Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/AJCNlZUtOjHyuC_8MfCZSzJvsNw.roa
File: AJCNlZUtOjHyuC_8MfCZSzJvsNw.roa (raw, json)
Hash identifier: gaqJTPqCzLIg9vI7vnSbDqrVY+VBzlKO3ZYWQwhhXoo=
Subject key identifier: 00:90:8D:95:95:2D:3A:31:F2:B8:2F:FC:31:F0:99:4B:32:6F:B0:DC
Certificate issuer: /CN=1048dd12120601282143285eba666b13b434798e
Certificate serial: 0112EB
Authority key identifier: 10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/AJCNlZUtOjHyuC_8MfCZSzJvsNw.roa
Signing time: Sat 15 Jan 2022 13:29:12 +0000
ROA not before: Sat 15 Jan 2022 13:29:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.134.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70379 (0x112eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1048dd12120601282143285eba666b13b434798e
Validity
Not Before: Jan 15 13:29:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00908d95952d3a31f2b82ffc31f0994b326fb0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:2d:6d:f1:8e:34:a8:54:c6:bd:ab:67:c2:
9f:bf:e9:27:05:22:0a:be:51:44:95:5e:87:fb:15:
ce:18:f0:4c:05:c6:11:48:af:ef:1e:0d:d5:45:2c:
d8:09:eb:76:ea:e2:dd:37:5a:f0:af:c8:3f:17:fd:
5a:96:cc:54:63:1d:96:81:cf:66:ef:86:8d:58:96:
af:6b:7f:1b:e9:83:24:43:d9:5c:1b:07:a2:66:12:
9b:2f:62:9a:76:39:73:e1:47:cd:8d:c5:82:95:c1:
46:85:7a:85:dc:31:07:7f:d2:1c:08:c9:20:0f:5b:
7a:6f:8d:7a:ac:5a:cb:7e:98:b8:d0:59:6c:be:0a:
3d:cb:51:f1:ef:60:38:93:c5:9f:8f:57:4e:a1:98:
40:52:64:17:e1:5f:25:d8:4e:74:39:36:bf:39:73:
b1:1a:6a:62:5d:a1:45:d9:4e:b1:5a:9b:a5:21:b6:
78:bf:c3:f6:81:61:72:7d:d4:6c:36:f3:c2:08:7e:
07:0b:0c:10:0b:bb:49:fa:15:28:3a:4e:46:46:1f:
70:db:2c:c9:55:31:81:a2:0c:49:df:e2:0f:a1:ea:
a5:aa:33:78:ec:43:89:37:8a:af:c8:65:0d:57:16:
7e:5b:a1:16:cd:4a:e4:6c:04:a1:e8:db:79:d4:ea:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:8D:95:95:2D:3A:31:F2:B8:2F:FC:31:F0:99:4B:32:6F:B0:DC
X509v3 Authority Key Identifier:
keyid:10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/AJCNlZUtOjHyuC_8MfCZSzJvsNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/EEjdEhIGASghQyheumZrE7Q0eY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:4f:b6:a0:64:11:02:8f:fd:20:7f:dd:e5:55:ea:9e:47:26:
f8:7d:b1:0f:55:05:97:82:fe:8f:6f:f0:40:ee:77:b8:c2:4c:
22:31:ca:ab:66:f8:67:47:79:7b:0b:5f:22:b5:a6:11:14:cd:
b4:ce:dc:84:33:41:18:f4:ae:c1:fe:e0:dc:c6:5b:96:e0:bf:
1d:7a:37:f2:b0:ac:24:f2:9c:7b:cf:eb:87:7c:24:8e:6b:15:
d7:5d:9b:aa:a4:ca:b5:ac:3d:d2:9f:24:1d:ce:4e:4e:18:f1:
0f:1d:cc:e4:0b:22:92:c7:2d:10:98:75:12:b4:44:7e:05:38:
da:7a:07:17:00:7d:d1:ba:18:e5:c2:a9:00:f9:94:a1:0b:50:
4c:f0:01:d5:78:e7:b6:e8:6f:fd:73:7a:d8:d1:c3:db:69:7c:
ac:9f:5e:3c:c7:a7:e0:da:4a:7c:6c:b5:14:64:0a:90:70:c0:
28:b5:b9:a1:5a:ac:cd:9d:ba:dc:24:1b:d6:56:b2:ee:db:09:
1c:8c:0d:fd:8e:30:f2:b4:de:ab:25:f2:ad:8f:e6:d5:8f:bc:
b4:f0:bd:9f:be:ef:f5:a1:d0:ba:19:43:5b:66:ea:09:2e:09:
21:10:eb:28:0a:51:09:05:9d:05:bd:9b:ee:2b:8e:e0:93:17:
09:0d:ce:de
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDARLrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NDhkZDEyMTIwNjAxMjgyMTQzMjg1ZWJhNjY2YjEzYjQzNDc5OGUwHhcNMjIwMTE1
MTMyOTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMDkwOGQ5NTk1MmQz
YTMxZjJiODJmZmMzMWYwOTk0YjMyNmZiMGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz7stbfGONKhUxr2rZ8Kfv+knBSIKvlFElV6H+xXOGPBMBcYR
SK/vHg3VRSzYCet26uLdN1rwr8g/F/1alsxUYx2Wgc9m74aNWJava38b6YMkQ9lc
GweiZhKbL2Kadjlz4UfNjcWClcFGhXqF3DEHf9IcCMkgD1t6b416rFrLfpi40Fls
vgo9y1Hx72A4k8Wfj1dOoZhAUmQX4V8l2E50OTa/OXOxGmpiXaFF2U6xWpulIbZ4
v8P2gWFyfdRsNvPCCH4HCwwQC7tJ+hUoOk5GRh9w2yzJVTGBogxJ3+IPoeqlqjN4
7EOJN4qvyGUNVxZ+W6EWzUrkbASh6Nt51OovxQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFACQjZWVLTox8rgv/DHwmUsyb7DcMB8GA1UdIwQYMBaAFBBI3RISBgEoIUMo
XrpmaxO0NHmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RUVqZEVoSUdBU2doUXloZXVtWnJFN1EwZVk0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85Mi83ODBkMDktZjBjZS00OTI1LWJkNjgtMDVhYzlmYjVjNGRjLzEv
QUpDTmxaVXRPakh5dUNfOE1mQ1pTekp2c053LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83
ODBkMDktZjBjZS00OTI1LWJkNjgtMDVhYzlmYjVjNGRjLzEvRUVqZEVoSUdBU2do
UXloZXVtWnJFN1EwZVk0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYYIMA0GCSqGSIb3DQEBCwUAA4IB
AQB6T7agZBECj/0gf93lVeqeRyb4fbEPVQWXgv6Pb/BA7ne4wkwiMcqrZvhnR3l7
C18itaYRFM20ztyEM0EY9K7B/uDcxluW4L8dejfysKwk8px7z+uHfCSOaxXXXZuq
pMq1rD3SnyQdzk5OGPEPHczkCyKSxy0QmHUStER+BTjaegcXAH3RuhjlwqkA+ZSh
C1BM8AHVeOe26G/9c3rY0cPbaXysn148x6fg2kp8bLUUZAqQcMAotbmhWqzNnbrc
JBvWVrLu2wkcjA39jjDytN6rJfKtj+bVj7y08L2fvu/1odC6GUNbZuoJLgkhEOso
ClEJBZ0FvZvuK47gkxcJDc7e
-----END CERTIFICATE-----
Generated at Mon May 12 11:03:39 2025 by rpki-client