Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/rq5IUiQQ4HdHQIW19tfD3YfT5C0.roa
File: rq5IUiQQ4HdHQIW19tfD3YfT5C0.roa (raw, json)
Hash identifier: iUoETEVqhUYoT9JUBjMLVlv8pu/rVfQlyh81hIGfLlc=
Subject key identifier: AE:AE:48:52:24:10:E0:77:47:40:85:B5:F6:D7:C3:DD:87:D3:E4:2D
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 04D9ED
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/rq5IUiQQ4HdHQIW19tfD3YfT5C0.roa
Signing time: Thu 27 Jan 2022 21:27:15 +0000
ROA not before: Thu 27 Jan 2022 21:27:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45035
IP address blocks: 85.204.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317933 (0x4d9ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: Jan 27 21:27:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeae48522410e077474085b5f6d7c3dd87d3e42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:ba:0a:4f:05:aa:47:ef:08:9c:e2:cc:39:
cd:fb:32:5f:6d:e8:86:a2:2d:28:12:48:b0:62:5e:
9e:0c:96:46:2e:f2:7c:e4:cc:eb:74:eb:aa:a6:20:
04:de:a5:b8:27:03:46:bb:e7:53:73:29:14:48:d7:
b5:aa:d7:d2:07:38:77:6e:de:44:28:dd:e5:58:96:
b1:37:0e:55:a1:8d:ae:19:62:18:21:28:ea:73:b6:
4d:7d:20:d6:65:21:20:e5:84:32:7c:a5:e2:12:c4:
d0:e1:da:62:a6:bc:30:c8:f5:8d:6b:64:a6:4d:9f:
45:47:c7:9c:76:6d:9f:15:ed:18:c1:6b:a7:2a:7d:
0d:56:2a:3d:73:c9:a4:31:18:e8:6b:a9:92:22:b4:
32:06:dc:e9:b9:ec:e1:96:94:58:2e:f4:b7:a4:6c:
58:c7:52:59:d3:ac:d1:e3:29:77:d8:76:d8:3e:5f:
87:1d:48:0f:19:06:a0:03:df:3d:b9:7d:c8:05:50:
a9:c1:bd:6f:1c:ff:16:a3:42:09:70:6d:64:12:9a:
d9:81:c5:85:a3:6d:05:01:46:40:79:78:75:ef:38:
9a:c9:e4:66:50:e2:98:0b:8b:af:49:d6:9f:9b:28:
9a:46:ca:5b:e7:9a:6a:c6:8d:b6:bd:58:64:41:96:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AE:48:52:24:10:E0:77:47:40:85:B5:F6:D7:C3:DD:87:D3:E4:2D
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/rq5IUiQQ4HdHQIW19tfD3YfT5C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:51:6c:a7:60:3b:2f:80:39:7d:39:a2:ec:c2:e2:9c:f5:3e:
1c:dc:0f:ca:1d:2d:0f:6d:41:f4:4f:a8:a2:f7:13:f0:36:75:
00:82:75:1c:b3:35:c7:40:ec:73:97:a5:1c:09:70:f4:f1:f8:
6a:1f:de:b7:04:d3:11:e0:ce:d7:86:6c:ff:b1:51:e5:80:d8:
3a:39:b4:03:61:c2:7d:87:76:29:c1:ca:74:cb:33:df:10:6c:
e7:33:70:63:42:a6:d4:a7:84:d6:3d:15:97:34:99:e4:65:60:
c8:45:8c:05:1a:db:5b:3b:56:d1:8e:96:50:35:03:b1:47:91:
3f:15:ce:8f:4c:b2:43:67:e9:f8:8a:39:d7:b6:1f:34:36:61:
8d:a0:7c:10:5b:ae:bc:30:e0:e1:bd:6b:3d:4d:44:7b:dc:7e:
46:b9:80:df:10:00:a9:2b:50:a2:e9:05:42:9c:b7:29:8b:fb:
14:2e:9a:e8:e5:ad:d2:63:46:28:88:e1:dd:cf:25:1a:03:5c:
cc:2b:a6:db:69:bc:d2:ce:52:ac:5d:c9:3b:03:d0:08:49:34:
c6:ea:eb:07:9b:a7:2f:c2:fb:9a:2c:99:a2:62:30:a2:03:30:
d0:66:92:01:00:03:5e:69:25:39:7c:dc:17:c7:5b:8b:21:e8:
9f:6c:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:00 2025 by rpki-client