Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/7BaWAPl1tUdH_l8fakwo6AeO9lI.roa
File: 7BaWAPl1tUdH_l8fakwo6AeO9lI.roa (raw, json)
Hash identifier: JoDL/MUfs5QWe3LB4lqvVl3J1Wke4QdFkIJVMpzp4Ws=
Subject key identifier: EC:16:96:00:F9:75:B5:47:47:FE:5F:1F:6A:4C:28:E8:07:8E:F6:52
Certificate issuer: /CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Certificate serial: 07756D53
Authority key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/7BaWAPl1tUdH_l8fakwo6AeO9lI.roa
Signing time: Sat 01 Jan 2022 01:59:03 +0000
ROA not before: Sat 01 Jan 2022 01:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 45.88.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125136211 (0x7756d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Validity
Not Before: Jan 1 01:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec169600f975b54747fe5f1f6a4c28e8078ef652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5d:af:5e:ce:82:f5:d8:ad:6f:c3:e5:71:92:
23:4c:09:38:fd:e9:b2:c2:18:8a:38:8b:33:a8:8e:
40:5a:6e:89:94:73:d4:e0:c4:b7:17:b5:cc:74:8f:
99:06:95:ae:f8:d8:40:ef:0a:0f:e2:32:ec:13:ef:
6a:44:c9:1c:a8:55:bc:b2:bf:27:f9:82:5b:4c:19:
32:6e:a0:71:d6:bf:74:2c:99:d4:50:82:cf:47:d1:
9d:55:e6:b7:aa:74:9c:8b:6d:c6:95:43:3d:b5:c5:
72:da:34:55:ad:53:94:c0:5a:44:9a:f9:eb:a2:9d:
a8:ae:bc:1a:c6:8f:4b:c4:43:19:1c:71:30:25:6e:
56:21:bf:2c:42:0d:39:00:ff:25:af:17:ad:a0:b2:
12:a3:6a:27:ae:1d:cd:6d:97:c4:23:2a:1c:f6:6e:
73:dd:3c:ff:bb:aa:c9:48:e3:c9:ac:98:ef:16:a7:
83:53:50:40:2b:de:50:02:73:af:65:27:2d:16:e2:
2a:54:a6:e1:b3:57:c7:61:76:7f:04:31:21:72:24:
24:3f:f4:b2:62:b1:c7:fb:3a:73:6c:6b:6c:48:55:
25:23:d0:22:93:38:66:c2:bd:19:c8:2e:44:22:bf:
96:e3:f2:b3:b4:c1:e4:63:02:fd:11:0e:2e:3d:29:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:96:00:F9:75:B5:47:47:FE:5F:1F:6A:4C:28:E8:07:8E:F6:52
X509v3 Authority Key Identifier:
keyid:A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/7BaWAPl1tUdH_l8fakwo6AeO9lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b3:c1:41:14:46:49:d0:0a:d4:e6:76:25:c6:54:ac:09:45:
f4:21:89:32:e4:94:84:ec:89:02:7c:d9:e4:af:ee:0c:a9:fe:
60:49:21:72:05:7b:3f:ab:3c:7f:f5:73:78:1a:34:7b:e1:cb:
99:20:2e:47:cf:5c:f5:9c:68:b0:f2:3d:f9:4c:4a:a9:37:e1:
f6:da:39:85:96:84:af:16:c3:e8:2f:85:0f:0d:58:47:65:51:
d8:37:3f:91:94:3c:4e:bb:b6:99:7e:2d:87:bd:4b:84:2b:e3:
8d:ec:52:85:df:d2:4f:51:64:d9:eb:86:0a:13:27:8a:8a:17:
88:fd:23:f0:af:9b:d0:88:ce:d4:ac:ac:3f:78:43:5c:30:1e:
0c:5a:ce:6b:f1:ca:ae:c8:56:25:5c:d6:8b:76:be:dd:fe:31:
e9:8c:db:5e:04:5f:b0:b6:fe:96:e1:5b:8e:17:ae:1f:a4:e9:
e8:38:a5:4c:6b:4d:2d:93:c8:80:46:b3:e9:dd:29:58:e3:1f:
b8:5f:49:d0:5a:3d:a3:9b:ec:25:97:7d:21:09:8f:83:3c:10:
7c:6b:f4:12:f6:41:3d:52:74:99:44:ec:d6:98:c9:11:a8:4a:
87:f9:b5:3d:82:ec:2d:ec:ab:c0:03:8d:0b:d4:37:2d:61:da:
21:84:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:34:30 2025 by rpki-client