Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/M9NbgULzUbUgy5QfFA80DfDkYIo.roa
File: M9NbgULzUbUgy5QfFA80DfDkYIo.roa (raw, json)
Hash identifier: 9jvwTaiwGzjoN6t2OLikrXjXwIhCTFgXlEI2alktc+E=
Subject key identifier: 33:D3:5B:81:42:F3:51:B5:20:CB:94:1F:14:0F:34:0D:F0:E4:60:8A
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 01941F8C7B0272526BEAA31B5D558C043755
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/M9NbgULzUbUgy5QfFA80DfDkYIo.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208834
IP address blocks: 45.83.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:02:72:52:6b:ea:a3:1b:5d:55:8c:04:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33d35b8142f351b520cb941f140f340df0e4608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:9d:74:6a:2c:9f:c3:21:2b:fb:b8:44:df:
c5:cc:2f:3d:4f:e7:d2:2d:d6:d5:06:50:d3:29:7b:
4e:10:02:30:c1:14:71:67:fb:fa:03:44:bb:a7:56:
84:56:7a:6f:da:b5:b8:e6:c4:3d:f4:88:3d:2d:f8:
80:d5:5f:2e:fc:84:5a:9d:49:93:c4:bf:eb:f8:15:
00:39:de:6a:9f:b4:11:7c:d0:32:2a:cb:de:e4:cd:
be:1f:e3:72:8b:56:87:04:b2:6c:6a:b0:6a:6b:90:
e3:db:87:9d:86:c6:19:33:20:04:01:0d:b5:8c:ec:
19:8b:41:1f:73:46:51:98:a4:71:22:2a:c5:c3:43:
b0:63:50:54:35:76:ce:b6:d1:0a:aa:ae:61:59:78:
02:1b:ba:e8:7f:06:a3:0e:dc:2a:c2:73:e6:b0:13:
b9:fb:33:4e:66:0a:9d:fe:a8:2f:c7:3e:33:84:9e:
2c:6c:42:4b:48:37:e5:24:18:da:84:15:ae:de:be:
8d:ac:1a:13:3e:53:4f:94:93:1e:74:52:65:02:89:
b4:23:25:e7:15:0c:34:eb:de:a2:26:a8:46:19:ac:
21:f0:66:51:59:06:6c:09:f7:7f:7c:61:20:47:35:
75:54:b2:65:5b:ec:37:6c:97:4f:cc:87:93:d0:0e:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:5B:81:42:F3:51:B5:20:CB:94:1F:14:0F:34:0D:F0:E4:60:8A
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/M9NbgULzUbUgy5QfFA80DfDkYIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.72.0/22
Signature Algorithm: sha256WithRSAEncryption
40:1c:37:37:c0:6c:d8:a1:a0:e1:bf:aa:fd:58:56:2b:ca:3f:
7c:fd:3a:7e:99:bd:ed:da:a3:a2:89:7a:8b:a8:fd:b0:ee:30:
4b:62:62:19:9d:7e:a7:0c:d5:68:cb:e5:b0:d0:1d:64:40:f9:
22:e9:51:37:9c:04:56:ff:29:4f:69:5d:92:58:06:4f:a7:b9:
c5:93:2f:a3:14:53:97:ef:84:1a:1a:be:63:c3:43:2d:ea:65:
f3:d8:69:e2:5c:4f:75:1d:04:13:3e:35:d6:03:89:75:95:f5:
59:71:93:2f:b6:6e:43:31:09:e1:90:c7:43:e2:7c:28:0a:90:
eb:bd:02:39:32:2d:7f:84:d6:98:8b:45:cf:65:ee:6c:93:f7:
9f:b9:74:54:27:39:78:bc:48:1d:6c:f5:79:1a:e1:0c:4b:46:
07:f3:69:c5:c9:ff:03:69:6a:04:3f:cb:c5:4a:c7:49:27:ab:
55:16:a9:fc:e6:1d:8d:80:90:f5:43:08:8c:0d:50:e4:3d:44:
02:22:0e:bb:25:ff:6d:da:9c:92:cb:03:e2:82:59:4d:a0:24:
97:d9:f4:5f:04:b4:eb:45:80:a2:98:88:29:94:ca:23:58:06:
eb:4f:a6:52:6c:b8:9c:eb:f2:78:dc:f5:71:02:01:6e:2b:70:
10:00:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:02 2025 by rpki-client