Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/LjUbAof9ebdvEG8OPCdtGzo58Lw.roa
File: LjUbAof9ebdvEG8OPCdtGzo58Lw.roa (raw, json)
Hash identifier: JlP0NjKaMdvQOSgvOYgRDa/JWSoDLBCCQ5BPVx9m5Oo=
Subject key identifier: 2E:35:1B:02:87:FD:79:B7:6F:10:6F:0E:3C:27:6D:1B:3A:39:F0:BC
Certificate issuer: /CN=f28d10ff00e7a463efc7fba7cd4d4446fe6ad678
Certificate serial: B04186
Authority key identifier: F2:8D:10:FF:00:E7:A4:63:EF:C7:FB:A7:CD:4D:44:46:FE:6A:D6:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o0Q_wDnpGPvx_unzU1ERv5q1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/LjUbAof9ebdvEG8OPCdtGzo58Lw.roa
Signing time: Sat 01 Jan 2022 06:53:55 +0000
ROA not before: Sat 01 Jan 2022 06:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48133
IP address blocks: 45.146.244.0/22 maxlen: 22
94.228.80.0/20 maxlen: 20
2a03:f040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11551110 (0xb04186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28d10ff00e7a463efc7fba7cd4d4446fe6ad678
Validity
Not Before: Jan 1 06:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e351b0287fd79b76f106f0e3c276d1b3a39f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:0a:f6:1e:d8:4b:78:10:da:49:ed:59:ca:
2a:01:33:5f:64:89:cd:4f:cf:24:28:35:dc:50:4a:
72:19:d7:75:8d:6d:eb:59:df:0f:ec:c5:b9:d9:7b:
c1:f5:e4:99:10:12:a2:01:f2:c0:78:3e:20:99:26:
96:32:f7:6e:d4:e8:5b:2f:1b:e0:e4:1c:e7:b3:a3:
11:92:a4:8f:99:c8:0a:28:b2:9c:a4:94:71:11:f0:
de:d9:a5:26:8f:01:cd:05:ee:23:3e:63:4a:dc:f3:
63:f1:a5:62:ed:0d:6f:06:f0:f1:d7:f7:47:7b:3c:
8f:a4:a2:e2:b3:68:13:59:71:2f:92:93:da:41:0a:
5b:d0:b6:84:e4:8a:4a:8e:e9:0b:1c:fe:d1:19:2c:
50:0f:59:a3:ac:29:4d:64:e2:0b:51:15:05:f9:00:
19:9e:c2:37:65:35:21:9b:68:9d:95:dd:65:27:e0:
85:b6:cc:4e:43:ae:0e:6e:2f:8d:17:94:9c:e4:b1:
5a:d7:56:35:61:53:82:61:d6:c7:97:03:39:d5:ed:
a5:47:f2:5c:6e:b8:45:d9:65:69:48:ab:24:7b:95:
4b:6a:fb:ef:1f:34:e6:f2:d1:d6:04:1e:50:5d:d7:
31:59:44:a4:75:44:6a:0a:65:19:c3:9c:95:e4:6c:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:35:1B:02:87:FD:79:B7:6F:10:6F:0E:3C:27:6D:1B:3A:39:F0:BC
X509v3 Authority Key Identifier:
keyid:F2:8D:10:FF:00:E7:A4:63:EF:C7:FB:A7:CD:4D:44:46:FE:6A:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o0Q_wDnpGPvx_unzU1ERv5q1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/LjUbAof9ebdvEG8OPCdtGzo58Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f5d671-adee-4e78-ae22-9b38607f4e3e/1/8o0Q_wDnpGPvx_unzU1ERv5q1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.244.0/22
94.228.80.0/20
IPv6:
2a03:f040::/32
Signature Algorithm: sha256WithRSAEncryption
43:88:5c:d4:42:48:a9:05:b8:93:93:19:e3:6a:b0:dc:16:98:
34:84:2d:26:6b:fa:ac:ce:ba:c2:ae:4a:05:f8:91:8b:c4:3f:
63:ff:e0:99:d0:4e:c5:ff:6a:6a:a1:a9:40:c8:e3:41:0c:bc:
9a:ef:54:55:d4:89:43:e2:b2:e4:33:7f:96:4e:e4:e0:2b:68:
e0:53:3a:d7:88:4a:2c:3d:87:07:10:5a:d6:08:47:67:48:d5:
fe:86:43:b7:f6:16:7c:3d:8a:3f:50:62:2a:3e:36:73:50:72:
23:41:bd:7f:3c:d1:f1:57:68:07:40:ff:9c:07:a1:14:bc:06:
d4:cc:d5:3f:e1:c8:7d:45:f7:f0:79:8a:d9:df:b9:bc:a5:d1:
67:e8:ff:ee:35:6e:57:da:89:af:64:6c:00:32:56:64:ae:4b:
c5:97:b9:69:21:26:89:b5:3e:27:e8:0f:00:b4:e3:70:11:74:
96:e1:2e:9c:91:2f:98:d0:64:e0:21:3a:a3:95:a6:68:71:ea:
a3:06:aa:4c:e1:ca:37:6d:1d:43:29:91:58:3d:b1:9d:fe:e4:
d8:66:70:e8:1a:bb:4b:4a:02:dd:9c:27:43:1d:c7:c2:b7:18:
0a:cb:70:8c:64:1b:20:c2:5b:6c:66:a3:ae:82:41:87:91:aa:
0a:1d:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:55:08 2025 by rpki-client