Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/z51E3ywVxm5VsaL4tCCJhTOWbtM.roa
File: z51E3ywVxm5VsaL4tCCJhTOWbtM.roa (raw, json)
Hash identifier: qjfkxbhjQ4YtwpO38rSjWwwwQIFXn4hr7ai6sGPfFsw=
Subject key identifier: CF:9D:44:DF:2C:15:C6:6E:55:B1:A2:F8:B4:20:89:85:33:96:6E:D3
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04052499
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/z51E3ywVxm5VsaL4tCCJhTOWbtM.roa
Signing time: Sat 01 Jan 2022 08:03:31 +0000
ROA not before: Sat 01 Jan 2022 08:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.95.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67445913 (0x4052499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 08:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf9d44df2c15c66e55b1a2f8b420898533966ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:14:a4:ef:dd:33:13:50:40:5e:d2:42:db:
22:9b:b6:02:f7:4a:5d:ff:a9:45:df:ef:d9:48:df:
8b:0e:28:d7:2c:65:a5:fc:a5:51:2e:b2:7d:51:0d:
d7:2a:4a:53:ae:39:22:de:23:5c:23:81:b6:c4:ec:
0c:5b:de:4f:13:d8:a6:57:3b:96:c4:19:be:40:c2:
fd:d6:b8:9b:60:fe:c7:1c:e0:a9:04:14:74:32:04:
f0:e0:c9:34:21:b9:31:2c:34:0e:5c:c4:a1:94:32:
50:2b:e0:a9:33:3e:d3:d2:3f:03:79:6e:01:f1:f8:
c1:7d:03:c1:3a:b4:05:d6:69:58:5b:03:53:7e:af:
da:25:6f:69:f4:8c:14:b1:43:2d:d0:81:03:e9:6d:
7f:c2:d9:b6:25:bb:c2:ca:89:2a:0e:46:85:3c:b2:
76:c8:3b:fd:50:5c:e2:68:68:02:08:d6:88:91:66:
87:26:cb:4e:02:78:77:e7:99:23:f2:64:c7:7f:0b:
ae:2f:a1:c0:d7:95:82:86:16:fc:20:b2:c2:7e:ed:
e4:df:60:21:03:c1:c3:80:88:0c:9a:3a:d5:29:fd:
30:e7:97:40:37:87:87:12:b7:30:de:4d:e7:3d:01:
7f:cc:50:1b:f6:c3:9e:e7:9a:1a:10:9f:50:52:44:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:44:DF:2C:15:C6:6E:55:B1:A2:F8:B4:20:89:85:33:96:6E:D3
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/z51E3ywVxm5VsaL4tCCJhTOWbtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:1d:0f:aa:72:1d:fa:61:fc:14:b5:e6:2d:1f:20:d2:26:88:
2e:35:02:56:de:03:7f:45:97:d4:77:96:75:b8:3e:15:c9:72:
7e:cb:90:26:2f:15:d0:59:58:27:38:a5:d8:0f:bf:d3:e0:e7:
07:3b:64:e9:9e:cc:fb:2e:c8:e8:11:cf:b4:bd:0b:9f:3d:15:
e5:c4:49:f0:e7:9e:ba:07:8c:ab:80:b3:11:97:f3:09:3f:f7:
a9:5b:d8:9a:da:98:9b:fe:f1:30:37:a9:54:d7:5e:6a:50:6c:
6f:3d:65:f0:52:ea:00:91:ac:57:b4:c5:aa:13:3c:94:d2:e3:
9d:ca:4a:80:f2:30:69:07:e5:7a:82:c0:d8:6b:ba:9e:33:bb:
88:32:f7:23:62:b8:e4:de:f4:0e:04:ad:63:eb:85:e4:90:7b:
d3:7a:30:38:be:94:c4:8a:62:05:68:60:ba:05:49:a4:74:48:
96:3a:a9:6f:c5:17:24:40:12:24:e9:83:1f:23:dd:dc:b4:de:
17:39:be:54:4e:93:fd:f1:c9:cb:e2:00:ce:d2:46:25:2b:06:
fe:9c:a4:2a:db:d6:3c:d7:92:00:dc:a7:ff:eb:38:45:b9:e1:
17:ab:c1:32:7e:48:56:29:ef:5b:c7:d3:6d:e4:30:4e:68:7b:
5d:bf:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:07 2025 by rpki-client