Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/SZBAF2HXjdb03PkJpOVysksT_8k.roa
File: SZBAF2HXjdb03PkJpOVysksT_8k.roa (raw, json)
Hash identifier: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=
Subject key identifier: 49:90:40:17:61:D7:8D:D6:F4:DC:F9:09:A4:E5:72:B2:4B:13:FF:C9
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 0194228D5D9659397D6E2449678AE2578FEB
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/SZBAF2HXjdb03PkJpOVysksT_8k.roa
Signing time: Wed 01 Jan 2025 15:47:57 +0000
ROA not before: Wed 01 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51985
IP address blocks: 185.45.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5d:96:59:39:7d:6e:24:49:67:8a:e2:57:8f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4990401761d78dd6f4dcf909a4e572b24b13ffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:6d:0e:66:92:e4:68:f3:dc:bc:4d:11:2b:
67:61:8f:3d:46:c1:64:41:64:f5:93:1d:52:0a:6e:
2b:26:f6:2b:56:22:2e:9c:e9:18:49:60:87:8a:e6:
4c:33:5f:16:c8:c7:b2:cd:51:65:b0:db:bb:2a:3b:
7d:2a:b9:a1:41:e7:19:b5:f6:8c:99:25:38:34:17:
d3:4e:e2:d2:47:f1:ee:f2:63:ae:64:28:b9:b8:3e:
9d:5d:ed:77:e2:e9:d5:92:7e:c2:53:c8:0b:3f:d1:
18:46:9c:89:cf:ba:31:d6:d2:f2:67:6c:d0:a1:d7:
be:ec:77:9e:72:55:1d:a2:d1:81:3d:ec:6f:4c:85:
74:c2:17:bd:04:ea:f4:73:e8:a5:56:4a:cb:6e:c3:
bb:04:c9:4b:e6:de:39:a7:cf:12:9e:50:bc:2d:e5:
ea:b9:df:13:e0:dc:fd:42:80:5f:e5:9a:f1:09:67:
0c:b8:09:bf:34:2c:7c:25:46:b5:d4:f4:d7:b7:02:
71:60:1f:c6:6a:a7:ff:52:3a:34:e2:43:aa:b8:f8:
35:7a:22:89:e4:0d:b8:de:37:41:ed:69:f1:0f:22:
79:41:a2:f0:65:91:8e:6e:a3:01:0c:fe:1e:57:5c:
3a:1a:15:cf:4a:37:ce:c1:2f:59:f2:69:c5:41:cd:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:40:17:61:D7:8D:D6:F4:DC:F9:09:A4:E5:72:B2:4B:13:FF:C9
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/SZBAF2HXjdb03PkJpOVysksT_8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:1d:4e:f5:a5:e5:ad:1b:6b:34:00:a1:87:3b:a1:7d:fe:43:
77:20:b2:07:f5:45:43:6b:be:a1:26:48:da:81:d9:c6:f8:9b:
32:83:fa:f0:b6:fe:32:76:d5:5a:d3:fd:e3:24:3c:61:60:5a:
3f:74:16:f1:75:b4:bc:49:ad:9a:9f:fe:ec:18:c3:d7:28:b0:
79:28:84:78:9e:29:c0:3e:ba:a7:48:7c:6f:b3:1b:cd:38:c2:
25:75:eb:fd:f0:7c:30:3f:27:dc:d9:c6:f8:64:81:79:b0:84:
2d:9b:a3:6f:ce:f7:7a:9e:16:c7:4d:80:b2:15:45:f1:ee:59:
89:bd:42:0d:a7:66:5f:a0:27:2f:5f:d8:77:64:f6:54:0d:b8:
57:8f:79:24:92:86:47:10:97:c6:e1:8f:37:cf:b3:85:22:40:
5d:1c:96:c9:d6:07:15:7a:ee:31:7d:5a:22:4c:cb:b4:56:c1:
81:a0:7d:83:13:65:d8:e1:ca:b4:84:66:77:90:86:23:d1:e2:
ca:d5:32:7f:a3:38:42:43:c8:8a:07:89:00:f2:25:f9:b3:a0:
b1:47:db:b9:8b:18:f6:f6:d6:b4:48:cd:7f:22:45:40:ce:34:
99:07:2e:b4:4c:43:27:d5:a7:aa:11:02:95:35:35:69:c0:ad:
27:dc:0d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:19 2025 by rpki-client