Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa
File: Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa (raw, json)
Hash identifier: 6k0HE6GecUe5J3/+8I0JtgUy/sLbgXNfsElhF93/vvI=
Subject key identifier: 06:3D:EC:64:99:4F:78:02:DF:46:05:79:21:C0:E1:63:D9:E0:9B:B4
Certificate issuer: /CN=9c378004b2d850fe49a35559e40abf09adee402e
Certificate serial: 073E80C2
Authority key identifier: 9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa
Signing time: Sat 01 Jan 2022 12:56:33 +0000
ROA not before: Sat 01 Jan 2022 12:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 45.144.196.0/22 maxlen: 22
2a0f:d440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121536706 (0x73e80c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c378004b2d850fe49a35559e40abf09adee402e
Validity
Not Before: Jan 1 12:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=063dec64994f7802df46057921c0e163d9e09bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:36:39:0f:9f:04:37:a2:cf:e5:48:90:d2:
e5:23:75:53:e5:48:71:f7:f3:4c:89:c1:f2:38:f4:
da:c4:6b:21:c7:db:5f:7d:bc:56:ab:20:2e:b1:ac:
57:e7:59:17:3b:51:fa:32:7c:90:01:1b:f6:51:61:
b1:42:ee:3a:f8:29:93:dc:ff:2c:b6:08:92:f0:c8:
b4:14:3f:a6:b0:c9:b0:77:4e:af:93:fe:e7:4a:e8:
54:55:ed:fd:c0:10:b5:98:85:6e:b8:ca:24:6a:5c:
44:b2:4d:3e:c4:e4:17:7e:78:eb:bd:44:eb:18:06:
ed:ef:92:87:00:36:29:f5:3a:47:8f:bc:e3:58:88:
61:ab:d4:94:7a:8b:48:11:6a:39:df:53:74:32:11:
33:ea:a1:b2:6a:f5:35:7d:e8:82:ad:17:4d:23:08:
6d:a7:c2:f1:85:08:99:a7:ff:17:67:6e:96:10:5f:
10:53:a9:c9:41:fc:08:64:2d:2e:a6:0c:ca:38:07:
dd:07:27:c7:06:a0:77:d4:e1:cd:8d:2c:88:5e:a1:
9e:97:85:f0:55:6e:78:cd:82:e6:86:6d:eb:83:12:
9c:b6:6a:9e:16:16:9e:23:a9:2f:e8:03:d6:91:23:
a0:ca:d0:77:70:c3:a0:dc:90:ff:dd:7d:0b:28:8f:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:EC:64:99:4F:78:02:DF:46:05:79:21:C0:E1:63:D9:E0:9B:B4
X509v3 Authority Key Identifier:
keyid:9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/22
IPv6:
2a0f:d440::/29
Signature Algorithm: sha256WithRSAEncryption
12:b3:3b:4f:ae:e8:b0:af:a3:ac:06:66:8e:39:8b:44:6e:74:
7a:3b:da:87:e8:bd:fb:6f:fe:87:7e:c5:92:dc:a9:72:ad:f0:
3b:16:3f:a2:5e:d2:08:f6:ed:a9:64:1a:ed:1f:3f:22:c4:3c:
4d:a7:91:37:4e:07:ec:95:82:61:a6:63:3b:24:59:50:c8:e8:
01:08:4d:ce:62:c1:21:7c:24:ea:81:8d:6d:b3:5c:57:6c:ac:
a4:81:dc:3f:a2:60:d4:1a:4b:c4:d6:e1:2d:0a:db:8e:6a:47:
81:e0:ff:bb:46:6b:ec:63:42:b4:87:35:8b:d5:f4:a0:ee:67:
53:d8:34:b0:3b:a3:9c:d2:ab:51:9f:f7:10:e0:18:9a:8b:3c:
50:ad:17:79:db:e3:38:af:bd:f2:dd:5d:5d:73:ed:a6:86:a2:
77:07:06:5c:35:bc:fb:25:0c:db:b4:ac:60:c0:cb:f2:1d:c5:
c2:09:84:e5:fa:c2:56:48:d7:7b:f8:67:bd:57:e4:9b:0e:15:
87:62:1e:23:92:84:8d:96:1a:14:f1:36:50:4d:65:18:00:f1:
e7:fa:2e:d0:c6:91:ad:33:8c:0a:6d:72:86:f6:c3:54:d3:70:
a3:09:2e:de:1e:5a:62:42:04:fa:5c:1a:18:e7:bc:80:91:d9:
bf:c3:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:10 2025 by rpki-client