Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa
File: 7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa (raw, json)
Hash identifier: KF5h3JFPC5idlnhq/utVjlVePPK1dDTk7/7xxnax2ZA=
Subject key identifier: ED:18:30:C6:FF:D2:C5:D5:56:6E:58:0A:AB:53:1F:FE:4E:41:CC:ED
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01835B7EA8752FAB008255870BD29F78F00A
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa
Signing time: Tue 20 Sep 2022 15:22:50 +0000
ROA not before: Tue 20 Sep 2022 15:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35908
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:7e:a8:75:2f:ab:00:82:55:87:0b:d2:9f:78:f0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 20 15:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed1830c6ffd2c5d5566e580aab531ffe4e41cced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:43:61:a9:bc:f8:be:78:b3:04:5a:80:19:
6c:54:30:25:7c:69:ff:2b:8f:08:47:c9:a4:7b:53:
e9:d5:c7:7e:0a:e3:65:11:8c:56:23:c6:80:40:dd:
c5:0c:aa:92:aa:39:2a:c9:5c:ba:ef:0a:ca:b6:86:
87:55:39:c6:6d:27:df:60:d8:e0:5d:d1:d6:d4:0d:
21:36:71:9b:7a:04:7f:b1:3d:7f:07:e4:8f:21:98:
0a:53:90:9b:f2:98:6c:48:32:19:1a:0a:63:68:77:
12:74:1a:d9:33:6c:49:e5:1b:78:45:9f:e4:15:a4:
2d:16:c6:44:45:28:69:52:d4:63:80:f1:b1:cc:51:
37:5e:c1:99:37:97:77:28:c5:72:fc:87:94:b7:4a:
6b:e2:bd:f3:78:7a:a6:76:2e:5e:cd:0e:26:fb:a7:
ff:f3:98:e9:ef:65:61:04:40:eb:27:ed:ab:3b:b0:
7b:3e:3c:f8:57:c6:b2:2d:39:b4:87:fe:a4:7a:99:
64:0c:fc:8b:ce:41:ed:10:30:6c:65:e1:cf:56:30:
a8:c6:cc:f7:b5:39:a1:e4:65:b2:10:f6:b7:f4:39:
d2:bd:5a:6a:2a:f9:32:80:72:28:52:4e:26:35:c3:
bc:2f:12:d7:d5:21:53:4f:80:93:82:2b:f0:5a:80:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:30:C6:FF:D2:C5:D5:56:6E:58:0A:AB:53:1F:FE:4E:41:CC:ED
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/7Rgwxv_SxdVWblgKq1Mf_k5BzO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:33:af:94:ef:08:90:2c:70:80:d4:df:5c:23:ca:75:28:8d:
23:c3:5f:c8:2f:87:7a:aa:cf:a3:75:7a:cf:14:af:4a:0e:a4:
e7:c2:f7:75:1d:5f:86:fc:d9:35:7e:7f:5d:da:23:36:b7:29:
09:29:b0:a0:91:b5:78:3b:cd:cc:8e:d8:18:bd:73:46:0e:b1:
8c:00:83:1c:98:b8:17:1a:c1:d8:16:59:9e:94:1a:7d:78:68:
71:12:c5:f4:50:ab:e8:3e:30:97:79:95:10:c8:3f:89:6b:14:
61:06:2e:9e:57:24:51:dc:1b:fd:4f:61:68:6a:97:b9:f3:ae:
95:18:7a:bf:c9:e9:5b:7e:4b:cf:68:5c:85:f0:84:ad:b5:be:
aa:35:12:da:1a:3b:24:42:41:af:b3:91:42:2d:4c:b6:df:6b:
6a:bd:f3:6f:f1:db:f4:11:71:ab:81:6e:b8:b4:92:a2:6d:d5:
aa:4e:48:ee:ac:4e:c5:6f:66:44:9e:f1:1b:68:4a:f8:60:10:
aa:39:2d:2a:c1:ee:6f:5b:d7:a5:4a:60:97:4e:b2:c4:be:a7:
a5:fa:d7:d2:bc:4f:b0:c8:7d:54:01:1a:29:11:2e:44:82:d8:
2a:c3:99:87:e2:0f:97:12:2f:e3:7e:2a:12:9c:c5:6e:88:90:
b3:b3:38:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:16 2025 by rpki-client