Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/KTJ2l_5rRJn3eNI-wEZ5SA1yX5g.roa
File: KTJ2l_5rRJn3eNI-wEZ5SA1yX5g.roa (raw, json)
Hash identifier: ur8lQ9A+OsVw/Rg+NwZqPK5chCq9xfRv4KzP5MQVfy8=
Subject key identifier: 29:32:76:97:FE:6B:44:99:F7:78:D2:3E:C0:46:79:48:0D:72:5F:98
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 069D4648
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/KTJ2l_5rRJn3eNI-wEZ5SA1yX5g.roa
Signing time: Fri 08 Apr 2022 07:47:02 +0000
ROA not before: Fri 08 Apr 2022 07:47:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142403
IP address blocks: 45.88.12.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110970440 (0x69d4648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Apr 8 07:47:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29327697fe6b4499f778d23ec04679480d725f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:32:3c:23:b3:c2:4a:ee:49:36:43:60:a8:
08:a2:45:1b:d2:59:c6:d0:7b:d2:39:e9:b6:cb:3f:
87:87:1a:c4:67:9d:e8:ab:84:b2:bb:b8:9d:3c:3f:
b6:74:d5:fb:40:fc:4a:8e:8c:07:4f:c0:ad:24:ba:
ae:fb:fa:84:7f:9d:ec:8d:f7:2d:9b:31:cc:64:4e:
83:71:80:81:a7:4f:fe:d0:84:8d:fe:75:47:b0:6b:
7e:14:ee:cc:15:90:80:74:7b:ea:32:f4:5e:09:00:
bc:8e:d3:64:c5:0c:a3:3d:5e:86:bb:e8:60:1f:dd:
83:b3:7f:ea:25:9e:e0:f2:8b:00:08:02:5d:a2:bf:
3f:ba:a7:26:04:39:84:43:33:9f:0f:86:34:9c:d0:
d3:76:3d:ac:5a:11:f8:8e:ee:58:7d:47:f7:85:16:
63:77:aa:47:62:eb:59:a8:6d:d5:62:52:58:9b:8d:
b9:45:1f:5b:7a:9f:b5:34:16:d6:02:a3:11:1d:f5:
e7:15:d0:f3:cf:84:7a:c0:52:0b:fe:99:45:7d:a4:
68:31:8f:9a:9f:ee:5a:36:95:74:f0:9d:e2:50:73:
83:b0:f3:0c:8e:d4:7f:3f:7d:62:9a:d5:73:d0:28:
78:8c:bf:2e:26:2f:f5:20:e6:5e:5d:7b:44:da:1d:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:76:97:FE:6B:44:99:F7:78:D2:3E:C0:46:79:48:0D:72:5F:98
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/KTJ2l_5rRJn3eNI-wEZ5SA1yX5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:19:20:e2:76:2c:f6:b3:8a:ae:07:35:67:55:05:55:32:11:
1c:19:b5:89:8d:5b:f2:83:99:85:cc:57:72:bb:f4:ff:68:bf:
4d:8d:8d:7d:90:20:ac:0d:21:31:df:3c:cc:e3:8d:2c:d0:1c:
34:9a:30:9b:b7:c4:dd:d6:21:fd:cb:e5:90:14:ce:af:2f:a8:
e9:ef:fd:0b:b5:0e:b9:31:4d:dc:eb:02:36:27:0e:ee:d4:65:
30:65:d5:08:f9:87:5a:e4:5b:70:e6:f7:dc:2b:b0:42:ba:42:
d8:84:ea:78:3e:8c:87:29:43:c8:ac:df:99:61:53:02:0c:f6:
7c:db:8d:ea:c1:92:6f:6a:c7:c1:fa:91:e3:49:f0:a1:ff:a4:
bc:ef:9d:46:e5:43:86:a0:12:88:d0:04:a9:03:f1:11:86:42:
14:55:6f:7e:0e:a6:df:79:a2:53:a0:72:8b:a0:db:2c:d6:f8:
71:16:ff:25:ea:bf:d1:df:5d:ec:1a:82:81:61:fc:c4:1b:8a:
c5:a6:fa:eb:ab:9a:01:f8:3e:f2:34:84:d7:3e:c3:ee:0c:24:
d8:81:27:69:55:b6:e5:2d:ca:d0:43:4b:1a:dc:dc:85:a4:4a:
d0:85:98:52:b1:0e:b6:46:40:c9:9c:db:15:15:67:4c:80:50:
04:32:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:22:02 2025 by rpki-client