Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/tf4kaS2iUUkVzKPJPMUuW56vkUY.roa
File: tf4kaS2iUUkVzKPJPMUuW56vkUY.roa (raw, json)
Hash identifier: 8hGkLUx8fxr+mtc92MNgR/siQJnhfZj1LcZQtuLrSHM=
Subject key identifier: B5:FE:24:69:2D:A2:51:49:15:CC:A3:C9:3C:C5:2E:5B:9E:AF:91:46
Certificate issuer: /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial: 02AAF78A
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/tf4kaS2iUUkVzKPJPMUuW56vkUY.roa
Signing time: Wed 22 Jun 2022 06:59:44 +0000
ROA not before: Wed 22 Jun 2022 06:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 45.88.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44758922 (0x2aaf78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Validity
Not Before: Jun 22 06:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5fe24692da2514915cca3c93cc52e5b9eaf9146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:46:3d:d7:e6:22:7f:50:54:40:98:07:34:
25:b2:56:44:a5:aa:c3:b3:36:7e:55:ab:b0:6b:a3:
97:16:5e:18:4b:08:93:19:61:15:d0:d2:8f:d8:10:
b9:cd:25:13:bc:b6:b6:b0:51:17:bd:6e:09:b6:55:
e8:1b:d1:5d:75:e7:58:da:76:c0:71:36:c7:b3:82:
cb:a4:17:f2:be:50:76:d8:49:b6:e5:3e:80:cb:2c:
a1:57:88:e2:cc:2f:fa:c9:35:8d:a3:cc:fb:a3:db:
9f:20:34:0c:11:78:52:1a:f2:dd:c3:b8:33:4c:0e:
af:79:3f:f2:aa:26:77:39:57:14:53:36:7e:90:81:
7d:0f:0d:a3:00:23:45:54:7b:24:76:5c:62:7c:c3:
5c:8a:73:88:bf:a2:d5:9f:b3:78:c0:7a:44:f1:c3:
df:bb:76:9a:7d:f0:87:20:1f:40:ae:0b:b6:74:82:
12:09:e0:d9:11:ac:c4:15:ed:af:5b:33:0d:6b:c3:
1a:3b:74:7e:96:83:db:a6:29:72:f2:77:b7:5e:1b:
3e:54:b4:14:8a:45:c9:3f:3b:56:45:31:83:8f:17:
a3:c3:97:af:6d:42:30:24:a9:53:58:37:ad:80:04:
ee:62:7c:9d:0b:65:e3:cd:0f:43:a5:9c:4e:cd:c3:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:24:69:2D:A2:51:49:15:CC:A3:C9:3C:C5:2E:5B:9E:AF:91:46
X509v3 Authority Key Identifier:
keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/tf4kaS2iUUkVzKPJPMUuW56vkUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8c:0a:3f:6e:44:48:40:5d:8f:ef:01:48:1e:ab:2b:df:7a:
ad:53:9a:46:9e:14:96:35:72:c0:ce:44:e2:c6:8d:75:be:05:
8e:5f:5f:98:c8:c5:5b:38:ea:88:39:59:5d:0a:a6:49:28:59:
45:dc:0c:92:68:c9:52:d2:0d:68:2b:e9:16:d3:ff:50:e0:69:
75:51:ea:41:2f:30:a4:26:b8:a3:68:47:ad:b4:45:f0:4e:e9:
43:6c:b5:5e:e8:66:c1:6b:b7:c0:c7:79:2c:d1:dd:25:81:21:
05:b1:0f:95:3f:84:60:6f:e2:dd:79:59:9d:99:5a:1c:f7:98:
56:1d:6f:2b:e5:d7:c2:61:22:e3:7e:d9:37:42:cd:93:e6:b6:
d7:44:09:f5:d9:3c:1c:20:ed:81:c4:35:b1:2f:87:a6:14:99:
15:54:e5:ce:74:c4:6e:6e:ee:72:3f:02:d0:e6:11:fa:80:e1:
08:f9:db:c2:47:d9:3d:dc:64:b9:f0:c5:22:42:e2:d2:c3:28:
d6:f4:e4:05:29:e6:3a:8a:2b:c7:77:e9:17:d5:5c:34:df:7f:
dc:95:23:c7:5f:11:78:a9:b9:43:7f:3d:87:c1:ef:b4:2a:bc:
ba:85:72:3c:12:07:3b:4a:15:c2:f0:52:e5:54:3e:57:b0:ae:
4b:46:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:51 2025 by rpki-client