Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/adPRzTj-91qe6dCfwpRqEelLMT8.roa
File: adPRzTj-91qe6dCfwpRqEelLMT8.roa (raw, json)
Hash identifier: 87HQIiQLgkkmMFMDWJAsvemOcE5MmdTvPw5dF3cS7No=
Subject key identifier: 69:D3:D1:CD:38:FE:F7:5A:9E:E9:D0:9F:C2:94:6A:11:E9:4B:31:3F
Certificate issuer: /CN=f8f393fc2725d2460b6a2b981746d476340be06d
Certificate serial: 075A9CAD
Authority key identifier: F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/adPRzTj-91qe6dCfwpRqEelLMT8.roa
Signing time: Sat 01 Jan 2022 01:03:23 +0000
ROA not before: Sat 01 Jan 2022 01:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.94.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123378861 (0x75a9cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f393fc2725d2460b6a2b981746d476340be06d
Validity
Not Before: Jan 1 01:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69d3d1cd38fef75a9ee9d09fc2946a11e94b313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:4d:10:ca:7c:64:50:7b:a8:76:92:99:77:
45:78:46:2f:6d:f6:70:fa:77:3e:bc:dc:9d:15:50:
a5:a4:b5:3e:b3:4b:ba:5b:ff:77:cb:93:92:e8:4f:
dc:0c:7c:57:cb:5d:11:c6:73:dd:96:20:a6:b7:f0:
b2:bf:27:5d:b1:95:56:42:2a:a1:70:aa:ce:10:9d:
65:8d:30:37:54:d1:e8:bb:a6:9d:3f:31:68:75:4e:
e9:8b:4a:b6:fc:89:0c:7f:ff:ee:cc:08:21:bf:56:
59:59:43:2a:fd:77:1d:f4:32:f7:c0:0b:e5:06:be:
5d:40:b4:fc:71:d5:f7:b1:fd:bd:9a:93:7f:4f:9e:
42:7d:b8:2c:b3:6e:73:e9:e4:07:27:9c:ef:e3:2b:
07:09:f9:55:16:ed:eb:ac:aa:85:a0:f1:8a:5e:ea:
bf:79:6b:b5:8c:a7:38:02:2b:3b:39:eb:a1:7f:7c:
ad:9f:50:c5:24:b9:bd:6c:dd:d2:6a:cc:46:3e:58:
16:72:e4:45:d9:76:b0:55:9f:69:90:29:c5:05:20:
fe:91:3d:8c:f7:d9:50:5a:ad:49:de:60:83:7d:24:
14:31:40:7b:a0:93:8f:49:a5:36:e2:0d:9d:f4:df:
3e:65:3f:9a:51:c1:02:10:6a:1a:9d:3b:e2:61:38:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:D1:CD:38:FE:F7:5A:9E:E9:D0:9F:C2:94:6A:11:E9:4B:31:3F
X509v3 Authority Key Identifier:
keyid:F8:F3:93:FC:27:25:D2:46:0B:6A:2B:98:17:46:D4:76:34:0B:E0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/adPRzTj-91qe6dCfwpRqEelLMT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/2d168b-7fcc-45fb-aa3e-b6adfd604855/1/1-POT_Ccl0kYLaiuYF0bUdjQL4G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.112.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e4:c3:b4:30:ff:6d:99:d8:ad:d7:61:ff:6c:eb:15:61:c9:
b5:4b:42:42:94:a9:3e:15:72:23:d9:33:2c:fb:2f:41:35:07:
2b:23:0d:d7:45:98:5a:f8:22:e4:9c:b3:45:86:ea:5a:50:5c:
3d:df:a1:7f:87:61:68:9a:43:f8:2a:82:94:85:75:5b:4c:83:
9d:f2:a3:f1:03:3d:b2:45:ea:9c:37:50:87:ad:73:cd:14:6c:
e3:9b:5e:cf:e0:8d:be:99:65:5f:47:2c:0a:39:fc:a9:03:9f:
49:75:f0:2a:68:13:c3:6e:26:d2:53:01:fe:67:80:f4:4c:3a:
21:2a:9b:55:99:80:14:fd:57:28:05:94:4c:03:53:84:25:21:
fa:80:29:39:79:87:01:b1:97:39:6c:99:d2:cb:cd:34:3f:0d:
68:0c:02:7c:6b:35:ab:fd:80:5e:2d:7d:ca:14:b2:eb:bb:d8:
3b:e7:fa:dc:ca:a6:5a:5e:2c:21:b7:b9:33:69:c2:be:90:bc:
a5:ae:d4:92:05:89:04:f5:ab:23:71:42:9a:d4:4d:86:df:29:
d5:d9:91:b6:e1:fd:c9:5d:33:0b:e1:c4:15:59:79:c9:d5:39:
06:09:5a:21:90:c2:66:37:db:d5:4e:72:26:3f:b3:ff:6b:0d:
f3:82:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:44 2025 by rpki-client