Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/b3yxyIOh8e7UfDMJP3zbEkWJe_g.roa
File: b3yxyIOh8e7UfDMJP3zbEkWJe_g.roa (raw, json)
Hash identifier: Ymo6E2Ei8+uxy5BgODRlMq1EqVT+5MGYRduTGfiBZrk=
Subject key identifier: 6F:7C:B1:C8:83:A1:F1:EE:D4:7C:33:09:3F:7C:DB:12:45:89:7B:F8
Certificate issuer: /CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Certificate serial: 0117C111
Authority key identifier: 55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/b3yxyIOh8e7UfDMJP3zbEkWJe_g.roa
Signing time: Sat 01 Jan 2022 06:59:14 +0000
ROA not before: Sat 01 Jan 2022 06:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.82.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18333969 (0x117c111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Validity
Not Before: Jan 1 06:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f7cb1c883a1f1eed47c33093f7cdb1245897bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:e0:5b:31:a5:d1:f9:76:0e:c5:3b:56:18:
2c:b8:18:b7:a2:6f:83:4d:1e:73:b8:88:c7:fb:13:
6b:54:f6:b4:f1:ac:18:f0:9f:4b:0c:26:2e:ad:9c:
d0:53:9c:9d:bb:7c:5b:b0:5c:c4:e7:f8:c4:00:3f:
ed:82:dc:90:34:67:36:c2:6b:c1:74:22:7c:dc:6e:
d2:0f:e6:de:35:9e:7e:60:6b:eb:1a:36:01:9e:bb:
2b:75:21:67:32:38:3b:6e:10:e0:99:65:b5:01:e5:
b8:21:f3:c0:4c:b8:38:47:54:ea:cb:d8:aa:8b:53:
f1:5c:fb:22:4f:cd:3d:1f:30:15:6e:e2:a8:d6:b4:
05:fa:58:3b:bc:1b:f6:cb:60:72:1e:41:f0:dd:1c:
00:01:0a:57:bd:d8:e7:9a:b8:78:a5:5a:03:72:53:
fe:76:22:92:7a:d2:6e:7f:a1:55:87:80:9a:ca:c8:
78:34:34:c4:8e:ca:5a:d8:e6:57:1c:06:ea:bb:c3:
83:40:12:ce:24:9c:5c:4c:a6:cc:a6:fa:0b:7a:53:
b5:2e:46:bc:49:b2:ab:5f:d6:ae:e8:b8:10:f2:7d:
87:19:25:4d:34:2e:58:93:19:68:5d:71:5c:b6:5a:
d0:a6:0a:ca:7e:1d:8e:ec:80:dd:33:6b:ec:b3:ec:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:B1:C8:83:A1:F1:EE:D4:7C:33:09:3F:7C:DB:12:45:89:7B:F8
X509v3 Authority Key Identifier:
keyid:55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/b3yxyIOh8e7UfDMJP3zbEkWJe_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:93:ef:94:f2:fe:b4:46:4b:3e:8e:2c:a6:09:ae:4c:ea:f1:
0a:a4:c1:29:0c:08:b8:8f:59:db:e3:c1:d9:10:4e:c6:ee:a5:
6e:e9:c8:f9:67:9e:10:d2:c3:2c:8e:24:a0:8f:f6:cf:93:ec:
18:49:c9:d7:00:f8:40:08:33:ba:ee:d2:3b:8f:78:f5:fa:b6:
95:8f:ec:00:15:b7:70:e8:3e:6d:e8:78:be:14:b5:20:c9:3e:
b7:61:de:d2:8c:30:9a:43:0f:83:ff:28:68:d3:6c:97:8d:9f:
6f:10:c7:c0:fa:11:11:5c:45:e7:4d:df:cc:d0:f3:93:9f:e5:
ad:b7:c3:6f:f0:8b:fa:f0:34:16:b1:96:55:33:a5:6f:92:8e:
0c:a1:3b:80:d4:8a:a5:16:51:4a:50:50:c4:e0:fe:0e:82:9d:
98:0e:8f:fa:a1:ca:73:f2:a6:3c:f9:c6:8b:9f:bb:38:25:18:
54:85:b6:93:e1:f4:ac:5a:dd:35:21:0b:ea:12:c4:10:12:9a:
b2:8f:6c:50:bf:29:48:46:19:9d:4d:91:00:cf:23:86:cb:96:
a0:9f:be:a6:e7:9f:6d:de:c9:bf:72:52:bb:75:21:e1:db:c8:
39:1f:c1:43:71:58:b1:e9:0f:21:06:0e:8a:7b:7d:b1:fd:a2:
84:3a:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:36 2025 by rpki-client