Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/rV2gxhT7YbmmukHGbx82JZEOn8Q.roa
File: rV2gxhT7YbmmukHGbx82JZEOn8Q.roa (raw, json)
Hash identifier: smT+Gxz1QTw/YQOi77fshxskwXE7iDjW7nyizkRhtu4=
Subject key identifier: AD:5D:A0:C6:14:FB:61:B9:A6:BA:41:C6:6F:1F:36:25:91:0E:9F:C4
Certificate issuer: /CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
Certificate serial: 04082B48
Authority key identifier: 75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/rV2gxhT7YbmmukHGbx82JZEOn8Q.roa
Signing time: Sat 01 Jan 2022 06:03:30 +0000
ROA not before: Sat 01 Jan 2022 06:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49792
IP address blocks: 45.142.196.0/22 maxlen: 22
2a0e:db40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67644232 (0x4082b48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
Validity
Not Before: Jan 1 06:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad5da0c614fb61b9a6ba41c66f1f3625910e9fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:bf:f9:86:49:68:ed:a0:3d:01:d9:b1:5b:
e5:fd:5a:ab:87:2f:d7:d9:0b:77:c2:55:54:c8:5b:
7b:74:9d:4d:e4:0a:e3:58:0d:5a:18:eb:31:f6:41:
06:4d:57:5f:2d:c4:a0:50:d8:ce:6d:fc:7f:50:ad:
6c:fc:a2:fe:68:8c:9c:5c:f6:24:1e:79:68:93:c9:
37:57:94:00:c3:f1:3a:87:61:78:4f:d9:7b:31:ad:
5d:03:b7:04:74:2d:57:e1:11:41:05:35:70:41:10:
97:31:47:75:90:4c:fa:cd:f2:6d:24:a2:6d:db:6b:
e9:73:88:35:71:8c:7f:60:55:84:b1:da:a4:99:a8:
44:0d:15:b8:6c:c8:f7:51:e2:0f:a6:5f:45:bb:b7:
46:a1:cd:61:bb:fb:7d:44:1f:36:11:1d:6f:6e:96:
ca:dc:cb:a9:75:6d:d5:22:2b:c1:e2:17:24:31:8b:
d7:1e:a5:be:c5:72:cb:a5:56:5e:f2:e1:65:f1:37:
57:65:1f:a7:02:b1:36:25:e3:14:b1:89:fc:f9:dc:
ea:4b:60:87:e0:fc:b0:af:48:45:a6:07:90:02:2a:
84:4d:d8:12:ce:e5:33:9c:f9:0f:22:fe:7c:92:3d:
06:6a:ee:9d:dd:3e:06:4a:59:69:e0:d5:b7:9f:d0:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:A0:C6:14:FB:61:B9:A6:BA:41:C6:6F:1F:36:25:91:0E:9F:C4
X509v3 Authority Key Identifier:
keyid:75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/rV2gxhT7YbmmukHGbx82JZEOn8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/dUyVnZTvjHy5bYbGxLkjbfEvqH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.196.0/22
IPv6:
2a0e:db40::/29
Signature Algorithm: sha256WithRSAEncryption
9a:6a:d3:bb:78:dd:d2:44:47:7d:cc:72:2c:fd:a0:5f:21:3c:
1e:68:b9:38:91:59:f2:67:b7:e9:b5:cc:31:72:9f:08:14:55:
f2:ee:11:f5:56:9e:fd:62:31:a6:40:2c:21:5b:49:5e:42:c2:
00:fb:ee:66:ce:b5:b6:98:a4:4d:a3:02:0b:16:30:f2:87:dc:
74:5f:15:90:35:96:52:68:a8:7d:ac:e6:dc:76:bd:00:aa:5d:
f6:f5:7b:9c:72:9f:55:8b:d1:4e:86:44:36:24:23:a7:4a:c1:
1f:26:3c:b7:d2:cc:07:e0:ba:f7:a1:9b:f6:9e:08:06:74:2d:
64:f2:f1:8e:b5:73:0c:f0:02:6a:dc:c0:9f:a4:9f:9a:30:b1:
e5:ee:9f:d2:dd:5b:6c:ae:f7:77:75:18:35:1c:13:d4:56:04:
77:a4:73:f8:4d:00:1d:0b:78:45:c4:9f:6c:62:6f:ca:5a:36:
53:c0:1f:fa:54:7e:0b:12:72:c9:75:b2:a3:67:33:9e:8a:c7:
ef:01:ff:4b:9e:a0:c5:d1:f9:d4:b0:19:9f:08:5e:be:a7:e7:
e2:9e:34:ee:54:66:a2:ab:90:d1:ab:8f:df:98:1e:ae:bf:9a:
c3:5b:6e:7b:ca:5e:9f:ed:b5:72:2b:2e:a5:be:a1:0a:4c:60:
9c:d8:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:01 2025 by rpki-client