Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f39c21-bb3d-459e-8ac3-4dfabb5ec110/1/grGhrFSjCKjrqi1iuuwlNxCsmAc.roa
File: grGhrFSjCKjrqi1iuuwlNxCsmAc.roa (raw, json)
Hash identifier: GrrgHINbG39o0zQUQjA81A19BdJfl8zmccAkymnFf1I=
Subject key identifier: 82:B1:A1:AC:54:A3:08:A8:EB:AA:2D:62:BA:EC:25:37:10:AC:98:07
Certificate issuer: /CN=524e7c1e1fb31c83f177bdbb74b04c7ce8c1fa6f
Certificate serial: 07213FB7
Authority key identifier: 52:4E:7C:1E:1F:B3:1C:83:F1:77:BD:BB:74:B0:4C:7C:E8:C1:FA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk58Hh-zHIPxd727dLBMfOjB-m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f39c21-bb3d-459e-8ac3-4dfabb5ec110/1/grGhrFSjCKjrqi1iuuwlNxCsmAc.roa
Signing time: Sat 01 Jan 2022 13:05:59 +0000
ROA not before: Sat 01 Jan 2022 13:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201971
IP address blocks: 45.150.48.0/23 maxlen: 24
45.150.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119619511 (0x7213fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e7c1e1fb31c83f177bdbb74b04c7ce8c1fa6f
Validity
Not Before: Jan 1 13:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82b1a1ac54a308a8ebaa2d62baec253710ac9807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:fa:b1:39:b1:cb:31:4b:f3:19:e4:0e:be:
92:7b:33:77:a2:bb:aa:51:1c:4c:65:fc:bc:ee:e6:
b3:b6:48:e4:d1:16:8c:c2:f3:2f:0c:27:4d:f5:b1:
59:b0:95:69:49:e3:5e:7a:bc:89:31:9a:c4:3f:6c:
c9:f4:2f:79:71:fa:4f:76:d3:53:32:fa:e6:7f:c7:
31:37:f5:86:9c:32:72:ab:23:a8:49:67:73:0e:d0:
bb:b5:d4:8f:39:f0:4e:19:99:20:1b:d7:43:0a:57:
13:b9:7c:f4:e7:9c:2e:40:22:89:f9:26:2a:5d:6c:
31:f9:80:48:74:18:00:5c:34:14:b1:ee:a1:5c:03:
b1:01:62:68:2b:c9:2d:d9:a8:02:46:fa:95:f4:b8:
59:99:7c:8e:91:50:19:6c:f9:58:ff:eb:38:d1:4d:
93:8c:7c:4a:1c:2c:4a:ea:d7:04:1d:85:e4:a1:83:
00:4c:ba:d9:93:27:47:9d:ff:25:6c:1f:87:56:d2:
08:ce:9b:c9:5c:4f:e6:30:c8:a4:87:14:a6:be:a4:
07:52:a8:c2:11:a0:c7:2f:33:c4:19:ab:24:fd:33:
71:d2:38:7b:b1:88:ee:61:f9:fd:b6:48:68:c2:65:
39:ee:9f:88:32:2f:8e:b6:1e:75:21:2e:8c:cf:16:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:A1:AC:54:A3:08:A8:EB:AA:2D:62:BA:EC:25:37:10:AC:98:07
X509v3 Authority Key Identifier:
keyid:52:4E:7C:1E:1F:B3:1C:83:F1:77:BD:BB:74:B0:4C:7C:E8:C1:FA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk58Hh-zHIPxd727dLBMfOjB-m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f39c21-bb3d-459e-8ac3-4dfabb5ec110/1/grGhrFSjCKjrqi1iuuwlNxCsmAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f39c21-bb3d-459e-8ac3-4dfabb5ec110/1/Uk58Hh-zHIPxd727dLBMfOjB-m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.48.0/22
Signature Algorithm: sha256WithRSAEncryption
30:77:9e:fc:ec:38:1a:2b:f7:72:77:1d:2b:f8:7f:f0:af:3c:
2f:b2:0b:47:ed:b6:a1:16:3f:61:33:03:2d:4f:c3:90:41:58:
6c:85:81:03:ca:ad:ff:92:ac:fa:26:52:93:05:73:6c:fe:e6:
c9:fd:10:36:42:96:8f:af:b3:c9:b4:d1:c8:bc:5a:b5:ec:4d:
54:ba:6c:ad:0a:1b:c2:1f:26:24:c7:17:71:2e:6e:5f:73:5f:
b8:c4:6f:a0:54:9a:29:e8:8c:2a:a6:64:8a:70:e4:7e:ce:9e:
1f:f4:bc:cc:88:f1:c5:b1:1a:21:e9:9d:8f:36:8f:1c:c1:7a:
50:75:79:e8:01:47:4f:1a:2c:19:06:d5:d6:65:3d:f2:01:76:
c2:cc:bd:18:fd:c2:15:53:45:29:5c:89:46:d6:5d:7c:3f:1f:
ed:7f:87:34:e9:8d:88:0f:cb:c4:40:71:30:bb:07:83:3d:24:
bd:55:70:73:56:72:8a:70:6c:15:d2:34:da:66:9a:fe:da:c0:
d4:72:9c:fb:b8:d8:bc:94:14:b2:5e:fc:92:84:36:d4:12:6c:
64:57:06:12:78:a1:95:41:3e:cc:3b:02:9b:6c:f6:15:5f:e5:
de:94:f9:47:24:25:2a:78:d6:d7:7d:5d:cc:67:1c:bc:81:47:
f9:ba:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:21 2025 by rpki-client