Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/SIsdmPZqrpqISHt9NepUktbvV1w.roa
File: SIsdmPZqrpqISHt9NepUktbvV1w.roa (raw, json)
Hash identifier: 5M8SUo147ahJnvoHPFYX0q8UF7phpX4B/NuDGsjI4xo=
Subject key identifier: 48:8B:1D:98:F6:6A:AE:9A:88:48:7B:7D:35:EA:54:92:D6:EF:57:5C
Certificate issuer: /CN=be9319b196531a79f832dddd5873129e38c3e4ee
Certificate serial: 01C1AEDF
Authority key identifier: BE:93:19:B1:96:53:1A:79:F8:32:DD:DD:58:73:12:9E:38:C3:E4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpMZsZZTGnn4Mt3dWHMSnjjD5O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/SIsdmPZqrpqISHt9NepUktbvV1w.roa
Signing time: Sat 01 Jan 2022 07:52:42 +0000
ROA not before: Sat 01 Jan 2022 07:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57752
IP address blocks: 45.89.152.0/22 maxlen: 22
45.91.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29470431 (0x1c1aedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9319b196531a79f832dddd5873129e38c3e4ee
Validity
Not Before: Jan 1 07:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=488b1d98f66aae9a88487b7d35ea5492d6ef575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:22:27:b4:ab:a0:01:89:70:79:64:86:b1:
56:3d:de:d5:44:d0:3f:95:cf:d8:1c:90:00:f1:e8:
c3:89:7d:7e:9a:cd:3b:6f:97:3b:c6:d4:15:af:db:
67:04:97:9c:e0:7a:8d:d4:e2:c1:70:0d:a5:2a:b5:
18:d9:90:44:18:7a:ad:c0:85:01:07:99:02:0a:ea:
ff:7b:f3:ef:c9:c6:2d:89:f8:13:1b:0c:c4:28:a3:
4c:7b:88:49:47:00:9d:c1:5f:1e:43:82:63:bf:9e:
7d:fb:9d:7f:f1:25:cf:3c:90:b7:e5:79:c6:2e:9a:
bf:7a:93:a6:d1:ba:43:e8:9b:80:9b:d9:11:38:82:
ed:37:3d:6d:7e:9e:9d:61:17:d3:b6:53:9d:0d:1a:
b9:2a:d1:dd:6f:ff:86:82:87:d3:6b:b7:10:67:7a:
b8:9d:be:e7:74:fa:99:22:66:ed:5b:71:b4:69:20:
ec:6d:51:fb:2b:09:90:aa:b4:a4:41:04:95:33:97:
34:e4:6b:01:a8:91:f4:95:9b:2c:20:99:b0:f6:2b:
c0:9c:f9:04:b6:e0:01:58:42:d3:6b:58:21:d1:c1:
ed:e9:e7:11:d1:a7:62:2c:1f:df:31:f9:72:2e:60:
13:94:ba:1f:ac:7b:b2:08:06:1f:f2:b7:74:12:16:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:1D:98:F6:6A:AE:9A:88:48:7B:7D:35:EA:54:92:D6:EF:57:5C
X509v3 Authority Key Identifier:
keyid:BE:93:19:B1:96:53:1A:79:F8:32:DD:DD:58:73:12:9E:38:C3:E4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpMZsZZTGnn4Mt3dWHMSnjjD5O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/SIsdmPZqrpqISHt9NepUktbvV1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/vpMZsZZTGnn4Mt3dWHMSnjjD5O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.152.0/22
45.91.144.0/22
Signature Algorithm: sha256WithRSAEncryption
24:6d:40:11:5d:5e:49:60:ea:37:b9:ca:81:75:97:7b:03:68:
eb:a0:42:4d:0a:1a:f3:77:09:69:53:c6:ca:41:3a:23:26:cc:
03:09:18:26:03:67:ed:40:8e:64:75:46:f6:ec:b6:36:fa:dd:
1a:8d:4e:44:c9:dc:36:34:45:40:d4:a4:66:01:2a:1b:a5:a5:
85:03:91:fb:2a:ad:69:a4:5f:b9:d6:18:db:76:a5:38:1d:a9:
23:d2:fd:40:de:2a:10:54:71:97:97:2e:69:f9:46:e7:20:57:
67:9a:33:8a:ad:80:00:c4:94:ce:ed:c6:d7:4a:1f:4f:aa:54:
e8:3c:c0:6e:90:d8:f9:19:d2:ed:53:81:38:6e:e2:cc:d9:28:
a5:2b:45:ae:59:5c:06:3b:bd:bf:ee:37:1a:c1:bb:43:93:46:
9f:18:ff:08:dd:b0:42:35:47:f7:5c:a6:6f:85:1f:7c:89:1f:
9f:3e:24:bd:6f:62:66:47:d7:01:73:c0:b0:98:51:e5:09:1d:
12:78:4a:a7:0c:86:c8:50:59:2c:6b:af:a5:4d:6a:67:27:d5:
c1:6a:3f:4a:3e:58:17:62:e7:66:4a:6e:e8:86:38:39:0b:ca:
21:10:f5:22:bb:00:48:73:fb:50:93:d5:d8:56:3c:00:75:c7:
3c:03:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:59:42 2025 by rpki-client