Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/L2xP5kGC5l3IEX7lZZ9qycXt6CE.roa
File: L2xP5kGC5l3IEX7lZZ9qycXt6CE.roa (raw, json)
Hash identifier: lWfTyuXbLmsZXpV81n7c02H1EQBhDtBnxFeOxtJW0kg=
Subject key identifier: 2F:6C:4F:E6:41:82:E6:5D:C8:11:7E:E5:65:9F:6A:C9:C5:ED:E8:21
Certificate issuer: /CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Certificate serial: 01856FE70DF6ADDC93E9453758DF9CCFFEC0
Authority key identifier: 4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/L2xP5kGC5l3IEX7lZZ9qycXt6CE.roa
Signing time: Mon 02 Jan 2023 00:34:51 +0000
ROA not before: Mon 02 Jan 2023 00:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205836
IP address blocks: 45.92.184.0/22 maxlen: 22
45.92.184.0/23 maxlen: 23
45.92.184.0/24 maxlen: 24
45.92.185.0/24 maxlen: 24
45.92.186.0/24 maxlen: 24
45.92.186.0/23 maxlen: 23
45.92.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:0d:f6:ad:dc:93:e9:45:37:58:df:9c:cf:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Validity
Not Before: Jan 2 00:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f6c4fe64182e65dc8117ee5659f6ac9c5ede821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:03:5e:14:af:36:ea:47:a9:43:9a:b8:20:
be:29:3b:bd:38:ef:e8:04:64:d3:58:a1:81:3e:c4:
3f:1f:78:78:5b:08:ac:f9:4c:c7:b9:c2:3a:26:48:
c0:d0:95:0b:01:07:16:25:47:ce:66:a1:a9:90:23:
02:3f:cf:90:49:ed:a0:43:96:bd:19:7e:50:b4:07:
e8:f5:88:20:b4:73:cf:50:c2:a1:80:13:06:19:36:
fb:e0:93:13:b2:7b:58:f7:14:a5:62:da:81:a5:9e:
3b:be:82:70:44:da:c4:7e:49:a6:02:46:3a:c9:ef:
e7:cd:d4:97:e6:3f:37:62:e6:b3:65:4c:e5:37:d5:
f1:44:83:75:5f:9e:c7:85:0d:42:a3:71:c1:fe:e9:
5e:9d:e8:56:d2:a9:ee:51:61:f8:c9:08:ae:29:a1:
ef:95:cf:03:1c:27:43:dc:f4:59:e9:a4:59:6b:85:
55:bc:91:e8:49:16:08:b1:ba:1a:01:e9:9e:09:1a:
ce:65:d3:21:4c:bb:c0:ee:a4:b0:66:a5:74:e2:66:
ca:cf:68:91:79:fd:6a:98:8a:80:01:7c:3f:56:6c:
b9:7c:0f:d6:9a:20:7b:c1:cd:97:5d:10:b4:d9:67:
bb:2f:fb:38:7b:88:f5:e9:52:b9:c5:a9:7d:a9:30:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6C:4F:E6:41:82:E6:5D:C8:11:7E:E5:65:9F:6A:C9:C5:ED:E8:21
X509v3 Authority Key Identifier:
keyid:4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/L2xP5kGC5l3IEX7lZZ9qycXt6CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.184.0/22
Signature Algorithm: sha256WithRSAEncryption
34:44:c8:ae:73:68:ca:8d:bc:3a:2d:ed:36:bb:9b:9f:b8:f6:
e0:9d:c7:b9:a6:4f:0b:50:e1:84:e5:b7:21:cd:81:39:58:5a:
69:d5:ba:ca:2c:60:5f:61:71:72:21:c4:0f:34:6e:58:be:9f:
fc:d6:48:d0:a5:6d:65:e5:b7:f6:7f:5c:90:4f:1f:90:21:32:
98:52:ab:18:e7:b2:01:d2:84:4a:3e:5a:ee:53:dc:c8:89:f2:
c1:5d:da:b1:b9:70:80:9e:19:6c:26:a6:a1:e6:32:c4:fb:79:
65:97:69:45:34:d5:8a:4d:61:eb:7e:7c:97:ff:de:05:d1:b5:
c4:80:e8:c5:6d:83:87:b3:5b:76:d9:58:4a:1e:f4:b0:15:63:
9f:f6:88:42:b1:fa:71:5f:d6:9c:47:d7:51:8b:f5:9b:f2:e5:
49:b5:c7:c9:9c:61:28:26:ee:2a:c4:92:63:ce:48:1c:c5:18:
e0:87:90:be:3f:f0:45:cf:61:5e:e5:31:66:4f:96:70:7a:7f:
7e:59:dd:46:e4:70:e4:04:c2:2b:09:b8:08:fa:ac:73:f9:dd:
1d:dc:87:d5:fc:f2:f5:f8:fc:10:e8:5a:09:e2:39:ee:ae:08:
de:9d:bf:2e:eb:29:2c:75:c7:3e:5f:2e:33:ad:f6:dc:35:06:
55:34:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:31:38 2025 by rpki-client