Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5bc62d-0982-4067-8ceb-71da460035c9/1/3nyi0bKtWiCqS9RdXlNyfoGu1OM.roa
File: 3nyi0bKtWiCqS9RdXlNyfoGu1OM.roa (raw, json)
Hash identifier: 0EGdO5EjHB9/HUnAP9njIi5/11+suML+SPTGJERPWwU=
Subject key identifier: DE:7C:A2:D1:B2:AD:5A:20:AA:4B:D4:5D:5E:53:72:7E:81:AE:D4:E3
Certificate issuer: /CN=6aa70f5f95b25866ecb7a5a7dc54885f38e3dcd6
Certificate serial: 078E79BD
Authority key identifier: 6A:A7:0F:5F:95:B2:58:66:EC:B7:A5:A7:DC:54:88:5F:38:E3:DC:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqcPX5WyWGbst6Wn3FSIXzjj3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5bc62d-0982-4067-8ceb-71da460035c9/1/3nyi0bKtWiCqS9RdXlNyfoGu1OM.roa
Signing time: Sat 01 Jan 2022 00:56:27 +0000
ROA not before: Sat 01 Jan 2022 00:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 45.148.72.0/24 maxlen: 24
45.148.75.0/24 maxlen: 24
45.148.74.0/24 maxlen: 24
45.148.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126777789 (0x78e79bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa70f5f95b25866ecb7a5a7dc54885f38e3dcd6
Validity
Not Before: Jan 1 00:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de7ca2d1b2ad5a20aa4bd45d5e53727e81aed4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:05:0b:a7:cd:e4:12:8a:c3:33:73:96:69:
34:4d:2d:0a:5a:fa:6e:b1:c8:19:0a:04:6c:94:80:
51:ee:9e:07:53:5b:4c:01:fa:af:b8:de:3c:c8:43:
b6:e6:24:b1:0c:8b:96:1d:26:92:54:4f:d4:1f:22:
59:54:a2:2e:91:15:14:2b:72:e1:34:89:f0:f8:6b:
aa:3c:3f:83:41:bb:dd:f9:0a:0e:72:1d:6d:9f:82:
df:7c:c3:fe:5d:20:41:25:0a:b1:2f:10:c7:3c:14:
3f:c0:f1:0e:c3:6c:f5:89:6c:e4:3c:40:fc:3b:c9:
41:5a:53:cc:5e:48:68:9a:3c:b1:d5:d3:74:8e:ba:
29:d5:80:93:67:82:bb:bb:4f:6d:a5:7a:ed:d9:d1:
64:b2:d2:f5:31:41:d2:55:62:76:d5:c1:d8:c6:59:
a9:ba:28:84:86:26:26:1f:1f:c9:88:c0:48:69:71:
9f:5e:d6:27:99:36:a7:6a:b4:e7:78:93:d0:2d:ed:
80:c9:0e:0c:db:7f:5e:00:20:dd:56:9b:01:4d:20:
3b:09:b6:a0:ac:f1:bf:78:45:d9:f7:cf:58:ed:f6:
d3:a7:48:d9:47:21:5c:b3:d8:24:7c:86:c9:52:23:
15:e1:d2:d5:bb:04:30:46:df:87:0b:9f:c8:ab:4b:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:A2:D1:B2:AD:5A:20:AA:4B:D4:5D:5E:53:72:7E:81:AE:D4:E3
X509v3 Authority Key Identifier:
keyid:6A:A7:0F:5F:95:B2:58:66:EC:B7:A5:A7:DC:54:88:5F:38:E3:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqcPX5WyWGbst6Wn3FSIXzjj3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5bc62d-0982-4067-8ceb-71da460035c9/1/3nyi0bKtWiCqS9RdXlNyfoGu1OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5bc62d-0982-4067-8ceb-71da460035c9/1/aqcPX5WyWGbst6Wn3FSIXzjj3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.72.0/22
Signature Algorithm: sha256WithRSAEncryption
f0:30:ed:ef:9a:65:51:68:11:63:fe:88:8f:bd:fa:5e:fc:51:
66:0c:45:b2:46:a1:e5:0c:4a:68:23:83:99:d0:3a:bb:98:d1:
9a:06:1a:97:ca:f1:9b:85:80:b4:9b:6a:e8:65:7e:f5:f8:cf:
7c:db:3d:75:61:8a:f2:e4:67:35:6c:63:33:68:cb:37:1d:f3:
3b:b2:b2:0c:fd:d0:da:bd:89:a6:f2:c6:64:05:5d:96:4a:76:
da:fd:65:da:7f:9b:d9:c0:c1:16:28:8b:63:47:c0:6a:02:84:
79:0e:95:dd:9b:9d:c7:46:f0:77:95:ab:5f:ec:46:f5:9a:81:
28:35:f4:4c:36:ae:36:4f:b4:fc:16:04:03:74:c0:09:1e:8a:
9c:15:64:3d:aa:fa:a9:69:58:77:af:ec:22:0b:36:a4:29:39:
8e:f4:17:50:d8:31:96:af:11:c3:1f:c0:3c:9b:ab:f3:91:3b:
2e:c0:e8:3b:f8:73:dc:91:7f:72:c8:f5:ac:66:90:4b:35:3e:
2b:23:d6:b2:b3:70:fb:f6:9a:8c:50:d6:ea:e7:ff:f5:ed:b0:
ac:2d:c4:ce:42:fd:15:71:88:d2:e5:8d:e2:7e:ba:4d:53:c2:
13:5c:d1:ee:21:31:4b:9c:59:9a:ac:68:4b:dd:98:d4:2d:24:
de:4b:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:53:51 2025 by rpki-client