Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/a0ZVvcCQJUAUGMqSzYWGcCzGJjY.roa
File: a0ZVvcCQJUAUGMqSzYWGcCzGJjY.roa (raw, json)
Hash identifier: tixvdWmOazxRz/6weWuTF2J/sn9BBqjcBMX4Tas52ww=
Subject key identifier: 6B:46:55:BD:C0:90:25:40:14:18:CA:92:CD:85:86:70:2C:C6:26:36
Certificate issuer: /CN=71f110e0e5983843b4aefe58dd4f803a888adea6
Certificate serial: 020559DB
Authority key identifier: 71:F1:10:E0:E5:98:38:43:B4:AE:FE:58:DD:4F:80:3A:88:8A:DE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/a0ZVvcCQJUAUGMqSzYWGcCzGJjY.roa
Signing time: Sat 01 Jan 2022 11:57:53 +0000
ROA not before: Sat 01 Jan 2022 11:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 45.148.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33905115 (0x20559db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f110e0e5983843b4aefe58dd4f803a888adea6
Validity
Not Before: Jan 1 11:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b4655bdc09025401418ca92cd8586702cc62636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:ab:0a:6b:b2:36:06:58:b4:51:be:ef:ea:
c6:ad:85:9e:29:bc:6c:76:c7:7b:73:a0:37:61:3e:
1b:18:6d:c6:4c:19:fd:bd:a8:0d:8c:b8:d4:10:c3:
f1:64:e6:1e:9e:e4:11:3a:94:3e:86:8a:a8:e3:54:
7b:02:a7:6d:87:be:bd:ee:06:bc:34:6d:6c:24:f4:
60:64:60:7c:8e:4e:da:86:85:ff:ff:a2:97:36:10:
8d:71:d9:d5:94:31:61:11:32:29:0b:c1:2a:6e:15:
dd:e1:c0:76:d2:a0:ad:5a:e8:4e:9f:ef:bb:b2:8a:
a8:41:6a:da:11:3c:0b:bd:7a:b7:16:6e:07:ec:3a:
de:a8:c5:35:17:a8:a9:a7:d4:37:0f:08:b5:c9:2f:
b7:bd:c1:6a:f5:3b:9e:a9:9c:61:8a:a0:85:11:53:
65:2f:80:3c:6a:90:b4:c1:9c:b3:9e:28:ba:7d:c9:
f4:0c:68:05:e6:c5:5b:c2:7a:9c:45:cf:02:1b:c6:
fe:51:ba:de:e9:1b:57:5e:50:47:9a:95:97:92:78:
60:28:50:90:30:63:87:e6:e5:4f:8d:e6:32:bd:dd:
d3:a8:b9:66:da:8c:06:c3:71:44:ae:19:92:c3:3c:
f7:e7:41:6d:00:b1:d5:79:b3:fe:22:8f:5c:37:30:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:55:BD:C0:90:25:40:14:18:CA:92:CD:85:86:70:2C:C6:26:36
X509v3 Authority Key Identifier:
keyid:71:F1:10:E0:E5:98:38:43:B4:AE:FE:58:DD:4F:80:3A:88:8A:DE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/a0ZVvcCQJUAUGMqSzYWGcCzGJjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:34:85:15:9c:9b:00:a9:a1:c1:01:56:3d:78:50:b6:e7:86:
81:08:7e:d6:17:a3:6f:b2:22:45:0a:81:55:06:be:63:f8:ad:
2c:87:2f:64:5d:67:fc:bb:f6:ed:ad:c5:c7:64:12:4a:5d:c3:
57:55:b2:48:0b:ca:03:2f:1a:1e:94:3a:5f:c3:52:5c:a5:5e:
9d:f4:65:39:25:58:34:bd:90:6b:c5:57:0d:61:62:15:e6:9f:
39:52:b2:fc:7e:ff:63:cb:29:b2:d0:4a:0b:0d:69:0c:46:b5:
00:21:84:d2:1c:c4:27:d0:e8:fa:52:72:e4:73:21:0b:57:ef:
8d:4f:38:30:66:9b:76:28:25:6a:54:13:3d:a0:81:ce:b6:0b:
36:54:26:a4:8f:d4:c4:4e:9f:3d:4d:68:03:65:a0:7f:be:44:
35:bf:5a:ba:a1:e7:1f:d0:6a:eb:90:77:50:5b:2b:80:8e:89:
75:61:7e:ab:35:4e:57:22:c2:d4:3d:b0:30:94:89:9d:2b:f4:
0b:bb:c7:40:a7:b9:2d:ad:c2:bf:73:c3:84:aa:a4:bd:2b:42:
9a:ef:18:71:37:d3:fc:9b:ae:fa:b2:9b:e6:64:39:5c:72:35:
8f:84:e5:49:9b:9e:d6:60:26:b5:a1:8f:8a:b0:e3:dd:23:dc:
f1:aa:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:55 2025 by rpki-client