Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/08JwSe6HIQulqUlcMBx7J4TORoA.roa
File: 08JwSe6HIQulqUlcMBx7J4TORoA.roa (raw, json)
Hash identifier: Kp+tLZnyRB0et6kLbyu0ACvkgJmfKCQLXUTDL+kzeVc=
Subject key identifier: D3:C2:70:49:EE:87:21:0B:A5:A9:49:5C:30:1C:7B:27:84:CE:46:80
Certificate issuer: /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial: 016BD8A2
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/08JwSe6HIQulqUlcMBx7J4TORoA.roa
Signing time: Mon 31 Jan 2022 12:21:10 +0000
ROA not before: Mon 31 Jan 2022 12:21:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.88.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23845026 (0x16bd8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Validity
Not Before: Jan 31 12:21:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3c27049ee87210ba5a9495c301c7b2784ce4680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:7e:18:fc:b2:fa:b7:3e:37:7e:5b:23:05:
a6:c6:5f:dd:69:16:70:ce:4f:f0:d8:58:35:7d:3d:
3b:6a:2c:c7:5c:8c:fe:69:28:d1:8f:26:ea:24:f9:
8a:c5:ab:30:c2:40:0b:a4:14:df:63:b9:a6:cd:75:
b0:b3:bb:d0:6d:d9:7f:76:33:69:ec:78:7c:e3:10:
8e:e0:c3:b7:fc:ba:37:34:83:6b:f0:b7:27:cf:d8:
ea:45:bb:a7:60:b9:75:67:22:71:09:06:d2:d8:42:
c7:7d:9d:b7:a1:f1:a5:a1:22:cd:0c:fb:e4:92:92:
77:38:ee:1a:e5:8d:cc:8c:2c:34:52:a2:d5:fb:eb:
01:b7:16:9a:42:9c:ad:84:e8:67:40:4e:b5:86:14:
f3:e7:b2:f6:8b:9e:c0:a1:08:5a:c3:c1:23:22:ad:
84:9a:5d:fd:16:68:1c:3a:d3:75:6b:8b:1e:bd:29:
e6:43:b1:c5:98:0f:a0:89:0b:3e:8e:c9:93:73:65:
43:85:d2:83:57:74:fc:9b:90:b4:c1:0f:3f:2c:45:
a5:9f:72:6f:58:f3:69:e1:3e:97:6a:e3:ab:11:a2:
26:f6:72:42:d2:db:a8:6e:bc:7d:ac:58:33:13:e0:
27:bb:26:8e:d2:3b:9b:a1:9f:fa:98:ab:9c:94:53:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:70:49:EE:87:21:0B:A5:A9:49:5C:30:1C:7B:27:84:CE:46:80
X509v3 Authority Key Identifier:
keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/08JwSe6HIQulqUlcMBx7J4TORoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/23
Signature Algorithm: sha256WithRSAEncryption
23:21:8f:66:b3:de:bc:a1:50:ec:ba:98:ae:1b:0d:fc:61:fb:
29:11:fd:48:f0:34:f5:6d:ee:ac:8d:10:f8:39:02:43:f5:ee:
97:6b:93:f5:11:a5:01:13:5b:5d:dc:3a:d4:ca:6a:55:cc:12:
f9:6e:bd:38:ee:5c:ff:ad:4a:b6:50:8c:35:39:9e:3c:e3:fc:
de:47:37:f5:8e:2a:9e:fa:ff:d2:b4:fd:d5:b7:17:50:96:43:
6d:ee:2c:a2:d5:e5:3b:ec:99:e4:92:fa:85:32:e6:25:1b:98:
77:30:a6:6c:0b:ab:8e:7a:18:f8:50:54:f6:d8:07:01:74:f9:
22:fa:2e:5b:8d:6c:e0:14:08:72:c9:71:6e:f6:0b:81:9a:0d:
b6:e4:a5:90:92:2c:8b:7d:77:72:51:98:7e:39:56:d7:fc:d7:
c3:ff:ca:76:11:fc:e5:64:4e:c9:8b:6c:80:1d:e3:62:83:a3:
02:5b:40:ce:6d:31:dd:40:67:8f:b7:69:d1:15:b1:87:ab:e0:
83:78:7f:9b:9a:44:85:fb:f1:71:ed:17:a7:04:c2:3e:d6:9f:
56:cf:80:ad:d9:00:36:ec:61:13:76:2a:0f:2c:76:71:97:56:
d3:86:b1:6c:98:77:53:6c:16:2f:1d:7c:97:f7:57:05:7e:84:
ff:e8:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:54 2025 by rpki-client