Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/uOaT4j9EVJiz8EIOTgjvWTshz84.roa
File: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (raw, json)
Hash identifier: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=
Subject key identifier: B8:E6:93:E2:3F:44:54:98:B3:F0:42:0E:4E:08:EF:59:3B:21:CF:CE
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0194228E32AFA30CDEDA8726D40626AD34C5
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/uOaT4j9EVJiz8EIOTgjvWTshz84.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35297
IP address blocks: 45.157.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:32:af:a3:0c:de:da:87:26:d4:06:26:ad:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e693e23f445498b3f0420e4e08ef593b21cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:a9:45:b7:62:64:6a:ca:2b:84:b2:12:ad:
a6:53:d1:17:9b:f8:f0:f9:93:90:3e:8c:63:90:d1:
12:c4:1d:ad:88:16:ed:20:a1:5c:5a:24:98:66:b4:
f2:aa:f7:58:8a:4b:78:71:55:02:09:6d:3e:ab:a5:
fe:e7:62:11:e9:8f:2b:a0:91:9d:3f:0f:4b:c1:9f:
f6:7d:2f:db:5e:04:be:ff:7a:25:ba:ff:21:a7:65:
a2:64:54:f1:ed:37:bf:fc:29:d5:eb:91:e1:b0:78:
a1:0e:bd:34:c3:28:d5:2a:30:7e:28:e6:cf:b6:08:
3d:e3:76:2d:de:9c:76:da:a3:f3:fc:a7:55:95:7c:
02:08:d9:57:2b:01:98:86:71:df:15:44:a2:dc:ba:
f7:bb:2f:5f:39:5e:6e:e5:da:ba:d2:e7:97:e5:1b:
72:5a:ea:cf:fe:4e:fb:0e:7c:c9:cf:89:36:a0:bb:
01:13:9b:6b:34:28:8a:78:70:d8:d0:e7:11:c8:e7:
26:25:03:ae:a4:93:fb:71:47:53:61:b3:41:65:fb:
1d:42:2a:46:d5:64:1d:a3:ea:bf:c1:ea:bd:9d:43:
0e:c8:52:02:75:23:54:c1:fa:b7:0d:a8:fa:a2:2d:
9c:b3:a8:1e:0d:68:7d:2e:8e:36:11:21:66:04:e6:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:93:E2:3F:44:54:98:B3:F0:42:0E:4E:08:EF:59:3B:21:CF:CE
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/uOaT4j9EVJiz8EIOTgjvWTshz84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.204.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:0f:ad:2d:60:00:62:11:9e:b1:79:26:74:5c:e8:de:c1:24:
0b:bb:34:b2:02:38:c3:f5:c9:87:22:ce:04:62:7c:10:55:93:
97:ee:7b:bd:ab:ac:4b:b2:d6:c1:b0:ec:13:f3:f3:2d:48:95:
11:67:3b:17:34:90:69:16:c3:08:c6:35:44:b3:dd:43:39:d9:
ec:e9:9d:bb:d5:3a:f9:ce:48:15:63:2f:bb:56:cd:a6:04:8b:
e4:1a:99:46:3f:a2:ce:89:a4:ec:dc:c1:60:fe:d0:bc:13:a4:
08:4f:72:3e:2e:25:7b:9b:9c:b7:97:b5:2a:9e:23:bd:82:85:
2a:8a:4a:74:06:f0:8e:20:08:9a:0f:2b:d1:05:20:be:20:62:
5e:ee:e8:12:27:b4:9d:cc:83:cd:ed:57:8e:62:6d:6a:b0:47:
7b:a8:07:3d:db:98:9d:24:d7:85:c5:97:24:51:ef:7e:9b:af:
78:0a:16:59:86:62:c7:36:db:c7:af:91:5e:51:e7:6d:e6:f2:
78:07:80:15:8a:12:fa:b5:f1:06:e5:29:50:d2:dc:8a:e0:31:
5e:d7:76:8e:60:2c:06:a4:74:2e:2c:cf:6b:49:fe:01:00:c6:
0d:7a:68:38:54:c0:b1:e3:77:6b:81:cd:25:e8:13:cf:ac:d0:
b8:fc:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:21 2025 by rpki-client