Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/irIscEtMW7wUDwc_jX73mZGmgDY.roa
File: irIscEtMW7wUDwc_jX73mZGmgDY.roa (raw, json)
Hash identifier: GYzHbNbhG0WM1T4likEpev4kbQzCpDdQtfyeZ8vI/B4=
Subject key identifier: 8A:B2:2C:70:4B:4C:5B:BC:14:0F:07:3F:8D:7E:F7:99:91:A6:80:36
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 0194266B68D599356D32821EA86B39489007
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/irIscEtMW7wUDwc_jX73mZGmgDY.roa
Signing time: Thu 02 Jan 2025 09:49:20 +0000
ROA not before: Thu 02 Jan 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213027
IP address blocks: 45.92.48.0/22 maxlen: 22
45.92.48.0/24 maxlen: 24
45.92.49.0/24 maxlen: 24
45.92.50.0/24 maxlen: 24
45.92.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:68:d5:99:35:6d:32:82:1e:a8:6b:39:48:90:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab22c704b4c5bbc140f073f8d7ef79991a68036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:3c:d8:d2:fd:16:54:84:40:a5:62:5b:bb:
71:ac:e7:11:b2:fc:ab:3d:0c:fe:3c:dd:67:63:a3:
c1:c1:9c:8a:fc:0c:b8:5f:b3:6b:30:19:51:30:ad:
6d:55:b6:5c:eb:9c:c9:31:fb:7b:7d:f3:ff:39:7e:
ed:3b:fe:de:3d:ad:0b:60:c8:0f:b8:fe:db:4c:b6:
51:59:2e:43:cb:22:76:2a:79:18:b6:17:70:25:cf:
69:2f:cc:87:25:76:54:a7:d1:0d:df:dc:62:9d:38:
ff:54:d9:f8:09:29:68:19:44:51:ab:45:a2:6d:db:
e5:0d:11:39:50:cb:bd:86:d3:84:ad:38:fa:bc:c4:
ac:23:67:41:d1:4c:2b:19:46:19:85:75:6d:d1:6e:
f4:cd:e9:88:d8:9c:44:02:e6:e1:32:3b:0b:10:d0:
8b:05:8f:b5:17:16:1e:2e:33:98:e1:8b:e4:2c:7e:
e8:12:93:b1:61:7e:5a:ba:7f:44:79:a1:dd:a0:5e:
9d:de:3c:a0:bb:47:e1:5b:93:48:a4:5e:9e:35:9b:
0b:70:49:ba:0e:8a:86:3c:2d:74:5e:ed:dd:0f:7e:
90:b8:e1:10:73:9d:8b:92:d9:3d:3d:32:fa:c3:47:
e3:0d:0a:ee:cc:01:d9:1d:0e:88:04:67:39:4e:a7:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:2C:70:4B:4C:5B:BC:14:0F:07:3F:8D:7E:F7:99:91:A6:80:36
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/irIscEtMW7wUDwc_jX73mZGmgDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.48.0/22
Signature Algorithm: sha256WithRSAEncryption
16:e9:04:9d:a1:bc:5e:04:50:fd:98:4d:f8:b2:b4:4a:aa:68:
5b:34:d4:a4:99:df:b1:cf:c7:21:94:0b:d7:17:10:81:81:1d:
bb:0f:1d:fd:4b:9c:70:bd:8a:50:84:79:72:9c:58:5c:77:25:
87:00:fe:69:0f:11:10:0c:b6:7f:4d:85:c6:f7:11:dd:dc:ee:
a5:75:cc:c4:b5:d3:f7:17:c4:31:74:51:84:9f:dd:79:b9:89:
f7:34:80:3f:21:99:0b:5e:5c:d5:f5:e4:a0:4d:10:e9:f1:1f:
6f:7e:c4:9b:5e:88:8b:28:61:c7:22:3d:96:13:57:5d:1b:61:
0b:c5:68:87:6d:ee:e7:56:eb:f2:a7:82:46:1e:a9:3c:fb:92:
a5:f5:d2:e3:0d:5e:b1:09:1b:36:0e:06:63:a9:07:2f:30:2c:
48:ef:4c:7b:c0:fd:f6:ef:2b:3a:8d:d8:79:d5:08:7f:ab:f2:
1b:74:c4:50:a4:12:b3:61:7d:c6:fc:cf:8f:1c:34:ec:19:23:
9b:62:35:3b:da:24:d6:05:db:3e:2e:70:c3:09:79:f9:11:17:
78:c3:1c:51:d1:24:6d:fc:45:64:b3:10:1b:1b:c9:3d:6a:2e:
aa:7b:0e:a3:e0:e7:8d:99:65:59:6d:bf:a0:1a:81:ef:3b:cc:
fd:45:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:17 2025 by rpki-client