Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/nI51tMtrv1oOOj7r6gtRmACR2P0.roa
File: nI51tMtrv1oOOj7r6gtRmACR2P0.roa (raw, json)
Hash identifier: NK+ag/l9oa9tTQsPp9ZAEQKMlEccS3B08/YoUzIz1Yc=
Subject key identifier: 9C:8E:75:B4:CB:6B:BF:5A:0E:3A:3E:EB:EA:0B:51:98:00:91:D8:FD
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 08D3A6A9
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/nI51tMtrv1oOOj7r6gtRmACR2P0.roa
Signing time: Sat 01 Jan 2022 07:55:52 +0000
ROA not before: Sat 01 Jan 2022 07:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 85.209.16.0/22 maxlen: 24
45.8.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148088489 (0x8d3a6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 1 07:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c8e75b4cb6bbf5a0e3a3eebea0b51980091d8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:00:e4:6a:d0:1a:c2:25:bf:2b:32:e1:0c:
c2:e3:61:d9:21:17:74:08:7d:67:19:57:5e:82:31:
d2:3d:3e:ec:dc:99:a6:fb:6a:ff:a4:76:f1:d4:6e:
1d:2a:96:39:8c:10:c6:29:8b:42:4b:c4:12:c4:ce:
93:43:db:c8:44:e1:cc:e5:b6:75:87:11:f3:0c:6b:
11:fa:d1:4e:63:43:1e:18:0c:98:77:16:61:8a:a7:
21:1d:39:1e:65:4f:c8:0c:39:2d:3e:1a:cb:3d:52:
6f:c0:5d:4a:a1:88:25:fa:45:35:74:7a:74:8c:e2:
9a:03:0b:c0:ac:57:ae:90:57:ae:f8:a9:36:87:fe:
ec:3a:19:c1:89:a0:0a:9a:9c:7f:27:68:58:12:d3:
26:53:30:b8:8a:98:60:02:b4:08:9c:16:a0:e5:bf:
78:ff:3e:53:fa:be:a6:fa:38:20:a3:8f:4a:ac:6c:
4e:59:2f:d8:ea:df:24:e6:00:66:c3:76:29:b7:70:
b9:7e:c1:8f:ba:89:f7:88:0a:a3:ef:73:d0:f4:5f:
1f:07:e0:81:91:c6:da:b9:f7:f7:34:fd:99:5f:0a:
c7:2b:d5:26:14:0a:b9:9d:73:60:fc:92:dd:92:be:
83:2c:60:3c:ca:b3:3c:a0:2c:4c:8c:ba:4c:2c:3a:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:75:B4:CB:6B:BF:5A:0E:3A:3E:EB:EA:0B:51:98:00:91:D8:FD
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/nI51tMtrv1oOOj7r6gtRmACR2P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/22
85.209.16.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b4:ed:41:b7:4f:5c:c3:fb:60:50:34:70:2e:50:2d:d6:6b:
5a:ad:68:c2:5e:41:2e:58:7d:e9:03:6d:63:ed:fd:4a:e0:a8:
85:58:dd:92:da:0b:f4:f1:5c:20:7f:8b:00:e2:c3:e9:e7:99:
76:b9:02:10:3f:31:f1:81:44:3a:34:dd:b5:12:d4:b4:6b:8f:
97:b3:bf:d4:a0:0a:e2:22:b7:8c:97:08:61:47:a7:d9:4a:b2:
a8:09:07:04:d3:a5:3c:ce:c3:87:c2:ce:2a:db:d2:a0:29:79:
67:85:5b:ec:8c:5c:74:3b:79:d9:68:d0:57:2b:96:92:55:64:
fd:f5:00:92:d8:fe:c4:49:6d:c8:4f:dd:ee:39:1d:a4:de:39:
d7:3b:af:ee:1e:6b:20:6d:94:11:b7:93:44:47:44:a4:75:3f:
f4:ff:9e:e0:f9:cd:ef:98:a0:b4:51:0e:cd:7d:3b:8e:ac:89:
93:e2:24:78:15:bc:ca:d2:cd:cc:5c:9c:44:6f:7c:85:67:e0:
7a:e5:68:79:1a:44:05:bd:57:c7:d4:6d:02:71:cb:e5:3c:a3:
4f:9b:9a:f6:86:82:aa:32:9c:3f:f8:60:4e:97:24:4c:62:55:
c6:e9:a6:5d:e9:93:af:d8:64:9f:2b:f3:18:2d:75:c7:67:ce:
f3:09:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:46:05 2025 by rpki-client