Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/K71Fr9O1PHBcdVd8XpGOSnScAx4.roa
File: K71Fr9O1PHBcdVd8XpGOSnScAx4.roa (raw, json)
Hash identifier: AyjtDQx0FnpQY1LDffpf/CuKKFgKhf+XwKl4fqpCPlA=
Subject key identifier: 2B:BD:45:AF:D3:B5:3C:70:5C:75:57:7C:5E:91:8E:4A:74:9C:03:1E
Certificate issuer: /CN=11ecf38b39ff3bcb56d7295ad9ef67b4e1cc4478
Certificate serial: 8CAAB5
Authority key identifier: 11:EC:F3:8B:39:FF:3B:CB:56:D7:29:5A:D9:EF:67:B4:E1:CC:44:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eezzizn_O8tW1yla2e9ntOHMRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/K71Fr9O1PHBcdVd8XpGOSnScAx4.roa
Signing time: Sat 01 Jan 2022 01:01:01 +0000
ROA not before: Sat 01 Jan 2022 01:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 45.88.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9218741 (0x8caab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ecf38b39ff3bcb56d7295ad9ef67b4e1cc4478
Validity
Not Before: Jan 1 01:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bbd45afd3b53c705c75577c5e918e4a749c031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:0b:c0:a5:5b:43:4c:4e:be:4f:e4:7a:01:
05:71:64:d1:ff:ec:69:60:99:dd:4f:a0:e2:ea:19:
5f:e9:33:d9:07:0d:02:a7:00:48:21:6b:eb:cf:29:
52:5c:e5:f6:9a:2d:0f:6f:c0:e8:2c:30:b3:f1:08:
4a:bb:cc:84:f0:6f:b1:60:d2:db:d9:cd:35:1c:07:
ef:9e:bc:20:ee:f9:a9:d1:55:a1:73:e5:87:f1:04:
61:06:13:1b:9d:14:18:e2:7b:a3:b7:4d:b4:c8:08:
d3:52:d7:f9:d9:81:a5:30:9b:0f:87:12:4d:ee:fc:
a5:ef:1f:c7:ed:72:38:8e:19:3d:4c:e7:47:5e:fe:
25:84:98:99:bd:b1:0c:36:48:c0:d6:b8:ca:54:da:
6e:ca:05:79:d0:eb:c0:6a:9c:71:81:8a:4d:31:3c:
0d:0c:1c:bb:ee:32:31:b9:f9:cd:17:fc:99:5e:e7:
05:47:34:d4:be:82:4c:90:b1:0f:c1:1d:85:fe:d4:
87:5e:83:86:b5:f7:40:d1:69:17:87:fa:45:2c:d8:
54:00:45:4f:82:03:9e:a1:c8:6d:63:fd:90:c9:8f:
4b:f5:a8:23:9b:91:45:5e:f4:56:37:3a:34:76:73:
26:b7:be:5b:14:b0:f4:db:f9:a4:f9:ad:ea:13:36:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:45:AF:D3:B5:3C:70:5C:75:57:7C:5E:91:8E:4A:74:9C:03:1E
X509v3 Authority Key Identifier:
keyid:11:EC:F3:8B:39:FF:3B:CB:56:D7:29:5A:D9:EF:67:B4:E1:CC:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eezzizn_O8tW1yla2e9ntOHMRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/K71Fr9O1PHBcdVd8XpGOSnScAx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/Eezzizn_O8tW1yla2e9ntOHMRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
94:ee:64:c3:d9:4d:8f:ad:07:71:fd:83:3b:fb:ae:52:1f:ea:
b5:c5:7f:b6:65:3d:c3:cc:7c:e5:b5:73:dd:1c:eb:f4:2c:ae:
af:de:b6:96:44:6e:01:30:b5:19:1c:45:4c:69:bc:34:2d:ab:
17:98:7f:32:64:c7:39:c5:a4:40:81:8e:c9:46:d8:a8:4b:ac:
84:eb:3a:1c:eb:05:62:6e:de:6b:ed:af:88:e1:34:aa:a0:6b:
9a:55:37:88:7f:6a:d4:98:89:ef:aa:23:77:1a:91:6d:cb:54:
54:96:bd:4d:83:64:04:4f:31:2b:40:a2:0c:aa:07:66:7a:80:
51:d9:1f:8d:83:b3:4d:09:07:d1:48:2f:37:85:46:9e:4b:c1:
05:71:b2:89:bb:61:65:f6:7f:a0:c0:9f:71:da:1a:1b:4e:f8:
d4:f1:cc:4d:39:6a:93:46:15:8e:38:e1:32:06:39:33:96:bb:
a4:79:07:e4:ce:c0:c9:cc:85:ba:76:63:e2:a3:37:c0:5e:a6:
fe:f3:26:1d:77:19:a0:16:be:9c:87:f2:9a:11:c4:f8:0c:ab:
eb:f2:77:42:18:37:e7:68:fe:bc:76:01:24:17:6e:79:c8:99:
aa:ab:c9:03:a7:de:9c:09:87:21:a7:d5:f7:61:21:cd:0b:6a:
d1:74:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:12 2025 by rpki-client