Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Dg9J5z2M95KNCCghDj8W7_1nXx0.roa
File: Dg9J5z2M95KNCCghDj8W7_1nXx0.roa (raw, json)
Hash identifier: s+YNkVFXH6uk7IdYEaIVb5H4wJj6/WTI1qlWSkP5fUE=
Subject key identifier: 0E:0F:49:E7:3D:8C:F7:92:8D:08:28:21:0E:3F:16:EF:FD:67:5F:1D
Certificate issuer: /CN=366de22f152d2f1333a940e1e0bbd6b4d8beac48
Certificate serial: 0486DB25
Authority key identifier: 36:6D:E2:2F:15:2D:2F:13:33:A9:40:E1:E0:BB:D6:B4:D8:BE:AC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Dg9J5z2M95KNCCghDj8W7_1nXx0.roa
Signing time: Sat 19 Feb 2022 00:11:26 +0000
ROA not before: Sat 19 Feb 2022 00:11:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.151.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75946789 (0x486db25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366de22f152d2f1333a940e1e0bbd6b4d8beac48
Validity
Not Before: Feb 19 00:11:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e0f49e73d8cf7928d0828210e3f16effd675f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:3d:50:78:4b:eb:e7:75:e6:01:87:57:f8:
c6:38:c2:95:4b:ae:58:ce:b9:9e:88:8f:e2:39:dc:
2a:69:45:d9:5c:69:50:7a:73:41:22:7e:5e:7b:b2:
be:8f:df:bf:85:e3:23:6f:80:c7:ec:29:6b:a2:a5:
68:ec:a2:c4:4a:2a:d1:54:c0:06:64:dd:b3:c3:95:
21:80:4b:3f:8f:d0:d1:65:56:13:d7:88:48:64:49:
8c:d8:9f:3f:a7:6a:3d:1c:13:80:92:56:16:0f:ed:
fd:f9:1d:4b:20:55:aa:67:88:64:23:75:03:ef:f5:
db:01:70:bf:3c:fa:51:7c:7b:d6:80:01:53:8c:19:
9f:3d:67:f4:e5:10:97:6d:3f:7a:20:48:df:67:ef:
41:29:de:32:96:69:b9:c9:b7:43:f5:01:21:f4:77:
a6:bf:e2:ac:24:b8:d8:0f:81:4e:77:01:24:c7:21:
fb:6c:4d:d3:94:ee:e4:10:36:bf:c7:3d:ef:0d:47:
ce:c6:20:d9:4a:61:ea:81:2c:7e:15:f4:0a:80:92:
4d:55:59:60:42:e9:3f:1b:c7:5d:41:46:07:26:5a:
8d:0f:20:a4:c4:48:b0:07:06:4a:dd:fd:b3:5d:82:
8f:f6:a9:e3:8b:eb:91:ff:4f:28:b5:ab:56:b5:f3:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:49:E7:3D:8C:F7:92:8D:08:28:21:0E:3F:16:EF:FD:67:5F:1D
X509v3 Authority Key Identifier:
keyid:36:6D:E2:2F:15:2D:2F:13:33:A9:40:E1:E0:BB:D6:B4:D8:BE:AC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Dg9J5z2M95KNCCghDj8W7_1nXx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e3afdd-c306-4a4d-ba4b-7b3bdf547f49/1/Nm3iLxUtLxMzqUDh4LvWtNi-rEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bb:ca:8c:1f:6a:fd:a9:d8:b4:0e:d0:51:a6:bb:5b:7f:8a:
a7:db:dd:9b:1f:b8:d8:4a:8a:e0:17:bb:f6:5d:70:9c:74:5c:
be:96:8c:86:55:4a:b9:97:2e:17:5a:3c:d4:38:62:d7:6b:ed:
5f:4d:25:50:f7:de:52:f4:cc:83:5e:5a:c2:0a:f9:13:32:c2:
5e:25:82:e3:d5:bd:33:65:e2:9a:1e:25:2e:5a:a2:fe:fd:8e:
4f:c4:0a:e4:6d:cd:af:1b:9c:85:4e:10:1e:ff:3a:7b:db:bf:
e1:da:95:49:48:3c:71:79:3b:9e:75:79:51:03:8b:50:7a:e7:
49:9c:d3:f4:77:c0:59:b4:2c:e7:ed:f3:13:db:b5:3b:4e:44:
73:b7:79:38:28:cb:5c:5d:9b:e4:73:02:84:d1:08:f7:2d:14:
bb:1c:93:c5:69:fd:c9:5d:23:14:fd:73:93:e8:b5:c4:e7:53:
ac:30:a8:22:c0:09:3a:53:69:55:b7:e4:11:b1:2c:21:3f:4b:
1e:e3:43:5f:ad:89:99:c4:56:3c:48:cc:3f:c2:2c:c1:12:b7:
e3:89:4e:d9:c1:da:89:de:af:b1:a9:38:be:47:1b:8b:04:75:
1c:f4:02:1c:40:e4:14:e9:1d:72:2a:36:96:24:10:a3:64:7a:
48:d8:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:45 2025 by rpki-client