Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/Ha4iqiemRVs4K0apcX26aGgxEQM.roa
File: Ha4iqiemRVs4K0apcX26aGgxEQM.roa (raw, json)
Hash identifier: Y9w0WT6CR9hlG1wNToGxOj1Wt0I5gYiZH++6mqrNiy0=
Subject key identifier: 1D:AE:22:AA:27:A6:45:5B:38:2B:46:A9:71:7D:BA:68:68:31:11:03
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 019425FC17A0BA8F2460E6D4FD6C3613C7CC
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/Ha4iqiemRVs4K0apcX26aGgxEQM.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62229
IP address blocks: 45.157.244.0/22 maxlen: 24
178.22.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:17:a0:ba:8f:24:60:e6:d4:fd:6c:36:13:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dae22aa27a6455b382b46a9717dba6868311103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:24:11:30:a7:61:b8:91:a7:c6:4d:60:f0:
79:a4:e0:56:e3:a7:01:88:ea:72:21:ac:16:69:5d:
5a:7f:12:ea:fb:70:10:e7:b7:2b:42:02:3c:62:40:
1f:97:c1:3b:e4:36:fd:0a:e5:95:03:ff:70:17:4d:
77:2c:2f:48:74:c4:b0:2a:2a:3a:d8:e1:9a:e8:55:
b4:5e:00:70:54:19:c7:15:e1:61:e2:e3:a5:79:19:
ec:0a:e0:89:16:12:b1:da:45:a6:5f:29:0c:5f:2e:
d4:30:c3:95:6a:b8:a8:48:48:d5:15:98:88:30:96:
8d:e2:d7:16:19:08:52:38:c0:db:13:cf:9e:3e:ac:
6a:d7:7e:ec:79:f7:af:42:9d:cc:12:a3:6e:27:2b:
7a:0b:0b:c3:9f:4d:2e:e2:74:c9:1f:33:7c:a1:7e:
da:b2:b2:2c:47:df:09:af:be:0f:4d:49:9a:92:8d:
42:bd:cd:2d:67:68:33:1d:b3:62:5a:63:a6:3d:f5:
ee:2e:56:50:4f:5f:db:b6:5a:df:de:ee:90:03:42:
67:c9:87:91:9e:20:a5:97:57:a3:14:81:c5:46:f9:
3c:7d:d1:3d:2c:cc:af:7e:2d:b1:fe:80:ea:c8:15:
b1:9d:5d:88:d4:87:18:b3:7d:7b:b8:93:36:b4:ef:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:22:AA:27:A6:45:5B:38:2B:46:A9:71:7D:BA:68:68:31:11:03
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/Ha4iqiemRVs4K0apcX26aGgxEQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0/22
178.22.72.0/21
Signature Algorithm: sha256WithRSAEncryption
48:5f:5b:50:0c:7b:16:61:48:0d:28:4d:42:16:f7:70:b9:41:
0f:c5:17:c5:4a:0d:ff:03:59:ec:88:fd:80:b8:e9:ed:c9:0c:
f7:9c:32:e2:51:72:52:73:f6:cd:62:d7:f0:6f:f7:48:b6:b6:
eb:63:ef:5d:1b:31:8f:80:e1:44:5f:e7:f7:65:2c:be:06:8f:
83:b1:5a:60:82:89:eb:1c:28:61:97:6a:0f:18:9d:c8:dc:3d:
85:80:4f:de:48:2a:d0:1c:90:c1:52:e7:2e:fe:66:b4:00:bb:
1d:b4:47:f2:a3:be:03:ce:a9:b0:b5:e1:28:cb:83:86:1b:79:
21:9b:5f:ec:60:30:bf:f7:b1:bc:51:e1:3d:9d:60:79:f8:8d:
c4:22:2e:cf:3e:67:51:c3:79:7c:fe:f7:f5:51:8e:bd:93:f3:
dc:d1:d9:1e:9f:d5:47:92:02:2f:14:2d:83:f7:22:f2:30:a2:
21:32:f0:fa:76:a5:72:61:ae:45:af:49:fa:01:9c:01:60:62:
a8:64:13:48:1f:32:c3:09:ea:29:b5:8f:cb:92:91:74:5c:f2:
40:70:70:a7:dc:d6:9a:10:8d:f9:55:e9:a6:1b:0d:18:af:26:
06:ea:91:a7:52:59:2d:63:71:fa:79:02:9b:7f:26:31:14:47:
58:81:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:24:06 2025 by rpki-client