Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/uOhwShmDeJ2G19i1IJhpD4edfyo.roa
File: uOhwShmDeJ2G19i1IJhpD4edfyo.roa (raw, json)
Hash identifier: ivaTWJT7xMaZQZ5BwLvBcdHbQ8kLqNAS8vi022+zA2I=
Subject key identifier: B8:E8:70:4A:19:83:78:9D:86:D7:D8:B5:20:98:69:0F:87:9D:7F:2A
Certificate issuer: /CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Certificate serial: 01867BDB
Authority key identifier: 69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/uOhwShmDeJ2G19i1IJhpD4edfyo.roa
Signing time: Sat 01 Jan 2022 06:55:06 +0000
ROA not before: Sat 01 Jan 2022 06:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
2a0e:5040::/29 maxlen: 29
2a0e:5040::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25590747 (0x1867bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Validity
Not Before: Jan 1 06:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8e8704a1983789d86d7d8b52098690f879d7f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:95:61:2d:5b:1f:71:02:e8:15:12:dd:89:
67:0c:8f:da:15:54:9a:f9:94:f4:b7:23:28:72:cf:
4b:da:49:00:46:a7:59:2c:49:6d:b6:4b:6a:b0:26:
be:4d:85:8a:fa:8f:56:ae:9b:a7:1d:66:c1:a3:d6:
7d:0b:22:5e:63:df:84:63:2d:a1:bc:0a:7a:26:86:
c8:86:c5:75:86:d1:c1:8c:c2:76:6d:7b:dc:38:aa:
5f:c2:ef:45:f6:94:d2:77:4c:6a:a6:62:68:21:d9:
58:f6:65:46:dd:69:51:31:74:a2:7c:4c:06:4f:0b:
af:29:79:7a:ba:b8:b6:ab:f1:5c:e7:d0:37:0c:8e:
da:37:36:8b:8a:d2:b8:df:ad:0f:8e:8d:7f:be:5d:
70:86:2c:10:8a:49:22:c7:1c:fe:23:fa:d0:57:92:
6e:ea:57:b2:33:4d:d1:8c:60:d8:0e:0c:1b:83:79:
7d:e8:86:0e:d1:19:00:98:8e:c5:2e:57:6a:e3:26:
65:f9:04:08:2c:44:12:1a:3f:01:cf:61:5a:1b:a1:
de:61:64:bf:5a:c4:1e:83:21:78:e2:2c:9b:b9:6f:
01:07:bc:40:58:f7:89:bf:ed:5f:a8:22:f6:db:a9:
d6:c9:08:90:50:f3:e2:43:cf:48:b9:0f:e8:da:7e:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:70:4A:19:83:78:9D:86:D7:D8:B5:20:98:69:0F:87:9D:7F:2A
X509v3 Authority Key Identifier:
keyid:69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/uOhwShmDeJ2G19i1IJhpD4edfyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
Signature Algorithm: sha256WithRSAEncryption
89:6c:2f:ef:ad:46:f8:37:21:a5:39:94:30:85:c2:6a:1e:d8:
ed:85:6c:43:0f:5a:4a:65:15:21:12:2b:0a:19:43:a0:9d:9f:
0a:12:1a:09:d9:bc:47:cc:8d:82:37:7e:07:b6:5b:49:2a:6a:
c7:18:a3:6a:1a:a6:fa:61:c8:bb:28:15:eb:a9:e3:f9:59:3c:
86:e8:30:bb:26:84:3f:75:f6:69:26:f4:d8:e8:25:f6:d3:f7:
f6:db:a6:bc:bb:24:28:c1:31:d3:84:7a:74:c1:21:77:79:0c:
91:00:e2:00:aa:e7:f8:d7:a8:dc:4a:54:6b:90:97:29:7d:04:
fa:a8:5a:7c:97:0c:df:9a:14:9a:d1:80:86:a5:41:08:aa:44:
b7:3c:49:b6:76:5f:a8:cf:94:35:1c:c9:f1:a4:ca:af:de:97:
9c:84:3c:15:63:39:22:18:18:3f:da:72:cb:e4:7f:7d:f8:68:
f4:a0:6a:e9:f0:c3:ab:a7:e6:4e:5c:c6:21:38:4b:60:cd:36:
a9:57:9e:70:b0:91:a8:1c:b5:83:5c:76:ca:1b:a2:fe:39:6a:
2e:30:3c:f9:44:ab:76:08:91:d8:98:26:f8:fd:a5:f1:32:56:
e4:a9:6e:91:08:f1:5d:4c:e8:7c:0f:4d:a8:42:65:43:38:d7:
a4:48:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:11:08 2025 by rpki-client