Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/SXAe0-njcpesZABdss4vmlLoWR0.roa
File: SXAe0-njcpesZABdss4vmlLoWR0.roa (raw, json)
Hash identifier: Jl+ZfCwDhTvCApI7PWbXFczf5X7TKuRt16GwYHbZva0=
Subject key identifier: 49:70:1E:D3:E9:E3:72:97:AC:64:00:5D:B2:CE:2F:9A:52:E8:59:1D
Certificate issuer: /CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Certificate serial: 07751356
Authority key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/SXAe0-njcpesZABdss4vmlLoWR0.roa
Signing time: Sat 01 Jan 2022 01:59:02 +0000
ROA not before: Sat 01 Jan 2022 01:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.201.0/24 maxlen: 24
45.88.200.0/24 maxlen: 24
45.88.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125113174 (0x7751356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Validity
Not Before: Jan 1 01:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49701ed3e9e37297ac64005db2ce2f9a52e8591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:de:a5:1d:de:7d:36:39:7f:87:04:29:7a:
db:73:37:a2:9a:f9:7d:e3:aa:59:1a:de:49:cd:df:
73:a0:1b:5f:db:f5:d7:86:f4:4a:6b:aa:a7:00:9f:
c4:f3:c8:a4:cd:a4:38:7e:69:d5:a5:50:c1:59:e5:
0b:58:d4:f6:19:d2:bc:e9:8e:b3:f1:8c:85:aa:e4:
e2:29:00:d6:01:cd:0d:23:eb:f4:b3:e6:cc:2e:7d:
b4:be:f9:40:c1:79:1d:49:78:74:66:ed:69:01:50:
d5:cf:d2:7d:c2:32:fb:73:8a:89:da:6b:22:d4:fe:
33:70:5a:cb:96:b3:69:8d:96:54:0f:62:5d:ed:1f:
82:45:8d:5f:61:12:0f:6a:da:09:e5:66:0c:cd:21:
d9:8f:13:2e:7a:86:77:7b:cb:bb:fb:9d:2c:80:00:
4f:e8:b7:87:ab:a2:5c:32:e0:7d:0b:8c:da:53:c3:
ab:94:4f:a5:8f:32:1c:66:e4:c6:97:18:86:20:a5:
38:38:c5:4d:f3:6f:7b:41:c5:70:2a:23:74:74:6c:
5b:cd:c9:eb:30:50:74:8e:30:35:cb:69:3d:b1:27:
0b:f7:73:e3:b5:ba:1e:d3:52:82:a7:dc:0f:51:18:
d1:b3:1c:6f:a5:aa:fe:4e:ab:14:cf:a3:1e:b9:9d:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:1E:D3:E9:E3:72:97:AC:64:00:5D:B2:CE:2F:9A:52:E8:59:1D
X509v3 Authority Key Identifier:
keyid:A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/SXAe0-njcpesZABdss4vmlLoWR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0-45.88.202.255
Signature Algorithm: sha256WithRSAEncryption
4a:72:80:43:c7:21:c1:74:e6:5a:5d:40:29:b0:90:72:06:0b:
61:0f:e6:3c:d0:be:4a:4f:05:44:cc:44:50:76:78:2f:10:8f:
5c:42:8d:04:d6:4d:00:cf:e2:0a:8e:66:46:b5:cd:04:99:f0:
32:4f:b8:82:eb:30:29:ca:dd:f1:a3:bb:02:aa:b1:54:f7:d2:
fe:0d:53:ae:3a:7f:b5:3b:4a:ad:0b:e0:cd:9d:e1:00:8b:aa:
14:17:56:16:c3:fa:67:43:ed:ba:9a:cc:80:4c:28:54:7b:e7:
c4:39:5a:40:9c:39:77:ed:78:55:15:78:6b:af:13:46:af:c7:
6d:e4:3a:02:e6:3a:b2:ec:04:87:fa:57:a6:78:b1:f4:69:2f:
5c:d4:e9:8b:bb:dd:d9:a8:d8:89:9a:f1:f6:fc:62:9d:07:1a:
82:e6:ae:fa:78:a7:35:2f:d2:42:68:39:cd:06:f8:ee:89:de:
44:b4:b1:53:68:90:8e:70:35:9c:24:9c:26:ec:b8:81:ec:dd:
19:a3:e7:f6:39:12:dd:52:19:1c:cf:12:88:6d:e3:dd:e6:74:
e2:6e:80:c0:67:c0:c6:24:fc:41:40:6f:05:78:9c:d5:23:d2:
7b:7f:7d:f2:e1:31:59:aa:60:8d:03:32:63:ad:91:13:55:c1:
05:1d:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:18 2025 by rpki-client