Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/arVsKQtvARdmMxhllkFN3PhHa-4.roa
File: arVsKQtvARdmMxhllkFN3PhHa-4.roa (raw, json)
Hash identifier: q/i3nf6XtFS8S8uSAPqHt7QCIUWa7/+ku78suvULp9s=
Subject key identifier: 6A:B5:6C:29:0B:6F:01:17:66:33:18:65:96:41:4D:DC:F8:47:6B:EE
Certificate issuer: /CN=62f450b8274238294e3f9e56d025907f1022e7a4
Certificate serial: 068719A2
Authority key identifier: 62:F4:50:B8:27:42:38:29:4E:3F:9E:56:D0:25:90:7F:10:22:E7:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvRQuCdCOClOP55W0CWQfxAi56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/arVsKQtvARdmMxhllkFN3PhHa-4.roa
Signing time: Sat 01 Jan 2022 04:53:02 +0000
ROA not before: Sat 01 Jan 2022 04:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50903
IP address blocks: 45.148.156.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109517218 (0x68719a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f450b8274238294e3f9e56d025907f1022e7a4
Validity
Not Before: Jan 1 04:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ab56c290b6f01176633186596414ddcf8476bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:ed:52:00:4d:27:3b:b5:c1:9b:ab:97:cf:
6f:3a:c0:9f:8e:20:58:42:2d:f3:b3:d3:a1:f7:8b:
74:21:e9:76:c7:b8:5f:80:4a:0b:11:ec:0f:b1:4d:
11:4f:86:b0:3a:47:ac:8d:52:4f:63:90:87:b0:6b:
9b:f4:b6:57:37:c4:fd:90:b8:6b:aa:f2:20:7b:7f:
b0:2e:1a:08:9a:f7:a9:64:45:72:37:e5:fd:d8:f4:
6f:36:16:e8:49:b0:66:e0:d1:07:09:cc:9c:fb:29:
0f:94:4a:8b:87:9e:b6:f7:fc:fd:5c:01:f3:f6:7d:
6c:a4:04:8c:e3:8d:15:40:12:31:2f:bd:ed:1c:f2:
a7:9c:ec:00:03:1e:c7:f9:43:b3:be:cd:95:7f:4b:
f5:79:ab:bd:fb:77:db:56:69:c9:2b:06:c8:6c:31:
fc:76:bc:4e:2c:b0:52:98:6f:d3:86:49:b5:c4:61:
21:79:8e:32:9e:08:2b:8a:bc:45:ac:b1:ef:18:4e:
38:b3:1f:fc:38:96:8d:53:29:37:0e:97:b3:23:30:
0c:19:0e:1c:ca:84:69:fe:73:97:85:57:5a:07:40:
f2:ce:92:05:85:35:9a:dd:cd:c7:9f:e1:d5:c4:bd:
26:8b:21:73:31:ef:d9:28:33:d5:1b:83:0b:15:2f:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B5:6C:29:0B:6F:01:17:66:33:18:65:96:41:4D:DC:F8:47:6B:EE
X509v3 Authority Key Identifier:
keyid:62:F4:50:B8:27:42:38:29:4E:3F:9E:56:D0:25:90:7F:10:22:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvRQuCdCOClOP55W0CWQfxAi56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/arVsKQtvARdmMxhllkFN3PhHa-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/YvRQuCdCOClOP55W0CWQfxAi56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.156.0/22
Signature Algorithm: sha256WithRSAEncryption
50:da:b9:42:cf:5f:c0:19:98:3f:89:7d:cd:41:b3:0c:aa:89:
33:cd:53:98:60:3e:b5:0b:de:24:56:c1:f2:71:e5:8d:e4:2b:
c8:28:98:04:65:1c:92:b0:f9:49:37:1f:e9:fb:e0:12:7c:ab:
94:47:db:0d:df:b3:a2:03:02:92:4a:15:09:2e:07:aa:35:58:
89:e5:67:42:d3:c5:33:ba:63:84:6b:c1:32:fb:32:5f:db:e5:
33:ae:3c:9c:74:86:01:c8:d1:58:7b:3e:86:16:38:a0:9d:a8:
07:7d:0a:1f:6a:61:e0:90:2c:90:b2:da:e9:dc:96:ba:d5:ca:
fa:be:5e:bd:35:82:19:1c:e5:23:3c:2d:62:65:66:30:ec:26:
e8:66:e9:35:72:23:a2:30:35:72:9b:94:14:63:5c:81:a8:67:
ec:f8:89:a3:ad:52:6b:70:f5:56:3d:1f:66:cf:b3:49:8c:0a:
94:20:03:4c:a9:51:8a:3a:9a:ea:00:89:63:f1:38:42:e2:0f:
94:d6:4a:13:97:84:a1:65:b3:85:f7:a2:ef:bb:2e:17:65:2a:
b5:8e:94:dc:f5:58:e1:67:ae:06:ce:90:ab:3c:72:c5:1a:15:
4c:6f:5f:5a:13:90:55:9d:a8:7a:c6:f7:4d:dc:ee:91:5d:3d:
1e:17:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:59 2025 by rpki-client