Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/T_blfu8jnJfRmxSwPYqYvgZ_3dw.roa
File: T_blfu8jnJfRmxSwPYqYvgZ_3dw.roa (raw, json)
Hash identifier: oFlVRHtMx+5jUNRuxbzpCk33312cwb33zbYi0BC/FUk=
Subject key identifier: 4F:F6:E5:7E:EF:23:9C:97:D1:9B:14:B0:3D:8A:98:BE:06:7F:DD:DC
Certificate issuer: /CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Certificate serial: 018419FA65E851496CB04A246752FD16B16F
Authority key identifier: 9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/T_blfu8jnJfRmxSwPYqYvgZ_3dw.roa
Signing time: Thu 27 Oct 2022 15:05:50 +0000
ROA not before: Thu 27 Oct 2022 15:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202813
IP address blocks: 45.156.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:fa:65:e8:51:49:6c:b0:4a:24:67:52:fd:16:b1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af4f122622fc3bb6fb83b7c8269036eda62466f
Validity
Not Before: Oct 27 15:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ff6e57eef239c97d19b14b03d8a98be067fdddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:25:d3:5c:79:bf:6a:00:74:91:28:c6:33:
4b:05:73:95:96:90:4a:27:27:ad:05:6a:31:41:f8:
1d:e9:5d:ed:a9:1b:a7:8a:0c:e6:dd:1f:d8:ec:68:
04:bb:ee:0a:09:b0:f0:58:88:dc:81:47:c1:12:d7:
c1:d5:64:0f:86:6f:98:d2:52:3c:8b:e1:73:50:1b:
45:a5:3c:1a:bf:0c:1e:41:4d:d0:f5:e5:cd:be:b5:
84:6c:cc:b4:13:69:76:b2:eb:1c:be:f7:fb:b2:e3:
bd:2b:6e:53:76:0c:57:87:48:66:a6:52:7c:45:9a:
54:e5:83:dc:94:64:68:0b:23:29:ca:fa:c6:91:72:
c8:1f:0d:69:5f:e5:41:cd:eb:ed:e9:99:a3:23:d5:
09:16:23:a0:fc:cd:04:34:0a:ce:b4:c7:56:df:60:
13:be:4d:53:88:25:35:bc:7f:ee:8f:98:70:1e:48:
3d:32:1e:33:8b:e4:21:2d:42:6b:53:ad:60:e6:8e:
b2:ec:9b:58:f6:81:bd:fe:8a:1a:c8:d0:e9:39:94:
fc:46:ee:ea:7d:e8:fb:81:c6:5d:ab:c1:83:56:c7:
ae:19:c7:83:25:6d:03:7c:03:5c:56:d0:bc:4f:52:
db:38:50:33:f5:c5:2f:eb:29:58:9f:5c:0c:32:26:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:E5:7E:EF:23:9C:97:D1:9B:14:B0:3D:8A:98:BE:06:7F:DD:DC
X509v3 Authority Key Identifier:
keyid:9A:F4:F1:22:62:2F:C3:BB:6F:B8:3B:7C:82:69:03:6E:DA:62:46:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvTxImIvw7tvuDt8gmkDbtpiRm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/T_blfu8jnJfRmxSwPYqYvgZ_3dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eadacb-e4a4-41f9-89ed-c5718bde6751/1/mvTxImIvw7tvuDt8gmkDbtpiRm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
98:8c:97:dd:66:9f:bf:dc:8a:1d:1b:fd:29:60:b1:9f:62:28:
98:37:97:4b:58:f5:93:aa:03:84:77:62:fe:1e:5c:98:a4:75:
7a:73:f8:ee:24:98:ed:71:b6:82:0e:4d:9c:14:12:d9:e4:70:
5e:5b:5a:e4:26:52:7c:e8:d6:74:f0:0f:8a:d0:53:0d:81:b3:
52:89:bf:39:d3:6d:8d:37:bb:1d:c9:45:19:73:31:22:2f:10:
4c:3d:05:ca:2d:84:e2:84:6f:b7:1a:04:0f:f5:b2:2f:16:bd:
a8:16:5a:a5:25:87:34:fd:f5:40:e2:e0:ef:bc:4b:9b:50:00:
b1:0c:60:92:6e:07:5c:06:16:12:b7:b3:6a:7e:15:e8:9b:19:
f5:49:1e:d5:c8:3c:e0:11:cb:0a:48:4f:98:89:27:1c:27:79:
92:b0:68:59:f3:99:1f:0d:06:2d:d3:b7:45:10:6c:16:66:b9:
4c:3e:b9:3b:9e:60:7a:6e:d5:db:c8:96:f8:dd:d2:a3:ac:b0:
1c:90:c6:65:91:6b:f2:73:03:5a:84:fc:33:7c:ba:50:82:ce:
d7:44:04:4b:5b:af:fa:89:4b:55:39:ca:e9:8c:ed:fb:2e:5a:
4e:f6:3c:aa:5a:f6:8e:27:2d:c2:0b:15:a2:d9:4b:e6:ce:e8:
ad:bf:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:34:30 2025 by rpki-client