Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/aqnmwpbzzqt_7D4TqIs2aoUqMts.roa
File: aqnmwpbzzqt_7D4TqIs2aoUqMts.roa (raw, json)
Hash identifier: 5N8KX0tK5szLAuPUTWMxSmJd62xEkJULEptGyqSwa+o=
Subject key identifier: 6A:A9:E6:C2:96:F3:CE:AB:7F:EC:3E:13:A8:8B:36:6A:85:2A:32:DB
Certificate issuer: /CN=8e2c935e3b5b7a5d017a7839c1662c7d7fed75ef
Certificate serial: 053F4523
Authority key identifier: 8E:2C:93:5E:3B:5B:7A:5D:01:7A:78:39:C1:66:2C:7D:7F:ED:75:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jiyTXjtbel0Beng5wWYsfX_tde8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/aqnmwpbzzqt_7D4TqIs2aoUqMts.roa
Signing time: Sat 01 Jan 2022 09:02:22 +0000
ROA not before: Sat 01 Jan 2022 09:02:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39650
IP address blocks: 45.94.213.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88032547 (0x53f4523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c935e3b5b7a5d017a7839c1662c7d7fed75ef
Validity
Not Before: Jan 1 09:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aa9e6c296f3ceab7fec3e13a88b366a852a32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:e9:7c:85:68:2a:6c:a8:db:3a:de:f5:42:
6b:3f:c9:3a:47:d5:d4:5a:f6:1d:37:59:b0:bb:ad:
ab:eb:a2:3a:ce:73:66:f6:18:61:3f:da:8a:e1:3e:
e2:2a:51:56:37:3a:24:bb:c5:8b:9e:1a:c3:f0:5a:
15:f1:cc:5c:f5:3a:63:da:2e:1d:6e:7b:23:9c:c0:
cd:fe:ae:9c:5f:0b:29:a4:0e:80:e5:0e:41:bb:23:
f2:e0:7e:d5:fb:55:00:56:b7:5b:05:69:35:28:77:
34:dc:68:38:b3:0d:6b:b5:50:e8:b7:4a:01:58:88:
a0:ee:4e:32:ec:56:a9:81:87:61:0f:c4:5e:da:b0:
01:20:bc:23:37:42:31:d5:dd:fb:25:d7:f3:aa:ef:
0c:27:9b:77:91:de:87:3b:6f:47:c6:0d:45:b6:80:
b7:d0:aa:cf:5b:aa:17:3d:72:11:76:a8:ba:4d:d9:
14:76:0d:85:02:2b:49:23:77:13:3a:f6:49:23:f1:
2f:59:8c:97:1d:44:d5:89:b8:dc:ec:36:76:34:26:
94:3d:e2:8c:f6:47:a1:74:3e:54:14:52:14:cc:45:
d7:3c:90:e8:eb:55:75:cc:5b:5c:03:ce:08:8d:01:
19:6f:55:4f:a0:88:bb:48:ea:6a:e5:6e:0a:41:d6:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A9:E6:C2:96:F3:CE:AB:7F:EC:3E:13:A8:8B:36:6A:85:2A:32:DB
X509v3 Authority Key Identifier:
keyid:8E:2C:93:5E:3B:5B:7A:5D:01:7A:78:39:C1:66:2C:7D:7F:ED:75:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jiyTXjtbel0Beng5wWYsfX_tde8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/aqnmwpbzzqt_7D4TqIs2aoUqMts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/36e4c8-e5ab-4b59-a366-63c5c1d6bf02/1/jiyTXjtbel0Beng5wWYsfX_tde8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.213.0/24
45.94.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:46:55:0b:94:d1:5a:dd:48:29:9a:29:32:74:20:e3:c3:5a:
e5:17:5d:5c:96:01:07:ed:63:b4:47:f2:0e:d7:41:3c:47:36:
f3:13:3b:f6:03:9e:43:a8:77:d5:b8:7f:63:fb:57:47:47:82:
bc:b1:90:61:56:b5:37:27:e7:2f:ac:45:2f:8a:e4:55:b2:40:
28:64:14:f5:60:4a:52:66:a1:2e:e5:1f:1e:10:a6:a3:8d:5e:
e9:08:f8:a8:29:6a:44:bd:7f:7e:ec:50:77:09:7c:3d:43:40:
9a:95:88:69:7e:e6:0e:db:5c:36:be:69:f0:27:c3:ec:74:52:
07:b8:03:7c:31:8c:e8:fd:e1:3e:df:6a:67:3c:73:ad:02:cb:
37:bf:94:ec:c5:01:f5:6b:21:3a:75:8d:40:9a:30:a7:a7:11:
1d:6e:e5:74:c9:b0:ca:de:8a:6d:2d:55:22:4d:e0:85:3e:d3:
89:63:6c:cc:d9:99:de:cf:92:db:42:c9:df:4b:39:84:93:0d:
61:e4:20:9e:37:36:f5:30:b2:32:01:2c:1a:f9:a9:f4:e7:46:
6a:ef:4f:f5:c6:33:bf:52:5c:71:31:03:39:96:dc:28:cd:1e:
f9:df:ee:af:02:57:c9:c4:08:73:23:9e:22:4d:3e:77:df:3b:
a7:5a:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:57 2025 by rpki-client