Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/rXqsjP77AeiZayOIVgIQ-WcFLVE.roa
File: rXqsjP77AeiZayOIVgIQ-WcFLVE.roa (raw, json)
Hash identifier: dQeEzhNpmO+MGn3Bh6ifS3AWQqHDtxFkTa5sucTyPKY=
Subject key identifier: AD:7A:AC:8C:FE:FB:01:E8:99:6B:23:88:56:02:10:F9:67:05:2D:51
Certificate issuer: /CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
Certificate serial: 081D3902
Authority key identifier: 8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/rXqsjP77AeiZayOIVgIQ-WcFLVE.roa
Signing time: Sat 01 Jan 2022 14:04:54 +0000
ROA not before: Sat 01 Jan 2022 14:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5404
IP address blocks: 45.89.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136132866 (0x81d3902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
Validity
Not Before: Jan 1 14:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad7aac8cfefb01e8996b2388560210f967052d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:e3:ee:29:38:bb:06:b3:74:fa:1c:54:87:
85:a2:77:a5:33:77:ff:20:51:3f:7d:d7:b3:df:4d:
e2:bc:8a:c0:e0:09:00:c6:d5:d0:1c:76:68:9e:52:
d3:5d:7d:3a:59:39:8d:be:36:47:8a:e5:5f:0c:f7:
b4:85:3e:43:5c:44:86:52:46:6c:61:19:84:70:e7:
11:42:9e:5c:dc:65:c5:fc:93:f1:d8:97:aa:20:a5:
e4:15:05:64:4e:f7:73:f6:bf:6b:d6:47:22:08:78:
6b:42:aa:12:cf:bd:1f:dc:4b:a0:dc:18:65:32:1a:
4e:97:26:73:c6:fe:b7:ce:7d:66:f7:eb:2e:49:76:
8f:54:f9:5f:c9:6b:b8:9e:47:00:b5:4d:54:00:5a:
ee:bc:d0:fb:f6:b1:b0:2f:67:2d:8e:02:b3:7f:97:
36:fe:a0:09:65:28:cd:e2:23:2d:fb:8f:5b:a1:76:
94:12:4e:49:fd:59:a2:de:b9:7a:06:c1:49:6a:0c:
70:7b:75:5c:c1:2d:3a:ed:09:96:ba:0a:f3:40:ca:
b5:9c:bd:cc:1f:f2:e4:b3:fe:aa:26:29:8c:1f:a4:
f2:3d:96:8a:81:d2:cb:d2:2f:e6:02:47:be:ea:17:
f2:20:6b:25:f8:f3:e8:59:18:64:d8:8b:59:9a:48:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7A:AC:8C:FE:FB:01:E8:99:6B:23:88:56:02:10:F9:67:05:2D:51
X509v3 Authority Key Identifier:
keyid:8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/rXqsjP77AeiZayOIVgIQ-WcFLVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/im--IugL5_FMHDn4SLG4DJJI7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.163.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:02:23:f2:d0:cf:12:05:fe:97:b8:24:92:cf:f9:66:0d:40:
af:8c:df:25:ba:15:62:2e:29:73:fe:c0:b8:c8:65:64:35:ed:
7d:bb:48:72:39:48:77:61:e2:3b:2b:d8:2e:c5:07:8a:07:fa:
44:cd:79:f3:12:c7:da:0a:fe:0d:51:00:00:41:98:1b:7a:6a:
27:4a:18:a4:61:d4:b5:ac:cc:1c:a9:6a:05:ef:d4:30:f3:dd:
eb:90:37:62:4d:fd:0a:b2:3e:a0:7c:fd:1a:71:6f:e9:42:e3:
6b:f9:75:8f:db:c3:2b:e0:69:ab:52:b9:b2:8c:dc:2b:9f:b4:
b2:fe:d0:0f:10:10:ed:5a:05:02:af:da:8e:b4:4f:8b:27:e1:
92:2a:fd:71:b5:12:f6:d4:3a:d3:37:e0:1d:1c:fa:98:31:5f:
9e:b3:25:b0:a0:3e:4a:30:fe:f7:7f:e9:e1:f5:b3:59:3c:fe:
96:62:80:e5:4c:35:5b:4e:15:0b:db:e8:01:b5:0e:75:c3:eb:
f4:8a:a0:23:2d:68:c9:da:2c:b7:81:17:8f:31:ad:b6:2d:74:
d2:19:bc:72:fc:f9:3e:9a:af:a5:ef:d8:4b:32:ce:62:b1:46:
36:71:3e:67:68:72:96:ef:fb:e1:d0:3c:28:b8:64:41:38:c3:
80:50:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:05 2025 by rpki-client