Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/XRCvO0gb6Q6fT_5B7HQyfBGOOu8.roa
File: XRCvO0gb6Q6fT_5B7HQyfBGOOu8.roa (raw, json)
Hash identifier: Oe0d1wdDNMVZ1FP0VOevAjVgPw+k7u6cxb/3NpVFZ2Q=
Subject key identifier: 5D:10:AF:3B:48:1B:E9:0E:9F:4F:FE:41:EC:74:32:7C:11:8E:3A:EF
Certificate issuer: /CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Certificate serial: 0822E337
Authority key identifier: 4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/XRCvO0gb6Q6fT_5B7HQyfBGOOu8.roa
Signing time: Sat 01 Jan 2022 07:00:30 +0000
ROA not before: Sat 01 Jan 2022 07:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205836
IP address blocks: 45.92.184.0/22 maxlen: 22
45.92.184.0/23 maxlen: 23
45.92.184.0/24 maxlen: 24
45.92.185.0/24 maxlen: 24
45.92.186.0/24 maxlen: 24
45.92.186.0/23 maxlen: 23
45.92.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136504119 (0x822e337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Validity
Not Before: Jan 1 07:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d10af3b481be90e9f4ffe41ec74327c118e3aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:86:a7:0d:d2:7b:4b:e2:dd:9a:b2:b1:fd:
0e:6c:ec:47:d3:06:a2:6f:f2:6c:df:19:77:ff:9f:
6b:48:0d:dd:63:f5:98:43:08:b2:df:29:6d:21:e3:
52:7d:91:3f:e9:cb:33:38:50:a8:a8:48:38:2f:a1:
87:33:dc:9d:22:24:47:26:4b:55:08:cd:10:63:2d:
5b:1a:1f:44:92:d8:e2:c2:6a:e6:69:20:8b:5b:ae:
a4:70:c7:79:e2:c9:a2:e0:5b:23:32:22:cb:5a:dc:
78:a7:e1:ef:0f:20:c5:35:0d:34:b9:61:9f:b2:99:
fb:4e:f3:c3:e6:9e:5a:49:e6:b6:1d:54:80:0c:46:
d6:d7:76:61:c6:c7:e8:69:c1:b1:a9:c0:b9:08:5a:
83:78:db:47:1f:43:bc:4d:ff:23:c1:77:83:08:29:
b4:9d:99:41:39:a9:a9:fd:a3:3d:cf:68:cc:07:fa:
bd:0e:d0:0f:9f:d6:c0:6a:82:11:3a:66:02:78:d3:
aa:03:4f:08:c4:c1:25:2d:7c:f5:c4:29:90:e3:aa:
4d:be:83:3c:f1:e1:e3:ca:71:4e:e0:69:71:41:82:
5d:ae:87:29:c6:be:86:8b:85:9d:51:75:3a:6a:46:
88:78:83:a2:f2:ea:44:88:16:3d:29:50:8d:26:95:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:AF:3B:48:1B:E9:0E:9F:4F:FE:41:EC:74:32:7C:11:8E:3A:EF
X509v3 Authority Key Identifier:
keyid:4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/XRCvO0gb6Q6fT_5B7HQyfBGOOu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:32:f1:5f:34:bc:3c:db:74:74:f2:eb:cd:99:55:2c:01:d3:
2e:19:2c:a1:63:5e:32:03:e9:56:a1:94:d9:af:5c:8c:23:c8:
67:06:53:e8:ba:4b:94:b9:5c:36:02:90:a6:76:40:98:38:4d:
47:12:83:6c:8b:00:78:b9:d7:7e:17:7a:88:0f:14:fc:f7:4e:
9a:ce:56:61:e2:6c:01:c6:c0:48:c9:af:07:6d:a5:2f:76:b0:
fc:e3:fd:27:48:d7:c2:7e:86:3f:3e:31:47:a9:68:28:d0:f3:
3a:68:43:9e:81:e9:cc:d3:ef:bc:29:03:19:e2:9b:c6:cd:60:
73:6f:37:af:9b:c5:56:7d:c3:60:51:5d:50:4b:d3:54:5d:84:
4e:05:83:49:44:01:c5:2f:d5:be:86:ef:9a:67:79:0f:ef:b6:
f6:87:f0:75:64:01:a3:de:62:1d:d1:27:d0:f5:bb:40:28:5a:
7f:4b:ac:ce:3e:24:d3:51:45:b0:15:05:bd:f5:a9:b0:a0:56:
57:13:d1:cc:eb:6c:c8:ac:f6:2b:31:2c:ec:9a:a5:68:9b:ef:
14:78:70:b2:63:42:73:27:05:6e:83:ab:a2:4d:48:38:25:cd:
bf:8a:31:28:93:ee:99:1d:73:3f:13:7c:d2:8b:6d:f5:88:f6:
16:20:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:59 2025 by rpki-client