Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/XfAGMqwFIfLfhq-nEqol8PfmgfM.roa
File: XfAGMqwFIfLfhq-nEqol8PfmgfM.roa (raw, json)
Hash identifier: n+Pl5PsxEjwzAK09eHqpzJ8z0bknSH1zu52mhtuIh6g=
Subject key identifier: 5D:F0:06:32:AC:05:21:F2:DF:86:AF:A7:12:AA:25:F0:F7:E6:81:F3
Certificate issuer: /CN=f33f188267785a4aad4c30f414b60a1bce172e60
Certificate serial: 0239B404
Authority key identifier: F3:3F:18:82:67:78:5A:4A:AD:4C:30:F4:14:B6:0A:1B:CE:17:2E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8Ygmd4WkqtTDD0FLYKG84XLmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/XfAGMqwFIfLfhq-nEqol8PfmgfM.roa
Signing time: Sat 01 Jan 2022 15:05:46 +0000
ROA not before: Sat 01 Jan 2022 15:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.147.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37336068 (0x239b404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f188267785a4aad4c30f414b60a1bce172e60
Validity
Not Before: Jan 1 15:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5df00632ac0521f2df86afa712aa25f0f7e681f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:78:ef:68:73:78:70:1c:a0:b6:88:82:db:
c7:d6:c5:f3:3d:f9:69:a4:64:0d:db:ba:02:7e:d3:
42:5d:a3:d9:5f:80:b5:cb:69:6a:13:4e:40:62:7a:
81:86:a1:b0:79:cf:79:cc:15:4c:55:ae:7b:dd:1e:
26:a7:70:e3:d9:74:a0:91:16:9a:9c:d0:86:c5:de:
f5:02:09:b0:7d:8d:4f:b9:7e:d3:e4:32:29:19:39:
7e:b5:e1:b6:03:03:ac:c5:0f:bb:60:e2:7f:e0:84:
ab:0e:16:8b:ff:74:98:48:1a:b8:44:76:2e:53:e1:
4c:89:8b:5f:31:1e:4c:a6:19:37:71:71:ca:39:d1:
7b:60:ab:a1:f2:e6:68:4c:6c:35:21:21:02:67:74:
86:a7:b2:77:4b:45:d2:14:3c:1a:2f:d8:ca:1a:d8:
e0:0c:22:5a:85:4c:5e:30:00:b2:12:26:a8:54:ca:
2e:2f:5b:47:d9:92:31:39:d2:4d:4c:6f:cd:f4:a2:
4c:7f:60:46:11:1a:91:f8:0f:73:b9:b3:75:f1:32:
90:be:b7:c1:71:75:58:37:26:cd:10:c7:f7:bb:e5:
50:33:9a:5b:c8:d9:91:d3:0f:f5:f7:22:a0:71:ce:
7e:fb:bc:13:04:db:31:47:c8:ef:07:50:6c:a9:cd:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F0:06:32:AC:05:21:F2:DF:86:AF:A7:12:AA:25:F0:F7:E6:81:F3
X509v3 Authority Key Identifier:
keyid:F3:3F:18:82:67:78:5A:4A:AD:4C:30:F4:14:B6:0A:1B:CE:17:2E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8Ygmd4WkqtTDD0FLYKG84XLmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/XfAGMqwFIfLfhq-nEqol8PfmgfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:f3:f9:6f:43:4a:e8:6c:2c:f8:52:86:35:25:8a:e9:9c:e4:
34:3d:1b:d6:4a:ca:fb:77:1a:39:45:5c:bf:34:c6:a6:46:29:
f1:e8:54:4e:b2:3d:70:d0:21:37:6a:80:b6:04:69:f3:f1:7f:
06:ff:34:ba:27:f5:5e:ea:17:92:9a:4d:0f:bd:08:c5:45:aa:
72:2e:57:04:cd:50:80:a1:28:8e:9f:96:99:b1:22:55:e4:b6:
9e:a2:ac:64:8f:cc:5f:0c:c5:59:c6:19:4d:71:ec:b3:1c:2a:
f9:04:b0:a1:44:4c:16:fd:e1:42:ef:23:6a:48:2f:1f:8c:f9:
d3:21:89:96:06:43:04:01:79:56:3e:71:24:f7:72:1d:0a:7d:
e7:89:40:12:0a:ca:e4:29:ca:ad:c8:9a:df:4f:1a:ce:c6:c6:
ed:28:30:45:8f:32:9a:f8:a9:58:ee:ab:62:58:26:57:aa:74:
ef:dc:06:b5:0c:d7:d0:c9:f7:b2:73:37:2c:91:a0:8d:4c:af:
a0:72:ea:74:92:0a:a9:85:71:15:8b:29:8a:60:10:d1:fe:3f:
0f:4f:11:40:c4:8b:1a:9e:90:dd:61:6f:f7:da:8a:b5:40:a8:
63:51:ac:59:d8:b8:07:c0:e9:1c:82:ce:b9:32:e8:78:25:2c:
0d:81:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:57:47 2025 by rpki-client