Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/6Yc9-8LGSHq1AL2TsiCVMb1HS6A.roa
File: 6Yc9-8LGSHq1AL2TsiCVMb1HS6A.roa (raw, json)
Hash identifier: Zahwyv+BXzMoLwblTwfJ/QbEllIatKdmFSKoD9KHNdY=
Subject key identifier: E9:87:3D:FB:C2:C6:48:7A:B5:00:BD:93:B2:20:95:31:BD:47:4B:A0
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 0184C9D48BF36DDC8F6BECAE69EF7C102FA5
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/6Yc9-8LGSHq1AL2TsiCVMb1HS6A.roa
Signing time: Wed 30 Nov 2022 18:37:40 +0000
ROA not before: Wed 30 Nov 2022 18:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201211
IP address blocks: 45.133.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:d4:8b:f3:6d:dc:8f:6b:ec:ae:69:ef:7c:10:2f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Nov 30 18:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9873dfbc2c6487ab500bd93b2209531bd474ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:dc:3c:97:f8:3c:5d:38:ca:53:17:d4:d4:
d9:0b:d2:b4:43:ba:49:fe:43:ac:4c:6e:46:b1:7d:
58:81:9f:b5:3b:82:15:0e:6d:e3:cf:0c:0e:7c:45:
63:54:36:6a:ae:58:6f:fc:00:0a:68:9d:dd:63:bc:
81:e3:5e:12:65:c2:90:5f:93:5a:d2:62:71:5b:a3:
d2:34:b6:f1:a9:d2:89:bc:ff:73:f1:64:f4:99:23:
3f:1c:70:ba:cc:70:5d:06:c3:7b:c4:88:1f:a2:0e:
38:85:e2:89:77:34:b3:f6:81:1a:ea:f9:41:3b:38:
bc:6d:91:3c:de:a7:10:79:b8:a1:ac:d3:f2:47:44:
26:03:6d:27:66:b1:64:ad:b1:55:86:62:53:27:26:
dc:d3:fa:c5:16:0f:46:92:34:ea:2f:28:70:7d:e6:
80:b5:6c:7a:ca:57:98:45:b9:cd:69:55:59:24:d6:
65:56:0d:71:e2:51:84:c6:99:ba:d9:d2:a8:3c:7c:
c4:bf:32:1f:06:55:41:e6:52:e7:9a:c6:d8:e1:12:
ae:f6:28:28:92:48:89:d5:d2:2a:6c:6e:1b:0e:08:
ca:d9:01:60:97:b7:a4:40:0d:b7:f8:3b:22:e4:8f:
8d:74:27:bf:79:f5:71:bd:e1:19:05:8b:97:46:29:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:3D:FB:C2:C6:48:7A:B5:00:BD:93:B2:20:95:31:BD:47:4B:A0
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/6Yc9-8LGSHq1AL2TsiCVMb1HS6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:97:9d:40:47:94:13:d0:62:5d:51:89:d2:e9:a7:8e:bb:b4:
2f:fe:b0:63:2f:25:9b:1e:2c:13:c8:c4:f2:15:b9:e1:a1:62:
3a:bd:62:d2:d2:3b:57:1a:41:ba:0e:d8:29:a9:cb:c8:e1:79:
eb:63:5c:99:c3:4e:07:11:95:7b:19:bb:0b:4f:3f:23:f6:08:
6c:d6:e7:a9:9f:76:ea:6c:cc:7b:e3:37:11:01:bf:8a:68:59:
75:ff:09:db:4a:b1:b9:6d:99:a3:ed:68:1f:ee:41:dd:22:52:
f7:13:a0:85:50:e7:6e:96:ff:ee:e7:4d:97:22:1e:40:f0:fb:
52:24:96:77:31:bd:2f:f3:95:5f:fc:15:f6:32:f4:81:a2:e1:
d0:81:5a:6f:62:99:77:bb:dc:42:09:fe:e0:08:ce:29:9c:e0:
f6:8a:39:f1:dd:7d:1f:27:fe:fd:d5:87:79:1f:c7:a5:d8:e1:
e9:85:b0:3f:ff:85:07:24:a9:c2:eb:02:ac:c0:6e:7d:f7:43:
74:4f:a9:c7:80:f9:b9:a0:3c:d8:0e:e1:01:08:4b:94:64:64:
5d:60:c4:7d:30:fc:57:20:4b:af:a2:b1:26:da:54:67:bd:84:
f1:c4:28:4c:8f:7e:c9:ac:44:e0:84:45:de:82:0f:b1:99:cc:
5d:70:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:15:51 2025 by rpki-client