:c0:e9:81:41:02:1b:
8a:59:6f:39:d0:c1:de:35:3b:31:b1:2d:94:cc:21:
0d:9b:d5:f3:0f:f1:bd:1d:2f:98:e7:4e:71:d7:b2:
5a:4a:39:03:b0:79:43:5f:02:ad:61:a9:1e:04:4e:
c2:de:79:52:0c:6d:87:19:53:72:0f:94:09:cd:fa:
d0:c5:8b:43:d5:62:16:e2:c2:90:16:60:cf:06:70:
e9:b7:82:51:c7:db:1f:bc:45:21:bb:41:37:69:fe:
bf:25:82:ba:4a:d2:43:4b:95:44:17:b3:d9:e0:c2:
2a:88:98:ff:30:b4:cb:b2:05:79:90:13:f5:98:fc:
f7:44:2a:61:21:8f:0d:b8:04:49:92:14:fa:c3:83:
2c:2a:a2:c1:87:b5:db:fe:94:5b:a5:75:c0:3d:f1:
d7:a5:5f:86:54:0e:1f:1a:ef:ba:4c:dd:72:a4:24:
c1:4f:37:cd:79:48:21:a4:3b:03:d3:86:6b:4b:07:
46:fc:ed:86:71:a6:7c:97:67:53:75:28:4f:e6:fe:
f6:76:70:dc:d7:97:26:7e:31:e6:c3:0a:72:b8:0f:
fe:33:70:81:3c:0d:fd:c5:f0:c2:f0:7b:f5:7c:0c:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:91:8D:52:9E:5D:6C:A3:AB:39:B0:5C:ED:10:04:46:4F:15:E6
X509v3 Authority Key Identifier:
keyid:5F:42:79:79:58:DE:5E:06:33:61:06:F6:DD:0D:62:3B:E2:A5:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/A9yRjVKeXWyjqzmwXO0QBEZPFeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.8.0/22
Signature Algorithm: sha256WithRSAEncryption
17:48:fe:b1:57:a8:57:72:67:b7:7d:58:9d:a5:a2:b7:01:ff:
bd:5d:f4:2f:c2:b5:32:e1:b8:4a:6b:86:a1:47:8d:11:11:da:
bf:39:2e:f4:91:6b:c5:e3:0e:4d:cf:9f:80:3a:c9:69:8b:3e:
21:28:c6:07:f2:5e:88:a3:67:63:a2:0c:b2:bf:c3:ea:94:a1:
a9:bf:75:c2:3e:46:83:8b:3b:49:60:2a:4b:07:3d:12:db:15:
bb:06:ea:55:b3:f3:03:29:1e:57:dc:c9:f9:3a:03:d5:30:38:
bb:05:84:03:22:aa:aa:08:a7:22:5d:62:e9:54:ef:4b:40:52:
4f:6c:d7:34:b8:4d:e6:a8:67:f1:16:b8:c5:fd:03:e3:e5:d4:
7a:62:8d:a2:f4:e6:fc:31:0b:6e:21:1e:34:49:7b:e5:22:0c:
0a:df:42:42:1d:75:8a:31:40:7b:22:44:91:d2:44:f6:a7:b7:
b5:04:fd:55:0b:17:7a:7f:e2:0d:04:21:64:03:7c:ee:12:e3:
25:3e:73:3d:5d:ba:70:29:4e:ea:05:14:12:16:ed:25:d3:b8:
c8:71:5e:35:79:eb:61:ae:7f:20:cd:bd:aa:dd:14:fd:59:e3:
1c:82:cd:3d:1f:d0:3a:65:24:c7:6f:87:22:20:85:43:d8:06:
4d:72:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:10 2025 by rpki-client