Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/k7Xs_okQw0gAp2JLmFsATj8APMs.roa
File: k7Xs_okQw0gAp2JLmFsATj8APMs.roa (raw, json)
Hash identifier: 4FikpWr2QsQd750d+jdVgbRbgPZckSesClbESTi0Nr8=
Subject key identifier: 93:B5:EC:FE:89:10:C3:48:00:A7:62:4B:98:5B:00:4E:3F:00:3C:CB
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018341C3DFAE3AEC397E2141821BDA3E9543
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/k7Xs_okQw0gAp2JLmFsATj8APMs.roa
Signing time: Thu 15 Sep 2022 15:28:19 +0000
ROA not before: Thu 15 Sep 2022 15:28:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 45.95.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:c3:df:ae:3a:ec:39:7e:21:41:82:1b:da:3e:95:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 15 15:28:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93b5ecfe8910c34800a7624b985b004e3f003ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:df:9a:ce:a7:f5:62:d3:81:ab:f8:de:19:
31:c5:61:1c:34:e3:d3:57:f6:e9:0d:d5:d6:76:81:
f7:10:4f:7d:00:e4:72:ab:ed:75:d9:60:be:77:7a:
ec:69:f2:48:96:90:35:67:47:95:44:5a:82:51:ee:
fd:f0:11:55:ef:32:a2:c7:10:59:55:f1:a4:71:bf:
9a:c9:58:22:84:ec:20:67:83:3c:b9:cc:0c:39:50:
8b:36:af:2c:9d:77:5d:09:7f:a9:7d:f8:3f:3a:06:
4a:60:99:27:93:d4:51:7d:48:76:4f:93:df:26:2d:
01:76:5b:33:58:25:79:59:ce:ef:e0:d9:bb:5d:43:
41:76:d1:8c:62:46:08:52:da:6a:6c:14:02:86:3e:
0c:ff:99:de:f1:42:4a:04:d6:73:8d:13:04:7e:0a:
b8:08:4c:6c:57:9c:a7:bc:d1:c7:22:5b:74:38:48:
c0:9c:a8:48:30:62:5a:ac:4d:ac:ce:f5:2c:47:9b:
67:d0:af:64:09:3d:1a:7f:97:f1:06:f5:33:23:8d:
60:39:6b:7d:85:5c:7a:7e:d0:b8:22:23:64:6d:74:
1c:25:95:77:20:16:e5:06:1c:7c:1f:36:29:62:65:
84:73:c4:11:d2:0c:0b:42:0c:86:3a:78:b8:8b:75:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:EC:FE:89:10:C3:48:00:A7:62:4B:98:5B:00:4E:3F:00:3C:CB
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/k7Xs_okQw0gAp2JLmFsATj8APMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.213.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1c:9c:0e:ab:bc:3e:f3:43:fe:70:d3:e1:18:29:dc:97:5a:
dc:fb:b7:bd:7f:1e:a8:f3:17:01:63:55:39:87:93:69:5d:52:
2b:be:00:8e:53:84:71:69:83:17:55:ab:87:00:c9:f9:79:df:
35:bd:15:da:c2:5d:7d:47:f3:e1:b8:08:09:4c:b3:02:22:7d:
38:d8:90:63:ee:5b:3f:91:54:6f:8e:b7:ec:4e:16:cf:bc:ca:
aa:2b:5a:c6:d1:27:52:c9:7d:b0:56:f8:73:82:a9:a0:16:12:
8a:26:83:d2:7f:bf:c6:d1:fe:f8:7f:a4:3d:95:ea:c4:39:f8:
6a:b0:76:69:73:69:da:da:f9:f5:a2:a1:a1:12:e7:32:32:05:
32:14:b6:c7:c8:6b:97:00:a9:2a:4f:88:44:df:25:13:86:2f:
cf:16:10:6a:32:9f:56:55:ca:d7:ac:b9:64:4c:c0:9a:15:a8:
47:e7:7c:56:4a:1e:2a:1f:6d:98:c4:47:a7:10:dc:45:52:51:
c0:6f:46:88:2a:e6:8c:40:bc:dd:25:62:b0:7e:2a:c0:dc:cc:
17:60:89:ec:a4:3c:1c:fa:24:db:f7:33:f9:d3:98:00:14:30:
a0:ec:10:d5:96:88:db:77:bb:94:30:a4:22:26:88:d3:01:4d:
4b:55:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:24:58 2025 by rpki-client