Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/aHNmwcyYNrls16_o22HBMhQdzUo.roa
File: aHNmwcyYNrls16_o22HBMhQdzUo.roa (raw, json)
Hash identifier: 2Qn3OZBk3tyQbW2G/Fe5f1xh0pEew5MgYXqNL8ISI+4=
Subject key identifier: 68:73:66:C1:CC:98:36:B9:6C:D7:AF:E8:DB:61:C1:32:14:1D:CD:4A
Certificate issuer: /CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Certificate serial: 01856FE6F9878C39B5B503798FA8FD7BEC10
Authority key identifier: 55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/aHNmwcyYNrls16_o22HBMhQdzUo.roa
Signing time: Mon 02 Jan 2023 00:34:46 +0000
ROA not before: Mon 02 Jan 2023 00:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 45.82.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:f9:87:8c:39:b5:b5:03:79:8f:a8:fd:7b:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Validity
Not Before: Jan 2 00:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=687366c1cc9836b96cd7afe8db61c132141dcd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:9c:14:d5:f7:3a:4a:3b:c5:c0:7d:fb:65:
b6:8b:cb:1a:d9:67:8b:d6:c7:58:c1:c2:5d:a7:52:
aa:ad:fe:33:b1:58:53:d5:a2:7e:70:2e:2e:32:ca:
e3:78:bb:a7:99:83:38:7b:47:32:e3:7d:21:f0:10:
07:d4:d4:12:03:3e:6c:39:21:45:34:75:d3:0a:2c:
e0:32:67:37:5c:9e:a7:e7:4d:f0:67:d8:01:66:37:
5b:bc:07:40:f4:3f:25:d2:d0:76:9b:76:b7:f4:bd:
7e:8e:c1:6c:21:39:15:1e:36:ff:78:be:3c:60:65:
01:c1:b0:a0:4a:6b:ca:ff:53:f3:76:85:1a:83:d2:
3a:63:e1:75:cf:87:ca:d0:d6:13:ae:78:35:84:57:
8a:24:18:69:99:af:42:2d:62:3d:2e:2a:03:ab:33:
1d:33:74:d9:31:bc:53:58:8b:0f:b2:a9:bc:2f:0c:
18:ca:32:24:c1:82:7f:4a:34:04:cf:c8:5a:cf:42:
55:c8:4e:5d:ba:20:71:69:a3:92:7e:8c:c0:43:0f:
02:ae:6c:1d:7f:05:ba:07:09:61:53:0d:48:4c:28:
6c:13:7d:d3:c9:c6:da:ea:19:58:73:eb:ad:24:50:
53:64:0d:ff:b3:92:25:e4:68:a5:19:c9:5c:8d:14:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:73:66:C1:CC:98:36:B9:6C:D7:AF:E8:DB:61:C1:32:14:1D:CD:4A
X509v3 Authority Key Identifier:
keyid:55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/aHNmwcyYNrls16_o22HBMhQdzUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:a3:ab:ac:36:71:94:4c:b0:74:90:e8:a4:da:88:c4:31:bd:
2d:56:a7:2e:49:3b:77:3a:e7:71:bf:5c:8d:44:e8:6a:13:89:
1f:e0:ca:6d:95:24:ec:23:34:a5:81:85:39:41:ce:fd:a2:31:
d0:a4:27:94:c6:81:37:35:26:5d:de:36:b6:a4:0f:8a:c5:68:
79:8f:d0:a2:fe:a4:bc:a0:44:9e:ac:ec:9d:67:b4:39:e2:ab:
3f:3e:d7:76:0b:df:80:55:ec:9a:ce:eb:d2:3b:94:eb:9f:93:
4f:d4:13:47:f0:c6:ae:37:94:cc:98:59:09:f6:c2:d9:f4:21:
03:d8:b2:29:ec:50:e2:a1:14:46:7b:71:eb:3b:1d:4d:a5:d2:
6a:c2:f6:01:3b:a4:50:2d:b4:3d:63:51:b4:32:5b:32:e5:6b:
bb:7c:e5:e7:de:45:53:35:55:38:a3:e9:c4:9d:d4:ea:e2:93:
ab:d6:1f:59:21:9d:99:04:d2:5a:14:f6:2f:b4:73:dd:2f:45:
82:10:99:28:50:38:da:93:8d:69:48:81:89:1d:57:b9:71:b4:
6b:54:5e:44:c0:aa:58:6f:44:36:22:bd:02:da:7f:06:8f:55:
72:d6:61:94:c8:5b:2c:f8:cf:cf:5d:16:dd:c9:2e:6f:a0:4e:
bd:dd:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:08:32 2025 by rpki-client