Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/_4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa
File: _4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa (raw, json)
Hash identifier: 2z2Ynum4MWOgBN264LV/zt9+ZOq8rZ9Pv93EhuMN5M8=
Subject key identifier: FF:88:F3:56:4C:3B:3A:66:7D:94:9C:2C:BF:FB:DB:9D:7A:64:92:91
Certificate issuer: /CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Certificate serial: 0194274858C532130C28306E01CE97BCF659
Authority key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/_4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50628
IP address blocks: 45.144.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:58:c5:32:13:0c:28:30:6e:01:ce:97:bc:f6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff88f3564c3b3a667d949c2cbffbdb9d7a649291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:42:69:13:00:44:30:71:7a:48:7e:21:e7:
13:e1:00:6e:6b:75:7d:9e:7f:dd:6c:35:93:88:c9:
2f:06:c6:54:6e:82:fc:a5:de:08:54:c2:3f:4b:2b:
db:97:02:07:39:70:d5:ca:22:23:5b:55:88:6f:01:
db:70:d5:b7:bf:89:97:de:33:48:d9:a1:c9:be:ce:
6c:b2:59:f4:91:ed:5d:e5:84:a6:98:89:15:c3:05:
3f:c8:ce:0d:10:56:47:ef:1a:5e:7c:37:99:01:6a:
e8:4c:7e:5b:70:7a:4b:c1:aa:f5:71:9c:b7:d1:a8:
92:65:61:e8:15:1c:9f:14:55:0d:07:34:c1:7a:d6:
75:c4:c7:ee:6f:f7:e7:a6:86:d7:66:55:0c:f4:3b:
9b:aa:1f:3f:56:2d:55:2f:9f:4b:57:95:f1:50:b8:
e4:e2:73:f4:e5:d4:e0:8a:89:cb:79:e5:64:ea:4c:
80:cf:75:24:f7:83:09:ec:25:c0:04:20:af:22:4b:
61:8e:74:f0:2d:53:9a:b7:bc:21:66:a4:bf:f3:37:
f3:e3:37:b6:c6:12:fc:fc:80:3c:3c:eb:50:6b:0f:
41:85:9d:24:97:7b:46:a6:02:80:b7:29:c0:8b:54:
ca:7b:f9:19:b2:81:8b:ee:30:27:2b:d0:a8:07:9b:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:88:F3:56:4C:3B:3A:66:7D:94:9C:2C:BF:FB:DB:9D:7A:64:92:91
X509v3 Authority Key Identifier:
keyid:9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/_4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:08:2d:a9:c1:5c:02:83:4a:88:73:59:9d:b6:69:16:72:a0:
44:4f:78:0c:a5:8b:f5:6a:31:79:ec:97:24:3c:15:3f:9d:8e:
9b:5a:8c:f4:38:d1:5f:87:8e:04:60:05:e8:1a:32:93:5d:68:
9c:7d:54:81:de:4d:1d:89:0e:67:b9:bf:07:16:81:48:17:1f:
27:09:e1:de:d7:ca:ce:f2:56:0b:a6:0c:dd:a8:3d:63:d5:46:
1d:11:b7:c1:3a:0b:8e:5b:64:07:37:ff:3d:53:49:e3:76:6f:
d0:b9:e6:90:9b:48:9e:9c:55:0a:a9:02:0c:c8:ac:90:02:be:
46:20:f0:0e:49:b3:f5:bd:03:6d:77:c1:d6:a5:65:e3:d0:6b:
02:28:3c:0b:44:04:1b:5f:26:80:3b:95:1e:36:df:97:91:61:
84:86:be:3b:3d:41:88:d9:52:c8:32:09:0d:86:ff:3e:d2:4f:
7b:35:25:5a:7b:b7:50:4c:e6:ec:86:aa:23:ca:4d:83:af:a1:
66:4f:ef:eb:c3:d3:63:3d:32:4c:1d:4e:1b:0a:33:5f:47:13:
98:8b:3c:b5:83:ea:60:bf:ff:e4:f9:4c:bc:4f:51:8f:f3:2a:
8f:79:ba:c5:9f:89:35:37:94:bf:a9:93:4f:97:21:39:bd:48:
4f:12:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:51 2025 by rpki-client