Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/K9biA_wX1kiXwgN-1MctpBkK5CY.roa
File: K9biA_wX1kiXwgN-1MctpBkK5CY.roa (raw, json)
Hash identifier: iJc8VF3d0aNAwOUScqHrP+2tLNnu5Zx3uI2BMPp6/TA=
Subject key identifier: 2B:D6:E2:03:FC:17:D6:48:97:C2:03:7E:D4:C7:2D:A4:19:0A:E4:26
Certificate issuer: /CN=69c35e008c86055a671d4e065cc30be63e35395e
Certificate serial: 03D9A264
Authority key identifier: 69:C3:5E:00:8C:86:05:5A:67:1D:4E:06:5C:C3:0B:E6:3E:35:39:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acNeAIyGBVpnHU4GXMML5j41OV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/K9biA_wX1kiXwgN-1MctpBkK5CY.roa
Signing time: Sat 01 Jan 2022 05:53:04 +0000
ROA not before: Sat 01 Jan 2022 05:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49569
IP address blocks: 45.138.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64594532 (0x3d9a264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c35e008c86055a671d4e065cc30be63e35395e
Validity
Not Before: Jan 1 05:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bd6e203fc17d64897c2037ed4c72da4190ae426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:2e:04:f1:3e:0a:6e:e0:d7:9b:83:5a:ba:
2e:1a:40:56:af:bd:9c:80:ad:67:be:e1:8c:0d:6c:
a2:9f:44:b4:15:e3:b7:ca:ef:db:01:7f:bb:13:ce:
05:08:80:6a:bf:7d:c6:42:f5:7e:1b:87:a4:69:cb:
02:ed:53:e7:45:69:e7:63:a5:03:af:9f:87:f6:72:
b8:fe:43:89:92:e0:8d:ae:9f:42:3b:ae:4c:08:42:
34:7b:28:14:61:dd:21:2f:29:4b:7d:c9:bb:17:55:
5d:65:50:ce:d0:81:4a:2c:9c:98:41:90:2e:da:18:
d3:ac:76:d9:f4:35:67:dd:3d:02:08:52:7d:b6:cb:
5d:f0:bf:bc:4c:88:58:86:09:02:35:f0:5a:83:0f:
6a:35:0f:5a:62:7a:3c:2b:48:06:e8:ab:df:c6:44:
2c:81:7f:55:53:dc:2f:a8:47:33:c0:98:55:79:6d:
92:47:40:16:36:98:e1:63:4a:93:20:e0:28:43:21:
4d:04:67:34:93:97:bf:73:21:4a:a4:f4:dd:84:b4:
99:14:a4:b1:e9:98:9b:a4:24:49:5c:11:18:ca:5e:
a9:7b:4d:00:e7:a4:a2:99:89:48:62:87:35:5c:d4:
7d:a9:28:1c:8c:e7:3d:ee:38:80:df:ad:37:8d:a8:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:E2:03:FC:17:D6:48:97:C2:03:7E:D4:C7:2D:A4:19:0A:E4:26
X509v3 Authority Key Identifier:
keyid:69:C3:5E:00:8C:86:05:5A:67:1D:4E:06:5C:C3:0B:E6:3E:35:39:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acNeAIyGBVpnHU4GXMML5j41OV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/K9biA_wX1kiXwgN-1MctpBkK5CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/acNeAIyGBVpnHU4GXMML5j41OV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:94:d3:11:1b:f8:c3:7c:75:3f:e2:78:e7:76:ec:ca:c9:70:
52:3c:d7:a4:26:9b:58:94:85:d5:71:fe:f3:cb:57:30:2c:a0:
b2:9f:2f:48:d7:ee:0c:59:42:93:c5:48:d1:6c:5e:f5:70:7b:
1f:62:30:3f:07:83:eb:c9:76:e3:2d:bd:0f:02:3e:56:f7:6d:
91:12:c3:f8:94:e1:ed:9c:6d:2e:09:53:20:27:b5:f7:03:d8:
a4:83:58:e8:f0:5a:30:0c:bc:e5:90:14:3f:14:55:9d:b9:0e:
06:7c:7b:d2:5b:d1:bd:ac:21:38:51:8e:e7:58:93:87:ac:6a:
5d:2d:f4:2e:fc:0a:1b:74:72:df:a2:4d:b5:78:af:59:bf:06:
26:6c:15:3c:f3:b1:68:e9:dc:91:b9:c0:2c:d0:62:4e:3c:e4:
d3:62:71:14:af:51:92:1b:7b:af:66:77:d1:b6:c5:59:15:e4:
71:cc:05:58:57:90:ac:ca:17:a0:d2:71:47:3b:87:16:30:c1:
d2:fa:06:ad:a4:e3:93:62:eb:a5:c7:60:f5:c9:9b:90:8c:00:
80:4f:f2:17:33:c7:b0:ca:7c:a3:8d:25:23:e0:68:82:34:3e:
a8:77:3f:c9:36:81:b1:02:cb:0e:66:40:59:e4:06:eb:0a:04:
9f:f4:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:43:09 2025 by rpki-client