Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/X49HpKARKJ_9nink-O8oFnzKcCE.roa
File: X49HpKARKJ_9nink-O8oFnzKcCE.roa (raw, json)
Hash identifier: qlmIZik1MGsmXXqy48uUcDbMoLVBApc4tkScPdys/CI=
Subject key identifier: 5F:8F:47:A4:A0:11:28:9F:FD:9E:29:E4:F8:EF:28:16:7C:CA:70:21
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0185DB8223A9FF7AA314C7098E6A3F59F3E9
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/X49HpKARKJ_9nink-O8oFnzKcCE.roa
Signing time: Sun 22 Jan 2023 22:03:37 +0000
ROA not before: Sun 22 Jan 2023 22:03:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.66.148.0/22 maxlen: 24
45.13.150.0/24 maxlen: 24
45.13.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:db:82:23:a9:ff:7a:a3:14:c7:09:8e:6a:3f:59:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 22 22:03:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f8f47a4a011289ffd9e29e4f8ef28167cca7021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:76:7d:a8:5e:53:34:7f:30:90:75:61:e2:
15:4d:4d:00:38:56:c1:a0:b7:34:ac:a5:47:8a:a6:
6f:17:ed:8a:3d:61:03:55:0c:0f:b6:95:9c:35:7e:
a4:cc:04:00:9e:3d:4e:24:72:f8:ac:a5:b2:0f:2b:
12:8c:54:c9:a5:c1:cc:59:9a:c6:3a:ae:a5:21:80:
ab:c3:ec:db:7a:aa:ab:f6:5c:64:83:7d:10:05:ff:
5e:ae:1c:f2:44:dc:b3:33:d3:48:27:86:b2:9b:fb:
0c:08:11:34:4b:b6:48:ef:74:76:f3:cf:1d:df:73:
48:38:ad:29:ca:f4:2a:5d:33:bf:5b:34:d0:67:ac:
25:b2:5a:59:0d:6f:94:42:d3:33:17:d9:be:ed:47:
83:f4:36:a8:9b:0f:95:4e:b6:69:20:d7:e6:59:89:
d1:5e:cc:55:ba:09:ef:a3:a5:3b:7d:2d:c6:10:bf:
e0:19:d5:9f:51:0b:2d:0c:8c:54:c5:4e:ef:3a:98:
95:91:a8:f8:b0:63:d3:23:7c:d6:4a:08:ff:8c:67:
6b:f4:99:8c:03:f6:23:a3:3a:37:e4:1f:d5:7c:46:
a9:ee:a1:c3:0e:30:15:8f:24:fe:2d:e7:33:bc:1c:
f8:e8:31:12:93:d4:47:80:f7:1b:40:8e:cc:32:4c:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:47:A4:A0:11:28:9F:FD:9E:29:E4:F8:EF:28:16:7C:CA:70:21
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/X49HpKARKJ_9nink-O8oFnzKcCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.149.0-45.13.150.255
45.66.148.0/22
Signature Algorithm: sha256WithRSAEncryption
97:65:8d:d3:47:65:bc:3b:f8:ef:bc:30:c2:2f:0d:cc:d1:4f:
f6:b1:e3:cc:08:7e:81:8d:17:e3:c0:2f:b4:bd:da:d7:a4:63:
3a:ea:d8:8a:61:c4:cc:f1:c7:8d:16:86:74:e7:48:77:ec:99:
1f:ba:d9:05:1a:67:44:63:3b:62:ef:64:aa:06:01:d2:02:08:
78:48:11:12:13:52:e8:eb:c4:db:1c:6d:2c:f3:7e:df:32:91:
3b:39:da:9e:26:5f:03:58:ce:c6:f8:cd:1c:c8:b7:70:90:a4:
79:dd:35:87:86:2d:d3:4a:ff:5a:55:38:7f:84:4c:c3:6a:a1:
78:41:1d:0f:ee:b3:42:b6:f2:ca:f9:c1:ea:84:5f:da:a2:5a:
c3:65:0e:59:45:f7:ff:9c:18:31:78:03:41:e5:f9:3e:83:3d:
bb:aa:d9:d5:a1:6f:aa:19:16:6b:fd:5c:54:89:09:7e:2b:91:
30:3b:08:26:1e:25:f0:85:eb:96:8e:94:8f:1f:7b:fe:ea:cc:
aa:68:2d:45:a4:88:94:c1:85:91:b6:fa:4d:04:a2:03:47:cd:
05:04:64:7b:49:ef:06:62:54:8e:9f:42:9c:78:30:c2:9f:0e:
18:3d:25:7b:c3:04:a3:6f:ac:35:08:27:1e:de:44:5d:55:e9:
e4:89:d4:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 13 13:27:03 2025 by rpki-client