Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/7OkT1YGYJcpjOKpoD8lfCGnxUME.roa
File: 7OkT1YGYJcpjOKpoD8lfCGnxUME.roa (raw, json)
Hash identifier: TPraR9fheSDOxofpKrpZjL7Hp6BqOXz4+9AX4+06FWA=
Subject key identifier: EC:E9:13:D5:81:98:25:CA:63:38:AA:68:0F:C9:5F:08:69:F1:50:C1
Certificate issuer: /CN=70b622850371fc91cc7eec4fdaa13516be01e356
Certificate serial: 083D8569
Authority key identifier: 70:B6:22:85:03:71:FC:91:CC:7E:EC:4F:DA:A1:35:16:BE:01:E3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLYihQNx_JHMfuxP2qE1Fr4B41Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/7OkT1YGYJcpjOKpoD8lfCGnxUME.roa
Signing time: Sat 01 Jan 2022 05:53:49 +0000
ROA not before: Sat 01 Jan 2022 05:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201178
IP address blocks: 45.84.220.0/24 maxlen: 24
45.84.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138249577 (0x83d8569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b622850371fc91cc7eec4fdaa13516be01e356
Validity
Not Before: Jan 1 05:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece913d5819825ca6338aa680fc95f0869f150c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:b5:c4:b2:6d:65:66:e4:1f:87:26:4c:b0:
8f:aa:70:88:ff:cd:1b:1a:57:36:b4:5a:2d:78:cf:
3b:08:51:5d:7a:99:f9:73:fe:0c:32:6a:bb:98:be:
0e:ac:1d:b5:8c:5e:7b:5e:a2:46:1e:13:8e:1c:83:
71:8f:0b:44:41:c1:cd:3d:96:56:d9:64:9b:95:b1:
84:68:3b:47:8f:d7:77:9c:fe:c1:eb:cd:0f:79:cc:
7a:03:68:79:ef:c7:7d:bb:bf:6f:c8:0b:63:ae:ce:
22:f3:61:62:cd:e0:22:fe:b3:77:30:ef:c3:3a:4a:
52:0a:97:db:cc:8a:05:c7:79:93:c4:1b:0a:3f:1f:
f6:d9:f1:78:36:3a:a8:49:a4:e3:0a:fe:34:35:d3:
03:8b:21:f7:d3:b5:63:7e:78:4d:fb:bb:19:7e:da:
97:66:36:bb:b6:cd:bd:ee:3c:09:f3:dc:69:74:5d:
c6:ee:d9:eb:36:9e:1e:85:53:33:48:0c:f3:d0:4b:
f5:f7:82:a4:1f:bf:8d:39:34:ba:07:a6:68:63:a7:
6d:46:da:37:ee:45:2a:9b:8c:d9:35:e3:58:9e:f1:
64:b7:0a:47:d0:9e:b9:ca:42:2f:39:93:dc:03:fd:
61:5c:f2:d2:14:8c:f7:5a:66:87:eb:1a:b9:df:04:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:13:D5:81:98:25:CA:63:38:AA:68:0F:C9:5F:08:69:F1:50:C1
X509v3 Authority Key Identifier:
keyid:70:B6:22:85:03:71:FC:91:CC:7E:EC:4F:DA:A1:35:16:BE:01:E3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLYihQNx_JHMfuxP2qE1Fr4B41Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/7OkT1YGYJcpjOKpoD8lfCGnxUME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/114b0f-6220-4030-b170-1658f081fd4f/1/cLYihQNx_JHMfuxP2qE1Fr4B41Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.220.0/23
Signature Algorithm: sha256WithRSAEncryption
89:9c:84:1f:b7:c6:f4:87:4f:fb:56:5c:4c:6b:55:04:9c:6e:
fe:0c:9e:7c:7e:22:37:53:33:cc:ad:ec:b3:b2:c4:a8:37:ae:
48:29:eb:08:b2:c0:79:59:f2:a7:d2:af:ea:00:60:74:d3:0b:
68:23:74:4e:ee:5c:22:f3:51:cf:97:07:65:ee:8f:9e:0b:62:
bb:89:3c:ea:93:2f:c0:ef:de:db:00:72:22:6e:e7:c5:72:58:
29:b9:45:33:a8:28:e1:d1:1c:4f:77:60:0d:a4:05:8f:7e:a6:
8e:d7:19:d6:88:74:22:66:4b:ae:c0:fe:e1:b8:e7:01:49:d1:
b8:dc:30:58:59:9f:1c:68:cf:09:1e:d5:6d:6b:c1:f9:c1:ee:
ca:81:ba:8d:72:18:ae:1c:d4:55:a3:d3:2a:1a:e5:47:3a:df:
02:71:a7:66:14:82:ba:6a:41:b6:44:a9:25:48:ef:7b:e8:e8:
03:f8:d9:df:03:bb:02:a7:c0:b9:44:c3:d0:08:24:a8:54:02:
8a:2a:33:cc:81:42:bd:d1:40:ed:d8:f6:21:1d:73:5b:20:d8:
0b:e5:ff:a5:18:5c:a9:e6:1d:7f:ff:37:a9:c5:49:1b:a1:6f:
a9:cf:3f:41:47:95:68:8b:07:de:b9:40:3b:fb:fc:ea:09:82:
20:1d:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:21:29 2025 by rpki-client